The Best Router Security Configurations for Your Business WiFi Network

Aashish Yadav | June 28, 2022 | 311 views | Read Time : 06 min

WiFi Network

Wi-Fi and the Internet have become an indispensable part of our daily lives. Because of the importance and convenience of a business Wi-Fi network, it is now a must-have service for most businesses. Unfortunately, numerous small-to-medium-sized businesses lack the resources and cyber skills required to appropriately secure their networks. This can be a major issue because an unsecured network exposes the company to attacks from hackers looking to steal valuable company information or customer data.

How Can Businesses and IT Leaders Strengthen Their Wi-Fi Security?

A data breach can cripple your business. It not only undermines consumer trust, but data breaches cost an average of $4.24 million. Fortunately, improving your Wi-Fi security is not difficult. To safeguard your company's wireless Internet connection, follow the steps outlined below.


Use Up-To-Date Wi-Fi Encryption

You should upgrade your hardware if it can only support WEP or WPA encryption. The Wi-Fi Alliance strongly encourages the widespread use of WPA2. Cutting-edge encryption has been demonstrated to be protected against even the most persistent attackers when correctly implemented. If you run an enterprise environment, you should take advantage of the extra security provided by specific digital certificates.


Encrypt Wi-Fi Router Administration Pages

Taking your Wi-Fi security a step further needs the use of a Wi-Fi digital certificate to secure your admin login pages. Self-signed certificates that come pre-installed on a few routers are untrusted, easy to copy, and prone to Man-In-The-Middle (MITM) attacks. TLS certificates from reputable certificate authorities can ensure that all of your Wi-Fi connectivity is safe and confidential. If your router's quick start guide does not contain digital certificates, you can obtain information on the manufacturer's support page.


Consider Restricting MAC addresses

Smaller network managers can lock down MAC addresses for more control. Wireless routers and access points use MAC (Media Access Control) address filtering to block attacks. Every WiFi-enabled device has a unique MAC or physical address and a list of connected devices. You can manually enter addresses to define network access, but hackers can fake MAC addresses.


Use Always-On SSL

You must utilize HTTPS across your website and apply it to Wi-Fi. Accessing an account on an encrypted page and subsequently interacting with the site through unencrypted pages exposes the user to session-side jacking.


Create a Guest AP with Tighter Security

Not all businesses must enable guests or customers to connect to their networks, but some companies do offer guests access by providing them with guest login credentials. If your company falls into this category, set up a dedicated guest AP that is isolated from the rest of the company network.
You can set up a second AP on your router and utilize a firewall to limit access from that AP to certain services that you want your visitors to be able to access.


Closing Lines

Nowadays, having an internet connection is critical for organizations, as is keeping it secure from hackers. Moreover, when conducting business, it is crucial to keep critical information and customer data secure.
Otherwise, you risk compromising your company's image. So, if you want to maintain your Wi-Fi network security and keep your business working effectively, you must adhere to a few fundamental principles.
Finally, you are on the path to make your Wi-Fi network safer and more robust by following all of these techniques at once or step by step.

Spotlight

Agari

Agari, a leading cybersecurity company, is trusted by leading Fortune 1000 companies to protect their enterprise, partners and customers from advanced email phishing attacks. The Agari Email Trust Platform™ is the industry’s only solution that ‘understands’ the true sender of emails, leveraging the company’s proprietary, global email telemetry network and patent-pending, predictive Agari Trust Analytics to identify and stop phishing attacks.

