The SASE market represents an important convergence of networking, cloud, and applications security functions. Applications have moved to the cloud; hybrid working has become the norm and legacy network architectures are not delivering what today’s business customer needs. Carriers are rushing to fill the gap by re-selling solutions from existing SASE Service Providers (SSP).
These SSPs ultimately threaten to consume the carrier’s lucrative enterprise business. Recognizing this, Benu Networks purpose-built a SASE solution for carriers that they can purchase and deploy as their own service with much better margins and more control.
Secure Access Service Edge (SASE)
Innovators Rely on Benu Networks
Gateway and Benu Cloud Administrator
Benu Networks’ SASE architecture is flexible, scalable and easy to deploy. The Benu Cloud Administrator manages users and applies policies and security settings. Built with a focus on ease of use through a well-designed UI/UX interface with powerful data visualization, the combination of our cloud-based administrator and our cloud-native gateway enables carriers to get to market quickly.
Like all functions delivered from our SD-Edge platform, our SASE Gateway is cloud-native and deployed via software running on commercial off the shelf hardware. It can operate as a standalone gateway for SASE services or can be deployed as part of our vBNG.
Our SASE Gateway supports the separation of the control plane from the user plane (CUPS) providing elastic scalability and great economics. It can be deployed as a network appliance on bare metal, running on virtual machines (VNF) or running in containers in a cloud-native Kubernetes environment (CNF).
Our Solution Secures Cloud-based Apps as well as Those Delivered over Existing MPLS VPNs
SSPs deliver SASE service by using SD-WAN for connectivity and while many business applications have moved to the cloud (SaaS), several remain at headquarters and interoffice communication (branch-to-branch or branch-to-HQ) still rely on private networking services like MPLS VPNs. This is a high-revenue business for carriers.
The best of both worlds is to offer a hybrid, integrated solution with both traditional Wide Area Networking like MPLS VPN service combined with a SASE solution for cloud-based applications. A solution that can protect the carrier’s existing revenue stream while they work with enterprise customers on a strategic and timely migration strategy. One that they own (not resell) so that they can deliver the highest value to their customers.
That is exactly what the Benu Network SASE Solution provides. Our software-defined SASE services run inside the carrier network, providing the industry’s only carrier-first SASE approach. We can apply security policies to cloud-based applications and applications connected to remote locations by MPLS VPNs.
Unlike the SSPs, we don’t compete with carriers. Rather, we enable carriers to compete with the SSPs.
Benu Networks SASE Features
Our SASE solution has a broad suite of features ranging from residential-focused capabilities like parental controls, all the way to more advanced functionality, like firewall, denial-of-service (DOS) protection, malware and phishing protection, IOT security, Guest Wifi, bandwidth management, VPN, and Static IP.
One unique aspect of our implementation is the ability to integrate with 3rd-party security platforms like Palo Alto or Fortinet. Many enterprises have existing relationships with these companies and are not going to forgo the functionality or capabilities delivered by them. Their investment in a security vendor can be leveraged as part of the SASE solution, giving them a consistent security platform for all aspects of their business.
Our ability to integrate with third-party security vendors enables carriers to deploy our SASE solution platform across a broad-base of customers from residential to small to medium business (SMB) to large enterprise, regardless of their preferred security vendor brand.
Benu Networks SASE Management Model
One of the highlights of Benu’s SASE implementation is our management model.
We provide multi-layered governance that allows the Carrier to maintain a “super-admin role” while giving their internal business unit teams, channel partners, channel partner customers, and end users their own levels of appropriate control.
For example, Carriers may be offering the service through a direct sales model and a channel sales model using Managed Service Providers. Those MSPs will want to be able to view and manage their end-user customer’s accounts and services. In turn, each of those end user customers may have IT managers who want to be able to manage their individual company security needs.
This is all possible with our Management Model which is pre-built with a variety of tools for managing accounts, users, SASE infrastructure and policies. Our solution is intuitive, easy to use and simple to navigate.
Benu Networks SASE Administrator
Powerful Data Visualization and Ease of Use
The Benu SASE Administrator tool is intuitive and easy to use. Carriers, channel MSPs and the enterprise customers all get their own SASE Administrator with a dashboard showing key statistics and data for networks under their control. The dashboard provides an immediate view of network usage, active users, devices and applications.
Via drop down selections, the administrator is able to set up accounts, change individual settings, apply policies and manage permissions specific to the level of control appropriate to their authorization.
As the top level “super-user,” the carrier can see and manage all users, the channel MSP manages just the accounts under their control, and the enterprise IT manager has control over just their individual company. To simplify the implementation for carriers, Benu Networks has already built the user interface for these different levels of management and the tools are cloud-hosted enabling carriers to get to market quickly.
Enterprise IT Managers Can Manage Their Company’s User Group and Sites
Enterprise users have control over their own company account across multiple company sites and multiple organizations.
The IT Manager can define and set up user groups, each with their own access, policies, permissions and security settings.
The dashboard provides a consolidated view of threats, usage, sessions, device attach rate and devices online with the ability to choose any user group and drill down into details on that specific organization.
Our powerful reporting tool makes it easy to review specific information needed for decision making and performance tracking.
Easily Administer Users, Policies and Security Profiles
Information and policy setting are visually organized using tabs in our SASE portal.
Setting Security profiles is as easy as clicking a radio button to apply a specific policy to a given user group and user groups can have different permissions and policies set according to their needs and responsibility. For example, Finance often has different needs than Engineering or Sales.
Our SASE solution protects organizations with functionality including full URL inspection (not just DNS domains), providing web security and malware protection, content filtering phishing protection, data correlation for contextual, predictive threat intelligence and many more.
Our SASE Solution is as powerful as it is easy to deploy and to manage.
Business Site SASE Solution
Packaged for the SMB Marketing
Deliver Reliable, fast connectivity and value-added services for business accounts, anywhere from Guest Wi-Fi to Firewall.