Kaspersky SD-WAN
Reliable network and security capabilities rolled into one

KESR Model 2

• 150 Mb/s – total throughput*
• LTE with 2 x SIMs, Wi-Fi and 10 Gb/s SFP+ ports
• Powered by a 4-core Intel processor

KESR Model 3

• 300 Mb/s – total throughput*
• Powered by an 8-core Intel processor plus LTE, Wi-Fi and 10 Gb/s SFP+ ports
• Suitable for running Virtual Network Functions (VNFs) directly on the router itself

1. Centralized

The key information about the solution and network status are on the main screen

2. Simple

The convenient graphical builder of service chains with extensive capabilities

3. Information

Usage of virtual and server resources based on a wide range of parameters

Easy scalability

Connect new locations with a zero-touch experience to meet constantly changing business demands.

Convenient management

Manage your entire network from a single console, modifying security policies and traffic filtering rules.

Cost optimization

Reduce infrastructure costs, converging separate communication channels and network functions.

Centralized security

Automatically deploy virtualized traffic control and security tools through the VNF manager.

Reliable network for all branches

Optimize link operating costs while getting the best from utilization and connect new locations in minutes.

• Use any communication channels
  The solution provides access to all company resources (offices, private and public clouds, and data centers) with diverse communication channels: MPLS, Ethernet, 4G and other wireless or wired channels.
• Instantly connect new locations
  Customer Premises Equipment (CPE) makes connecting to new locations smooth and fast, without additional configurations through Zero-Touch Provisioning (ZTP), reducing deployment time to minutes.
• Enjoy smooth data transfer
  The solution lets you configure dynamic tunnels between CPE, manage and prioritize application traffic, optimize data transfer, and efficiently orchestrate network functions.

Single management console

Make the management of your entire branch network a breeze with a unified web interface.

• Manage your entire network
  A unified web interface lets you manage the entire network: configure CPE, create traffic filtering rules and security policies and define SLAs for services.
• Build and visualize your infrastructure
  The convenient graphical builder lets you plan and visualize your network infrastructure while making integrating new services a breeze – just drag and drop virtual network functions that can then be launched immediately.
• Benefit from informative dashboards
  The state of the entire infrastructure is in your control and at your fingertips, including CPE, virtualized functions, and physical resources.

Unified security

Focus on your business rather than network threats, with comprehensive security capabilities and consistent policies across branches.

• Single security policy
  The solution provides security for branches using VPN overlay, centralized device configurations, security policies and traffic rules, pushing them out across the WAN.
• Easily connect security tools
  The network functions virtualization lets you automatically deploy traffic control and security tools, including firewalls, secure web gateways and intrusion prevention systems.
• Versatile architecture
  The solution lets you easily integrate security tools from different vendors thanks to Virtual Network Functions (VNFs) manager and the orchestrator within its architecture.

Deployment

• On-premise
• Clouds (private or public)

Virtual Network Functions (VNFs)

• ETSI MANO
• VNF support (Kaspersky as well as third-party vendors’ products)
• Service-chain lifecycle management

CPE types

• Servers
• Virtual CPE
• Universal СPE (x86, ARM 64)
• Light-CPE (x86, ARM v8/64, MIPS)

Management

• Centralized management of CPE software versions and Kaspersky SD-WAN central components
• Out-of-Band management for CPE (through underlay network without customer’s tunnels)

SD-Branch

• LAN segmentation
• Local services (Wi-Fi, DHCP and etc.)
• Local internet access
• VNF support for Universal CPE (uCPE)

Supported communication channels

• 4G
• MPLS
• Ethernet
• L2TP

Supported network topologies

• Full mesh
• Partial mesh
• Hub-and-Spoke

Zero Touch Provisioning

• Full mesh
• Partial mesh
• Hub-and-Spoke

VPN/Overlay

• DHCP
• Static
• Two-factor authentication support
• URL Auth

Fault tolerance and redundancy

• L2 Point-to-Point
• Point-to-Multipoint
• Multipoint-to-Multipoint
• L3 VPN

LAN segmentation

• High-availability cluster of central components
• SD-WAN gateways redundancy (active/active)
• CPE redundancy (VRRP)

Routing

• Full 802.1q support for CPE LAN-ports (Access, Trunk, Q-in-Q)

WAN load balancing and fault tolerance

• Static
• BGP
• BFD
• Multicast service support for SD-WAN network
• Path MTU discovery suppor

Channel quality control

• SLA assessment based on traffic active probes
• BFD

Channel optimization

• FEC
• Packet Duplication

Quality of Service (QoS)

• Multilayer QoS
• 8 queues per virtual service
• DSCP support
• SLA assessment (loss, jitter and delay)
• QoS remapping support for CPE WAN interfaces
• Policing and shaping suppor

L7 traffic routing

• Built-in DPI
• Application aware routing
• Application SLA

Traffic encryption

• Built-in High-Speed Encryption support
• Encryption configuration per channel

Monitoring

• Monitoring of central components, CPEs, VNF
• Network Test Access Point (TAP)