OTHER ARTICLES
5G

Edge use cases need a 5G and beyond user plane

Article | May 13, 2022

Emerging virtual and hybrid private 5G solutions are enabling communication service providers (CSPs) to address a large number of new consumer and enterprise edge use cases. Each of these edge use cases will require a specific network deployment model and edge user plane connectivity. That’s why we’ve designed our 5G edge user plane to tackle five distinct key capabilities: support of flexible network deployments, 3GPP dual-mode support, integrated Gi LAN services, integrated probing with edge analytics and edge exposure enablement. Let’s dive into this blog post to learn how the powerful 5G edge user plane is unlocking new 5G edge use cases. How technological innovation creates value and benefits society has always interested me, influencing my work as a mobile network technologist and sales professional. Since mobile data was introduced in late 90s, both mobile network technology and mobile consumer use cases have evolved enormously. Indeed, a rapid increase in connectivity speed and the introduction of smartphones have pushed the market to adopt mobile web and video and create thousands of new applications. However, sometimes ‘killer use cases’ require both business case and application ecosystem maturity. One example is video conferencing, one of the key services 3G was designed for but was only introduced when the over-the-top (OTT) vendors disrupted the content provider market and popularized social media. Creation of mobile technology has indeed its own innovation cycles and research feeds and therefore can't depend on market pull, but you can draw the conclusion that the time to value greatly benefits when the broad business and technology ecosystem in the value chain collaborate and co-create solutions. Precisely, what’s really exciting about 5G is that it coincides with the maturity of other two disruptive technology enablers for end applications: artificial intelligence (AI) and cloud edge computing. It also comes at a moment when there’s both an urgent need and huge financial support to digitalize society and industry. In fact, more than ever, we are witnessing a close collaboration between technology and business ecosystems. Over the past few years, there have been a large number of public-private consortiums to feed service requirements into 5G standards, explore and validate the value of 5G technology. For example, just to name few, the 5G alliance for connected Industries and automation (5G-ACIA) or European 5G infrastructure Public Private Partnership (PPP) projects. For years, 3GPP standards have been preparing to define advanced 5G connectivity solutions for edge computing and vertical digitalization use cases. In addition, all sorts of consumer and enterprise edge applications are being developed at the same pace in many areas such advanced video processing, AI analytics, immersive gaming, smart grid applications, automated guided vehicles (AGVs) controls or industry automation. The edge ecosystem is particularly complex and involves different players. One key pillar is the wireless connectivity service CSPs offer. 5G-ACIA introduced the concept of virtual private and hybrid private 5G solutions, two emerging solutions that CSPs are exploring to complement their private 5G network offerings. Such solutions allow CSPs to leverage their existing public networks and offer new services in an agile and cost-effective manner using new 5G capabilities such as network slicing. In order to address edge use cases, virtual and hybrid private 5G solutions need to bring the user plane connectivity to the edge by deploying 5G edge user plane functions. The 5G edge user plane supports flexible network deployments One key learning from industry experimentation with 5G is that each use case brings a unique combination of connectivity requirements, in terms of end-to-end performance (uplink and downlink latency, jitter, packet loss and throughput), data privacy and security, robustness, wide vs local area coverage and mobility. Latency and security requirements drive the selection of the edge location, which can be the enterprise premise, CSP access or regional data center or even the extended public edge such as content delivery networks (CDN) content provider or a hyper cloud provider’s (HCP) edge data center. For example, a mobile gaming application can be located in the CSP regional data center or HCP edge, whereas video processing and AI for a factory automation application is located on the factory premise. Also edge distribution can be accounted by CSP for those use cases which produce significant amount of data such as fixed wireless access (FWA) to optimize backhaul costs. Ericsson has a vast experience supporting and driving the ecosystem to realize time critical communication use cases at scale and has conducted detailed latency analysis for different type of deployments. The RAN deployment needs to be carefully planned according to the specific use case performance characteristics. Some use cases can be achieved with existing macro RAN environment -4G or non-standalone 5G-, with macro RAN standalone 5G with or without dedicated quality of service (QoS) profiles or even may require network slicing to partition macro RAN. In contrast, some other use cases will need dedicated RAN deployments. In addition, most use cases will benefit from a dedicated edge user plane function, as it provides a higher level of performance and robustness. In summary, the concrete edge use cases to be offered and CSP’s own solution preferences drive the type of network solution and deployment, which can be a private 5G network, a virtual or a hybrid 5G private network using existing macro or dedicated RAN, with or without network slicing. The edge 5G user plane function should allow for such deployment flexibility and enable the different edge use cases characteristics. Ericsson Local Packet Gateway (LPG) addresses this by: Supporting any access technology, radio deployment model and RAN vendor Seamlessly integrating with Ericsson’s existing dual-mode 5G Core. which is prepared for slicing, efficient routing to edge (also called edge breakout) and advanced QOS and many other 5G edge features described in more detail in next section. Supporting a fast time to service, deployment simplicity and a very low footprint enabling deployment at scale in any type of edge location, up to on enterprise premises. See our previous LPG 5G edge user plane: key requirements for success for details. Providing a high level of robustness and failure resilience by means of a cloud native user plane application designed for high availability and fault resilience, support of geo-redundancy and support of 3GPP control plane and user plane split (CUPS) interface which can be deployed in full mesh with multiple control planes. User plane can also be deployed as a dedicated function within a slice to secure further characteristics and isolation or as a shared function for various slices. 5G edge user plane should enable transition from 4G to more sophisticated 5G connectivity Most of CSPs are embracing edge opportunities. They are viewing the opportunities as an evolution of their existing offerings rather than a revolution, meaning existing 4G enterprise use cases will still need to be supported for some time as the ecosystem matures to support time-critical communications type of use cases. This means 5G edge user plane should be dual-mode and support such a wide breadth of technology. 5G edge user plane should support both 3GPP compliant serving/packet gateway user function (S/PGW-U) and user plane function (UPF) and evolve with advanced UPF features for time-critical communications, such as more stringent end to end QoS and transmission robustness for ultra-reliable low latency communications (URLLC) or Ethernet connectivity for advanced edge industrial use cases. It should also support 5G peak rates and do not degrade use cases performance characteristics. It should also support dynamic edge routing solutions which are efficient, deployable by multipurpose terminals and mobility proof such as dynamic network slice selection which is preferrable to UPF as uplink classifier as starting solution until standardization evolves. 5G edge user plane should work in conjunction with the CSP’s dual-mode core system, which supports dynamic slicing orchestration, dynamic slice selection, ultra-reliable low latency communications and advanced 5G edge connectivity features such as different service continuity and user plane re-anchoring modes depending on mobility and application resilience needs. Ericsson’s dual-mode 5G Core with Local Packet Gateway provides such advanced 5G connectivity in a pre-verified manner. In fact, the Ericsson Local Packet Gateway Cloud Native Function (CNF) is based on the same software as the Ericsson Packet Core Gateway (PCG), the market leading cloud-native user plane, which is deployed in 5G live networks today. Such deployment flexibility in edge user plane allows CSP to offer distinct use cases. For example, CSPs can offer mobile gaming service by deploying a cloud virtual reality (VR) gaming center application in their regional data centers. Connectivity with guaranteed low latency QoS can be provided by a dedicated 5G network slice with the dedicated Ericsson Local Packet Gateway, deployed close to the gaming application and connected to the CSP’s existing central core network. The mobile gaming application can use a portable device such as VR glasses or use a multi-purpose smartphone or tablet that supports dynamic slice selection. CSP can reuse their existing public network and macro 5G RAN. As another example, CSP can offer 5G edge connectivity to factories or logistic centers for augmented reality (AR) quality inspection. The AR application is deployed on the factory premise and needs an ultra-reliable and low-latency QoS connection to process in real time all the factory images. This is provided by a dedicated Ericsson Local Packet Gateway with ultra-reliable low latency QoS and redundant configuration being deployed on premises. Edge use cases will require user plane services beyond 3GPP There is a set of non-standardized user plane functions deployed in today’s networks (also called GI/N6 LAN functions) for mobile broadband service that would be also relevant for edge use cases. These functions can be categorized as: Traffic acceleration and optimization of access resources e.g., transport layer optimizers or advanced video traffic shapers Network services e.g., carrier grade NAT devices or external load balancers Service aware traffic monitoring and enforcements needed to realize customized CSP charging data plans or comply with some country regulatory such as content filters Network security functions protecting CSP infrastructure and UEs of security attacks such as subscriber firewalls or distributed denial (DDoS) mitigation systems, and Service chain policers and forwarders to chain and offload these GI/N6 LAN functions. Those can be integrated with operator policy framework to compose and program a unique data pipeline which addresses the specific connectivity needs of a given subscriber and application in the context of a certain use case The current GI/N6 LAN market is very fragmented and addressed by many different vendor specific user plane functions. These functions are deployed as separate appliances or virtualized functions, each with their management system, policy integration and cloud orchestration system which significantly increases CSP’s total cost of ownership (TCO) when deploying and managing them. As CSPs start their edge journey they will need to bring some of these GI/N6 functions to the edge. A very simple and cost-efficient strategy to consolidate these functions in one single edge user plane function. This approach is being adopted by Ericsson Local Packet Gateway: it integrates these functions, including advanced integrated Packet Core Firewall, together with the UPF/S/PGW-U functions. This dramatically reduces the TCO and provides a single hop to the end application, which reduces further the latency. Ericsson Local Packet Gateway also allows to compose and tune the set user plane functions applied to a given traffic in one configuration click, which allows to customize the connectivity for each edge use case. Another consideration is that these GI/N6 functions were designed for legacy mobile broadband. This means they will need to evolve to support 5G peak user throughput rates and new 5G segment requirements, e.g., traffic optimizations should focus on optimizing the throughput of uplink transmissions and reducing the overall jitter and latency. Service aware charging models will evolve as 5G gets monetized, security for edge enterprise connectivity will keep evolving as well. Technological innovation in this space is a must for any edge user plane vendor and should be holistic considering the entire ecosystem and end-to-end solution behavior. As one example, edge user plane can leverage 3GPP exposure interfaces for application detection, use collaborative solutions with content providers or RAN to optimize traffic delivery or even adapt traffic optimizations to new end to end rate adaptation mechanisms such as low latency low loss scalable throughput (L4S). Ericsson, as an end-to-end network provider and key contributor to 5G standardization, is working actively in this space. Edge connectivity needs to be monitored and assured CSPs need to monitor, troubleshoot, and assure the edge user plane connectivity. In many cases the CSP organizations dealing with enterprises services have their own analytic and management systems. Those systems need to evolve to provide visibility of the 5G encrypted communication, up to on enterprise premise and without compromising 5G security and provide advanced insights to meet the stringent service level agreements of edge use cases. Example of user plane data feeds are traffic packet and patterns statistics, key performance indicators at transport level or service quality of experience estimates per application, area of interest, slice and subscriber type. CSP analytic use cases will also evolve, meaning network assurance and service experience management use cases will increasingly adopt AI/ML models with distinct and very demanding UP data sets running in parallel. External probing solutions were not designed for these requirements. The cost of evolving and deploying such solutions to thousands of edges is unaffordable. Ericsson Local Packet Gateway addresses this challenge by supporting integrated dual-mode probing capabilities which includes rich, granular data with pre-processed data and advanced data collection profiles avoiding the need of deploying external taps, packet broker and probes at edge. Software probes are a unique Ericsson dual mode 5G Core feature – a feature that’s very popular with our customers for public network and enterprise solutions. CSP will also introduce network data analytics function (NWDAF) function to enable 5G analytics for further 5G automation, new exposure APIs for verticals and data efficiency. An NWDAF can collect edge user plane and public network data to provide real time analytics which can be consumed by the network functions or by the end edge application to improve further the edge connectivity. Example of those analytics are user mobility, network congestion, quality of service, service experience or abnormal user behavior. Ideally, the NWDAF should be distributed at the edge and deployed co-located to the edge user plane for data efficiency, security and lower actuation latency. Ericsson NWDAF supports such distributed and co-located deployment and analytics and can collect pre-standard data from the Local Packet Gateway data until 3GPP rel-18 specifies UPF event exposure. Edge exposure for advanced edge connectivity Exposure through APIs on the edge is becoming increasingly important for CSPs to enable new services, increase their relevance in the 5G ecosystem and become more attractive partners for hyperscale cloud providers, application ecosystems and other players. Edge applications will be able to consume network capabilities and data to provide advanced services and innovate. Data extracted from edge user plane function will be of high value. For example, to determine the exact UE sessions being anchored by a given edge user plane, the actual monitored QoS, etc. Such exposure capabilities in edge user plane allows application to adapt the content delivery or reconfigure dynamically the connectivity, e.g., change dynamically the negotiated QoS or influence edge routing. As mentioned previously, NWDAF user plane analytics can be also exposed for advanced edge use cases. Ericsson is already working with our customers to create new edge use cases using Ericsson Local Packet Gateway and Edge Exposure Server. Stay tuned! Summary: In this blog post we’ve explained the different considerations that need to be taken into account when selecting the 5G edge user plane, and how it enables flexible virtual private and hybrid 4G private solution deployments and address the user experience idiosyncrasy of myriads of edge use cases. The 5G edge user plane has to be small, cost efficient, easy to deploy but still extremely powerful and advanced in terms of dual connectivity and added value features. Ericsson Local Packet Gateway is designed with all these capabilities in mind and integrates seamlessly with existing CSP dual-mode 5G Core, delivering edge use cases was never that easy.

Read More
DATA CENTER NETWORKING

Can SD-WAN Help Businesses in Boosting ROI?

Article | August 10, 2022

We are surrounded by acronyms and buzzwords in technology. SD-WAN is one that is often used in the industry nowadays. Organizations embrace digital transformation to stay up with market developments, consumer needs, and competitiveness. Traditional network designs weren't meant to manage digital transformation workloads and complexity. Business-critical services are commonly spread over numerous clouds, compromising network performance, particularly at branch sites. Smart network operations teams opt for SD-WAN. SD-WAN reduces overhead and improves network performance. Routing and hardware expenses are saved through SD-WAN solutions while allowing multi-cloud access. SD-WAN also reduces overhead and supports new digital apps and services. This new technology streamlines WAN administration and operation and brings corporate advantages. Business Challenges that SD-WAN Addresses There has been a dramatic increase in the pressure on the network as a result of digitalization. Businesses must now rely on a stable and secure network, which conventional router-based network topologies are incapable of providing. An SD-WAN solution assists businesses in addressing use cases in order to expedite digital transformation efforts, lower cybersecurity risks, and increase revenue. Eases connectivity with far-flung factories and offices. Effectively deploys new sites and minimizes network equipment sprawl. Enhances the speed of file transfer and backups to disaster recovery facilities. Helps in moving applications to the cloud and protecting cloud app. data using Secure Access Service Edge (SASE). Safeguards IoT devices using a zero-trust network Helps in complying with the cybersecurity framework of the National Institute of Standards and Technology (NIST). Ways SD-WAN Can Help Businesses Boost their Bottom Line Boosts Security Digital transformation is a double-edged sword. It can increase consumer satisfaction and market reach, but can pose security threats. According to the U.S. State of Cybercrime study, 41% of respondents stated more cybersecurity occurrences in 2017. The good news is that many SD-WAN solutions provide built-in security. Most SD-WAN systems only offer basic firewall and VPN functionalities, requiring IT teams to add security to elastic and dynamic SD-WAN connections after the fact. SD-WAN solutions with NGFW, IPS, encryption, AV, and sandboxing can avoid data loss, downtime, regulatory violations, and legal liability. Enables Cloud Usage Cloud services are rapidly being used by businesses. The great news is that SD-WAN enables direct cloud access at the remote branch, removing backhauling traffic – which routes all cloud and branch office traffic through the data center – allowing workers to directly access cloud applications irrespective of location without burdening the core network with additional traffic to manage and secure. Furthermore, SD-WAN enhances cloud application performance by prioritizing vital business apps and allowing branches to interact directly with the Internet. Reduces Costs As businesses deploy a growing number of cloud-based services, the volume of data traveling across a WAN rises dramatically, driving up operational expenses. SD-WAN, thankfully, can minimize this cost by utilizing low-cost local Internet connectivity, offering direct cloud access, and lowering traffic via the backbone WAN. According to an IDC poll (prediction), over a quarter of survey respondents anticipate SD-WAN cost reductions of up to 39%, with the other two-thirds anticipating more modest savings of 5–19%. Improves performance Data transfer over a network isn't created equal. Fortunately, SD-WAN can be set up to prioritize business-critical traffic and real-time services such as Voice over Internet Protocol (VoIP) and then successfully guide it over the most efficient path. IT teams can help decrease packet loss and latency concerns by supporting important applications over dependable, high-performance connections, increasing employee productivity and morale. This is business-impacting performance. Closing Note Indeed, SD-WAN evolved and flourished in the data center over the first few years of development. However, the time has arrived to take it seriously as a tool for managing your wide area network. There are currently several vendors on the market, as well as several mature solutions to choose from. More significantly, the business cases for SD-WAN are expanding on a daily basis.

Read More
5G

Cisco SD-WAN – the easiest way to connect private links to the cloud from your data center or even branches

Article | June 9, 2022

Applications and workloads have been moving to the cloud for some time. This transition has been putting a lot of pressure on IT organizations to support the trend by extending their networks to support cloud connectivity. Cisco SD-WAN enables your hybrid connectivity to the cloud We at Cisco have innovated on multiple fronts to help our customers with this transition by providing a deep level of integration with many of the leading cloud service providers (CSPs), including Amazon Web Services (AWS), Microsoft Azure, and Google Cloud. Here, we highlight one key aspect of this innovation that allows private cloud links to be available as part of the SD-WAN network, enabling hybrid connectivity to the cloud and multicloud. Now our customers can benefit from all the rich features that our Cisco SD-WAN solution offers including application-aware routing, intent-based path selection, and security policy enforcement. Private direct cloud connectivity to CSPs such as AWS Direct Cloud Connect, Google Cloud Interconnect, and Azure ExpressRoute are becoming popular lately, as they provide customers with optimal connectivity similar to what MPLS did in the past, but in a more agile and on-demand fashion. The only problem is those services are normally acquired separately and customers must determine how to manage them as part of a larger WAN solution including configuration, monitoring, and so on. The on-demand nature of these circuits provides customers with major savings, but also turns automation into a key requirement for management. Enter Cisco SD-WAN release 20.6 Beginning with Cisco SD-WAN release 20.6, a Cisco SD-WAN customer may use Cloud OnRamp for Mutlicloud to automate and simplify cloud connectivity across private and public transports. What is great is this task, that used to require hours and days to setup, now only takes minutes as outlined by the following integration documents for AWS, Azure and Google Cloud respectively: Configure AWS Direct Connect as a Transport with SD-WAN in a Click Configure Azure Express Route as Transport with SD-WAN in a Click Configure Google Cloud Interconnect as a Transport with Cisco SD-WAN in a Click Once a customer implements such connectivity, they will have the ability to steer any type of traffic through it with a customizable and flexible SD-WAN policy. This solution also allows customers to eliminate some limitations imposed on them by the CSPs, such as restricting the number of prefixes advertised via BGP over private links, thus providing better scalability and control. For customers who already use Cisco SD-WAN Cloud Interconnect at middle-mile POPs, such as with Equinix or Megaport, rolling out this solution as a test can be extremely simple given the automation discussed above. The best way to find out how easy this solution is, is to try it.

Read More
5G

5G VS Wi-Fi 6: Companions or Competitors?

Article | May 25, 2022

Advancements inconnectivity have fueled the rapid progress in digitalization. From 1G in the 1980s to 4G in the last decade, wireless connectivity has constantly contributed to the transformation of businesses and the global economy. Today's 5G and Wi-Fi 6 technologies provide exciting features that are critical to increasing corporate productivity and improving people's digital experiences. When we refer to the 5G and Wi-Fi 6 revolutions, we're not talking about undisturbed movie streaming or faster downloads; we're talking about making sci-fi movie fiction a reality. Things you used to only see in movies, like robots doing chores, autonomous vehicles, smart cities, virtual reality gaming experiences, remote surgeries, telemedicine, automated assembly line production, augmented reality marketing strategies, and the way you shop, travel, work, and get medical consultations, will undergo a transformation beyond imagination, and 5G will make it happen. 5G VS Wi-Fi 6 5G and Wi-Fi 6 Carving the Future of Businesses Together When it comes to addressing particular needs, both 5G and Wi-Fi 6 are competitive depending on the industry vertical business environment, operation, devices, and applications. While Wi-Fi will be the dominant technology for indoor operations, as well as non-critical applications and the usage of unlicensed spectrum, 5G cellular networks will be used for outdoor coverage, mission-critical applications, highly guarded settings, and the anticipation of various QoS features. According to a survey conducted by Deloitte, the priorities of companies were 5G and Wi-Fi 6, the importance of which isonly anticipated to grow in the future years. Adoption of Wi-Fi 6 and 5G is regarded as a strategic requirement, leading businesses into a new era of wireless connectivity. With the convergence of Wi-Fi and 5G, organizations can do business everywhere while being highly productive and providing the greatest user experience. Businesses will attain the following primary goals by transitioning to this enhanced wireless 5G technology: increased effectiveness enhanced security Taking advantage of the benefits of these two forces, such as big data analytics, AI, and edge computing. The overall objective of leveraging this deadly mix is to unlock the possibilities of other emerging technologies such as IoT, cloud, Edge computing, big data analytics, VR, AR, robots, and others. Together, 5G and Wi-Fi 6 operate as a revolutionary multiplier. Closing Note 5G and Wi-Fi 6 are two separate technologies that can work in tandem. They share the following characteristics: low latency, faster data rates, increased capacity, and excellent performance. Even though 5G and Wi-Fi 6 complement each other's capabilities, the environment, sensitivity of the application, and business use cases will determine which is the best match. A holistic approach of Wi-Fi 6 and 5G is the optimum method for developing a smart city that is entirely networked or offering powerful Internet connectivity for families and businesses. Both technologies are critical in today's world, and every breakthrough in connection, whether it's 5G or Wi-Fi 6, contributes to our society's overall growth and innovation.

Read More

Spotlight

Agari

Agari, a leading cybersecurity company, is trusted by leading Fortune 1000 companies to protect their enterprise, partners and customers from advanced email phishing attacks. The Agari Email Trust Platform™ is the industry’s only solution that ‘understands’ the true sender of emails, leveraging the company’s proprietary, global email telemetry network and patent-pending, predictive Agari Trust Analytics to identify and stop phishing attacks.

Related News

NETWORK INFRASTRUCTURE

An Extension of its NetCloud Architecture Addressing the Intersection of 5G, SD-WAN, and Zero Trust Networking

Cradlepoint | August 18, 2022

Cradlepoint, the global leader in cloud-delivered LTE and 5G wireless network solutions, today announced NetCloud Exchange, an architectural extension of its NetCloud solution, to help lean IT organisations transform their business and amplify their 5G experience with advanced SD-WAN and Zero Trust capabilities. NetCloud Exchange is an intuitive, cloud-native solution built on policy-driven, zero-trust principles that delivers multiple SD-WAN and security services. As business transformation continues to fuel increased cloud, mobility, and IoT adoption, WAN architectures have proven too limited and inflexible for securely connecting distributed enterprise sites, vehicles, remote employees, and devices. 5G is quickly emerging as an essential WAN infrastructure and will drive WAN expansion and evolution. However, these trends can produce a larger attack surface, unique, cloud-driven traffic patterns, and a greater number of connected endpoints. “Most network solutions today are designed for wired-only deployments, With the new NetCloud Exchange extension, NetCloud now offers new 5G- and security-first services to support enterprise WAN transformation, including end-to-end secure connectivity, hybrid SD-WAN, and Zero Trust networking – all lifecycle-managed through a single-pane-of-glass.” Todd Krautkremer, Chief Marketing Officer for Cradlepoint The following new NetCloud Services will be delivered based on the NetCloud Exchange extension: Secure Connect: An agile LTE/5G VPN-like service that enables secure end-to-end connections for thousands of locations in just 3-simple steps. It overcomes the operational complexities of traditional VPNs through automated tunnel orchestration, efficient encryption, name-based routing, and simplified IP address management. NetCloud Exchange Secure Connect utilises Zero Trust principles that include IP address cloaking and no default network access to change the traditional VPN paradigm from “connect and then secure”, to “secure and then connect” provide least privileged-based access. Advanced SD-WAN: A future service that extends Cradlepoint’s current SD-WAN capabilities by adding end-to-end support and advanced application optimisation. This enhanced service will enable features like 5G network slicing, simplified configuration at scale, more advanced cloud integration, more resilient and flexible traffic steering, and more scalable and resilient private and cloud data centre terminations. Zero Trust Network Access: A future service that is simple to deploy and uses flexible, fine-grained user-, site-, application-, and resource-based policies that leverage identity, context and 5G attributes to control network access. All services are delivered using the NetCloud Exchange Service Gateway — a scalable, resilient, software-based solution for private and cloud data centres that aggregates remote connections, provides flow-level visibility, and acts as the policy-enforcement point for the services it supports. “Over the years, WAN technologies have gone through a number of iterations, from MPLS to broadband VPN and from on-premise to the cloud,” said Paul Chakour, Director of Technology & Innovation, Wevo. “Cradlepoint NetCloud Exchange offers simplified SD-WAN configuration and orchestration and what we’re really excited about, is that the new SD-WAN service offers advanced cloud and 5G integration, future-proofing our customers’ investments and providing mass scalability.” “As businesses increasingly adopt cloud solutions and operate remote and mobile workplaces more and more, we’re seeing rapid growth in demand for 5G infrastructure in Australia,” said Stephen Aravopoulos Managing Director, MobileCorp. “The great thing for our customers is that the new service from Cradlepoint is simple to deploy and manage, is secure, and is compatible with existing Cradlepoint edge router solutions, and we’re excited to be able to offer our customers a pay-as-you-grow model, where additional capacity can be added on demand.” "As organisations continue to undergo digital transformation, IT teams must evolve how they manage the network edge,” said Rohit Mehra, group vice president, network and telecom infrastructure at IDC. “Cradlepoint’s innovation in Wireless WAN is enabling enterprises to deploy 5G with the management and security functions needed to scale.” NetCloud Exchange Secure Connect and NetCloud Exchange Service Gateway are available immediately while other solutions will be available in the fourth quarter of 2022. To learn more about Cradlepoint NetCloud and its NetCloud Exchange and to get updates on upcoming services. About Cradlepoint Cradlepoint enables the freedom to connect people, places, and things that drive more experiences, more ways to work, and better business results — anywhere. The company is a pioneer in Wireless WAN, offering advanced 4G and 5G routers and adapters controlled through Cradlepoint NetCloudTM. Enterprise businesses and public sector agencies rely on Cradlepoint and its Cellular Intelligence to build a reliable, secure network wherever they need it, connecting fixed and temporary sites, vehicles, IoT devices, and remote employees. Headquartered in Boise, Idaho, Cradlepoint is a subsidiary of Ericsson’s Business Area Enterprise Wireless Solutions division. It has international offices in Asia Pacific, Canada, Europe, India, and Latin America.

Read More

ENTERPRISE MOBILITY

XL Axiata Partners with Juniper Networks

Juniper Networks | June 09, 2022

Juniper Networks, a leader in security, AI-driven networks, announced today that XL Axiata, one of Indonesia's leading mobile telecommunications companies, will improve its existing network infrastructure with Juniper's Segment Routing over IPv6 (SRv6) and MX Series Global Routing Platforms. With Juniper enhancements, XL Axiata will have a stronger networking base to serve the increased demand for 5G services as well as Indonesia's booming digital economy. By 2026, Indonesia is expected to have 233.53 million mobile internet users. This increase in internet users with access to digital services will aid in the expansion of the country's digital economy, which is estimated to contribute $150 billion to GDP by 2025. The government unveiled the Digital Indonesia Roadmap to advance the country's digital transformation strategy, with major targets include completing 4G infrastructure in more than 10,000 subregions by 2022 and constructing 5G-ready networks. XL Axiata has a long history of constructing high-performance networks in Indonesia, and the company previously collaborated with Juniper to establish the mobile backhaul technology that underpins its statewide 4G LTE network. XL Axiata chose Juniper to implement its SRv6-based transport network, which will underpin the development of 5G services throughout Indonesia, based on this strong partnership and track record. Fadly Hamka, Group Head Network Planning & Design, XL Axiata said that “XL Axiata is thrilled to deepen our long-standing partnership with Juniper Networks and welcome them on board our 5G journey. By leveraging Juniper’s industry-leading routing solutions and SRv6 capabilities, we will be able to experience improved network reliability and scalability, as well as simplified network operations. Alongside Juniper, we look forward to supporting Indonesia’s digital economy and providing our customers with high-speed, on-demand, low-latency connectivity for 5G services.” “It is an honor to be a part of XL Axiata's 5G journey, which will support digital transformation in Southeast Asia's largest economy. This expansion of our long-term relationship is also a testament to our ability to build scalable and operationally intelligent networks. With our experience-first solutions and the capabilities provided by SRv6, we are confident that XL Axiata will deliver superior 5G experiences and continue to provide world-class connectivity in Indonesia for many years to come.” Perry Sui, Senior Director, ASEAN & Taiwan, Juniper Networks With Juniper's SRv6 deployment, XL Axiata's network will have improved control, agility, application awareness, and easier traffic management. As 5G continues to be a key pillar in Indonesia's digital economy and post-pandemic recovery plans, XL Axiata will have built a modern network that is ready for future demands for high quality, scalable connectivity services that provide consumers and businesses with reliable and superior experiences.

Read More

NETWORK INFRASTRUCTURE

Prosimo Delivers Industry First Full-Stack NetDevOps Toolkit for Multi-Cloud Networking

Prosimo | August 18, 2022

Prosimo, the Application Experience Infrastructure company, introduced a new NetDevOps Infrastructure-as-Code (IaC) Toolkit that enables enterprises to accelerate the deployment of cloud networking. Deployed by F500 companies and large enterprises, the Prosimo Full-Stack Cloud Transit with the new IaC Toolkit provides complete orchestration of cloud networking services required to connect, scale, and secure enterprise applications with complete visibility across a multi-cloud infrastructure, which reduces the network delivery lifecycle and adds implicit zero-trust while delivering compelling autonomous networking capabilities. "According to ESG's Distributed Cloud research, organizations are actively looking to improve developer velocity. However, the majority of organizations struggle to perform the appropriate infrastructure testing. With 89% of respondents citing the use of two or more CSPs, it will be imperative for IT operations to create an efficient, reliable, and repeatable process in these complex environments. The Prosimo solution with its IaC for full-stack multi-cloud networking enables organizations to repeatedly and rapidly deploy services that adhere to IT governance, reduce the CI/CD skills gap and drive greater operational efficiency," said Bob Laliberte, Principal Analyst, ESG. In today's world, enterprise networks have grown more extensive and complex, combining the on-premises data center, cloud, edge, and co-locations. Still, they continue to be the foundation upon which applications and services run. However, enterprises face challenges with day-0 automation, day-N operations, managing diverse applications, shortening MTTR windows, managing cloud operations, and ultimately increasing business agility. Overcoming these challenges is critical in today's high-velocity application development world. As a result, enterprises must adopt NetDevOps deployment models and take a modernized pipeline-driven approach to simplify and adapt any network changes with orchestration and automation to ensure a consistent and highly scalable cloud adoption. "Digital and cloud forward enterprises are modernizing network operations centers with a more proactive and unified approach tied to business strategies. Cutting-edge companies are transforming NOCs from standalone operations for networking in favor of a NetDevOps-centric approach with a single integrated platform to optimize networking, performance, security, and software distribution operations. Prosimo, with its IaC for full-stack app-native multi-cloud network takes a holistic approach that stabilizes the reliability of infrastructure, creates consistent processes, shortens deployment windows and increases business agility,” said Shamus McGillicuddy, Vice President of research, covering network management, EMA. The First Cloud Networking Solution for IaC NetDevOps with Autonomous Capabilities The new features in the DevNetOps toolkit provide core capabilities that target cloud operations teams and orchestrate cloud service provider (CSP) networking functionality while automating per-application routing, security, performance, compliance, and cost management policies. The single architecture simplifies and abstracts network and infrastructure management tasks, giving enterprises the ability to reduce setup, provisioning, and resolution times by more than 80% when compared to traditional networking approaches: Infrastructure as a code for cloud networking - Prosimo abstracts the API layer to CSP capabilities and networking constructs: simply click and set up. It also automates and ties network, micro-segmentation, policy control, and zero-trust into a deployment CI/CD pipeline aligned with application roll-outs. In addition, Prosimo provides repeatable pipelines to deploy and undeploy services quickly. Infrastructure aligned to applications lifecycle - Onboarding new regions, clouds, and datacenters in greenfield and brownfield environments through efficient infrastructure orchestration using native constructs in multi-cloud, including the ability to connect and secure cloud-native endpoints (e.g., S3), understanding A/B, canary. Service networking - Attach FQDNs, serverless, PaaS, and SaaS apps with enterprise workloads running in any cloud. This leverages cloud-native service networking techniques based on FQDN and layer 7 proxies, including network constructs at the IP layer. Faster MTTR - Prosimo offers unparalleled end-to-end enterprise infrastructure observability for applications and networks across the entire path over multicloud environments. ML-driven insights quickly identify a problem's root cause and provide recommendations and automation to improve connectivity or performance. Prosimo is the only platform to offer programmatic query infrastructure across the full stack. "As Enterprises continue to embrace NetDevOps, the challenges are significant when it comes to reducing the barriers between development and operations, The IAC Toolkit helps simplify operations and management of applications' life cycle. This improves business and IT alignment, accelerating business velocity. In today's competitive landscape, this is critical for organizations." Mani Ganesan, Head of Product, Prosimo About Prosimo: Prosimo delivers simplified multi-cloud infrastructure for distributed enterprise cloud journeys. Companies innovate faster and remain in control with the Prosimo integrated stack. This stack combines cloud networking, performance, security, observability, and cost management—all powered by data insights and machine learning models with autonomous cloud networking to reduce complexity and risk. Cloud-forward enterprises, including F100, have adopted Prosimo to successfully roll out revenue-generating applications, improve operational efficiency, and accelerate positive business outcomes. Prosimo is venture-backed by marquee investors such as General Catalyst, WRVI Capital, and Blackrock.

Read More

NETWORK INFRASTRUCTURE

An Extension of its NetCloud Architecture Addressing the Intersection of 5G, SD-WAN, and Zero Trust Networking

Cradlepoint | August 18, 2022

Cradlepoint, the global leader in cloud-delivered LTE and 5G wireless network solutions, today announced NetCloud Exchange, an architectural extension of its NetCloud solution, to help lean IT organisations transform their business and amplify their 5G experience with advanced SD-WAN and Zero Trust capabilities. NetCloud Exchange is an intuitive, cloud-native solution built on policy-driven, zero-trust principles that delivers multiple SD-WAN and security services. As business transformation continues to fuel increased cloud, mobility, and IoT adoption, WAN architectures have proven too limited and inflexible for securely connecting distributed enterprise sites, vehicles, remote employees, and devices. 5G is quickly emerging as an essential WAN infrastructure and will drive WAN expansion and evolution. However, these trends can produce a larger attack surface, unique, cloud-driven traffic patterns, and a greater number of connected endpoints. “Most network solutions today are designed for wired-only deployments, With the new NetCloud Exchange extension, NetCloud now offers new 5G- and security-first services to support enterprise WAN transformation, including end-to-end secure connectivity, hybrid SD-WAN, and Zero Trust networking – all lifecycle-managed through a single-pane-of-glass.” Todd Krautkremer, Chief Marketing Officer for Cradlepoint The following new NetCloud Services will be delivered based on the NetCloud Exchange extension: Secure Connect: An agile LTE/5G VPN-like service that enables secure end-to-end connections for thousands of locations in just 3-simple steps. It overcomes the operational complexities of traditional VPNs through automated tunnel orchestration, efficient encryption, name-based routing, and simplified IP address management. NetCloud Exchange Secure Connect utilises Zero Trust principles that include IP address cloaking and no default network access to change the traditional VPN paradigm from “connect and then secure”, to “secure and then connect” provide least privileged-based access. Advanced SD-WAN: A future service that extends Cradlepoint’s current SD-WAN capabilities by adding end-to-end support and advanced application optimisation. This enhanced service will enable features like 5G network slicing, simplified configuration at scale, more advanced cloud integration, more resilient and flexible traffic steering, and more scalable and resilient private and cloud data centre terminations. Zero Trust Network Access: A future service that is simple to deploy and uses flexible, fine-grained user-, site-, application-, and resource-based policies that leverage identity, context and 5G attributes to control network access. All services are delivered using the NetCloud Exchange Service Gateway — a scalable, resilient, software-based solution for private and cloud data centres that aggregates remote connections, provides flow-level visibility, and acts as the policy-enforcement point for the services it supports. “Over the years, WAN technologies have gone through a number of iterations, from MPLS to broadband VPN and from on-premise to the cloud,” said Paul Chakour, Director of Technology & Innovation, Wevo. “Cradlepoint NetCloud Exchange offers simplified SD-WAN configuration and orchestration and what we’re really excited about, is that the new SD-WAN service offers advanced cloud and 5G integration, future-proofing our customers’ investments and providing mass scalability.” “As businesses increasingly adopt cloud solutions and operate remote and mobile workplaces more and more, we’re seeing rapid growth in demand for 5G infrastructure in Australia,” said Stephen Aravopoulos Managing Director, MobileCorp. “The great thing for our customers is that the new service from Cradlepoint is simple to deploy and manage, is secure, and is compatible with existing Cradlepoint edge router solutions, and we’re excited to be able to offer our customers a pay-as-you-grow model, where additional capacity can be added on demand.” "As organisations continue to undergo digital transformation, IT teams must evolve how they manage the network edge,” said Rohit Mehra, group vice president, network and telecom infrastructure at IDC. “Cradlepoint’s innovation in Wireless WAN is enabling enterprises to deploy 5G with the management and security functions needed to scale.” NetCloud Exchange Secure Connect and NetCloud Exchange Service Gateway are available immediately while other solutions will be available in the fourth quarter of 2022. To learn more about Cradlepoint NetCloud and its NetCloud Exchange and to get updates on upcoming services. About Cradlepoint Cradlepoint enables the freedom to connect people, places, and things that drive more experiences, more ways to work, and better business results — anywhere. The company is a pioneer in Wireless WAN, offering advanced 4G and 5G routers and adapters controlled through Cradlepoint NetCloudTM. Enterprise businesses and public sector agencies rely on Cradlepoint and its Cellular Intelligence to build a reliable, secure network wherever they need it, connecting fixed and temporary sites, vehicles, IoT devices, and remote employees. Headquartered in Boise, Idaho, Cradlepoint is a subsidiary of Ericsson’s Business Area Enterprise Wireless Solutions division. It has international offices in Asia Pacific, Canada, Europe, India, and Latin America.

Read More

ENTERPRISE MOBILITY

XL Axiata Partners with Juniper Networks

Juniper Networks | June 09, 2022

Juniper Networks, a leader in security, AI-driven networks, announced today that XL Axiata, one of Indonesia's leading mobile telecommunications companies, will improve its existing network infrastructure with Juniper's Segment Routing over IPv6 (SRv6) and MX Series Global Routing Platforms. With Juniper enhancements, XL Axiata will have a stronger networking base to serve the increased demand for 5G services as well as Indonesia's booming digital economy. By 2026, Indonesia is expected to have 233.53 million mobile internet users. This increase in internet users with access to digital services will aid in the expansion of the country's digital economy, which is estimated to contribute $150 billion to GDP by 2025. The government unveiled the Digital Indonesia Roadmap to advance the country's digital transformation strategy, with major targets include completing 4G infrastructure in more than 10,000 subregions by 2022 and constructing 5G-ready networks. XL Axiata has a long history of constructing high-performance networks in Indonesia, and the company previously collaborated with Juniper to establish the mobile backhaul technology that underpins its statewide 4G LTE network. XL Axiata chose Juniper to implement its SRv6-based transport network, which will underpin the development of 5G services throughout Indonesia, based on this strong partnership and track record. Fadly Hamka, Group Head Network Planning & Design, XL Axiata said that “XL Axiata is thrilled to deepen our long-standing partnership with Juniper Networks and welcome them on board our 5G journey. By leveraging Juniper’s industry-leading routing solutions and SRv6 capabilities, we will be able to experience improved network reliability and scalability, as well as simplified network operations. Alongside Juniper, we look forward to supporting Indonesia’s digital economy and providing our customers with high-speed, on-demand, low-latency connectivity for 5G services.” “It is an honor to be a part of XL Axiata's 5G journey, which will support digital transformation in Southeast Asia's largest economy. This expansion of our long-term relationship is also a testament to our ability to build scalable and operationally intelligent networks. With our experience-first solutions and the capabilities provided by SRv6, we are confident that XL Axiata will deliver superior 5G experiences and continue to provide world-class connectivity in Indonesia for many years to come.” Perry Sui, Senior Director, ASEAN & Taiwan, Juniper Networks With Juniper's SRv6 deployment, XL Axiata's network will have improved control, agility, application awareness, and easier traffic management. As 5G continues to be a key pillar in Indonesia's digital economy and post-pandemic recovery plans, XL Axiata will have built a modern network that is ready for future demands for high quality, scalable connectivity services that provide consumers and businesses with reliable and superior experiences.

Read More

NETWORK INFRASTRUCTURE

Prosimo Delivers Industry First Full-Stack NetDevOps Toolkit for Multi-Cloud Networking

Prosimo | August 18, 2022

Prosimo, the Application Experience Infrastructure company, introduced a new NetDevOps Infrastructure-as-Code (IaC) Toolkit that enables enterprises to accelerate the deployment of cloud networking. Deployed by F500 companies and large enterprises, the Prosimo Full-Stack Cloud Transit with the new IaC Toolkit provides complete orchestration of cloud networking services required to connect, scale, and secure enterprise applications with complete visibility across a multi-cloud infrastructure, which reduces the network delivery lifecycle and adds implicit zero-trust while delivering compelling autonomous networking capabilities. "According to ESG's Distributed Cloud research, organizations are actively looking to improve developer velocity. However, the majority of organizations struggle to perform the appropriate infrastructure testing. With 89% of respondents citing the use of two or more CSPs, it will be imperative for IT operations to create an efficient, reliable, and repeatable process in these complex environments. The Prosimo solution with its IaC for full-stack multi-cloud networking enables organizations to repeatedly and rapidly deploy services that adhere to IT governance, reduce the CI/CD skills gap and drive greater operational efficiency," said Bob Laliberte, Principal Analyst, ESG. In today's world, enterprise networks have grown more extensive and complex, combining the on-premises data center, cloud, edge, and co-locations. Still, they continue to be the foundation upon which applications and services run. However, enterprises face challenges with day-0 automation, day-N operations, managing diverse applications, shortening MTTR windows, managing cloud operations, and ultimately increasing business agility. Overcoming these challenges is critical in today's high-velocity application development world. As a result, enterprises must adopt NetDevOps deployment models and take a modernized pipeline-driven approach to simplify and adapt any network changes with orchestration and automation to ensure a consistent and highly scalable cloud adoption. "Digital and cloud forward enterprises are modernizing network operations centers with a more proactive and unified approach tied to business strategies. Cutting-edge companies are transforming NOCs from standalone operations for networking in favor of a NetDevOps-centric approach with a single integrated platform to optimize networking, performance, security, and software distribution operations. Prosimo, with its IaC for full-stack app-native multi-cloud network takes a holistic approach that stabilizes the reliability of infrastructure, creates consistent processes, shortens deployment windows and increases business agility,” said Shamus McGillicuddy, Vice President of research, covering network management, EMA. The First Cloud Networking Solution for IaC NetDevOps with Autonomous Capabilities The new features in the DevNetOps toolkit provide core capabilities that target cloud operations teams and orchestrate cloud service provider (CSP) networking functionality while automating per-application routing, security, performance, compliance, and cost management policies. The single architecture simplifies and abstracts network and infrastructure management tasks, giving enterprises the ability to reduce setup, provisioning, and resolution times by more than 80% when compared to traditional networking approaches: Infrastructure as a code for cloud networking - Prosimo abstracts the API layer to CSP capabilities and networking constructs: simply click and set up. It also automates and ties network, micro-segmentation, policy control, and zero-trust into a deployment CI/CD pipeline aligned with application roll-outs. In addition, Prosimo provides repeatable pipelines to deploy and undeploy services quickly. Infrastructure aligned to applications lifecycle - Onboarding new regions, clouds, and datacenters in greenfield and brownfield environments through efficient infrastructure orchestration using native constructs in multi-cloud, including the ability to connect and secure cloud-native endpoints (e.g., S3), understanding A/B, canary. Service networking - Attach FQDNs, serverless, PaaS, and SaaS apps with enterprise workloads running in any cloud. This leverages cloud-native service networking techniques based on FQDN and layer 7 proxies, including network constructs at the IP layer. Faster MTTR - Prosimo offers unparalleled end-to-end enterprise infrastructure observability for applications and networks across the entire path over multicloud environments. ML-driven insights quickly identify a problem's root cause and provide recommendations and automation to improve connectivity or performance. Prosimo is the only platform to offer programmatic query infrastructure across the full stack. "As Enterprises continue to embrace NetDevOps, the challenges are significant when it comes to reducing the barriers between development and operations, The IAC Toolkit helps simplify operations and management of applications' life cycle. This improves business and IT alignment, accelerating business velocity. In today's competitive landscape, this is critical for organizations." Mani Ganesan, Head of Product, Prosimo About Prosimo: Prosimo delivers simplified multi-cloud infrastructure for distributed enterprise cloud journeys. Companies innovate faster and remain in control with the Prosimo integrated stack. This stack combines cloud networking, performance, security, observability, and cost management—all powered by data insights and machine learning models with autonomous cloud networking to reduce complexity and risk. Cloud-forward enterprises, including F100, have adopted Prosimo to successfully roll out revenue-generating applications, improve operational efficiency, and accelerate positive business outcomes. Prosimo is venture-backed by marquee investors such as General Catalyst, WRVI Capital, and Blackrock.

Read More

Events