Riverbed SDWAN Ricky Lin CCIE7469 MBA Deputy CTO

Riverbed SD-WAN Ricky Lin, CCIE#7469, MBA Deputy CTO

Agenda 1 Why SD-WAN 2 Steel. Connect Overview 3 2016 Direction © 2016 Riverbed

Data Center App. teams IT Ops Disaster Recovery Site Your IT used to look

Global Ops Saa. S Data Center Iaa. S Disaster Recovery Site Carrier Neutral Facilities More and more it’s looking like this Regional Hub and Campus Private WAN Remote and Branch Office Public Internet Remote and Branch Office Mobile 2016+ © 2016 Riverbed Technology. All rights reserved. 4

Application delivery is becoming complex Application diversity on a stretched perimeter Local Branch Data Center to Branch Applications The edge is becoming a hub of communication The faster pace of changes drives IT operations to evolve Faster user behavior changes Saa. S to Branch Applications Source: ESG 2015. ROBO TRENDS SURVEY © 2016 Riverbed Technology. All rights reserved. Faster business driven changes Non-scalable change implementation based on legacy concepts 5

Software-Defined WAN Cost Agility Business Performance Simplicity “SD-WAN is a new and transformational way to architect, deploy and operate corporate WANs, as it provides a dramatically simplified way of deploying and managing remote branch office connectivity in a cost-effective manner. ” 1 Reliability “By the end of 2019, 30% of enterprises will use SD-WAN products in all their branches, up from less than 1% today. ” 1 Gartner, Jul 2015 “Technology Overview for SD-WAN” 2 Gartner, Dec 2015 “Market Guide for Software-Defined WAN” © 2016 Riverbed Technology. All rights reserved. 6

Three Key Value Props driving SD-WAN Simplified Management and Orchestration (Provisioning, Management, Configuration) Utilizing diverse transport effectively (Reducing costs via broadband Internet, increasing bandwidth and utilization) Increased Visibility and Security in the enterprise 7 © 2016 Riverbed Technology. All rights reserved. © 2015 Riverbed Technology. All rights reserved. 7

SD-WAN: How does it work? Management Portal 1. 2. 3. • • • WAN Transport Virtualization Centralized Management App-centric & Policy-based Orchestration • Single-pane of glass for configuration network management: cloud -hosted and on-premises Zero-touch provisioning Portal where user defines global policies Aggregated visibility on application performance SD-WAN Controller Management Portal SD-WAN Controller • Establishes and manages Secure Virtual Overlay to sites. • Interprets the Global Policy according to the knowledge collected from the network • Defines service chains to enable policy goals • Manages distribution of interpreted Policy to individual elements Virtual WAN Fabric MPLS Saa. S Internet 4 G/LTE Satellite Iaa. S SD-WAN Gateways Remote & Branch Offices © 2016 Riverbed Technology. All rights reserved. • • • Secure Overlay Fabric Transport Independence Network Segmentation SD-WAN Gateway Campus Sites Data Centers Regional Hubs • • • Local Policy Enforcement WAN Path Selection, Network Qo. S, Firewall, Service Chaining Telemetry feedback loop to/from SD-WAN Controller 9

BRANCH AND EDGE CONNECTIVITY DELIVERED § Solutions (HW/SW/Saa. S) for automated configuration and management of Branch networks and WANs § 3 year old startup focused on SD-WAN and remote/branch office SD-LAN • “Network Configuration Automated” • One centrally assigned policy for WAN and Branch network § Founded by team that created Astaro (Universal Threat Management (UTM) acquired by Sophos) • § Revenue products & cloud services since Q 2/2015 Ocedo. Connect Cloud Based Management (multitenant, Saa. S) Gateways – G 50, G 100, V-GW Ethernet Switch – S 24 (w/POE for voice) Zero touch provisioning Wi. Fi Access Points A 3, A 5+ § Based in Karlsruhe, Germany (Home of Karlsruhe Institute of Technology) © 2016 Riverbed Technology. All rights reserved. Branch 1 Branch 2 Branch 3 10

© 2016 Riverbed Technology. All rights reserved. 11

Contract mining company - Africa Project Description Customer is one of the largest Contract Mining Company’s in Africa with established support networks in Africa, Australia and Europe. It is a mixed MPLS/Internet infrastructure across 20 branches. Step by step they want to get rid of their entire Cisco infrastructure. Ocedo was beating the competitors with: ● Automated fully-meshed VPN ● Pure central management of all components ● Zero-touch deployment for all components ● Dramatically reduced maintenance efforts Gear: ● ● 3 x G 100 12 x G 50 w 3 x AP 3 2 x AP 5 Effort: ● Few hours from time to time, because of step-by-step order and deployment Status February 2016: More than half of the sites are up and running with Ocedo GWs, ordering step by step is going on © 2016 Riverbed Technology. All rights reserved. 12

Government - Mauritius Project Description The customer is a belongs to the Government of Mauritius. Headquarter and branch in Mauritius plus 8 overseas offices worldwide have to get connected including switching and wireless (for home offices too). Ocedo was beating the competitors with: ● Automated fully-meshed VPN ● Easy and seamless integration of multiple home offices (L 2 VPN) ● Pure central management of all components ● Zero-touch deployment for all components ● Dramatically reduced maintenance efforts Gear: ● 9 x G 50 w ● 5 x AP 5 r & nx AP 3 ● nx S 12 Effort: ● 1 day configuration ● Max few hours for each office replacing the infrastructure Status February 2016: Po. C was successful, in ordering process © 2016 Riverbed Technology. All rights reserved. 13

Manufacturer for LED-based illumination technology - Germany Project Description The customer is one of the leading manufacturers of LED-based illumination technology and light systems. They have offices and production branches in 40 countries all over the world, HQ is in Germany. All offices have MPLS connection, mostly used for Citrix, but the bandwidth was often too small and the branches demanded local internet breakout. It was almost decided to have Citrix Cloud. Bridge Virtual. WAN devices installed in all locations, but the partner brought Ocedo into the game. Ocedo was beating the competitors with: ● Hybrid WAN - use 2 or more Uplinks and use for failover (and loadbalancing/Qo. S/traffic path selection in future) ● very easy configuration - especially compared to the Cloud. Bridge config ○ comment of the Prof. Serv guy at partner: “we sold 5 days of consulting & configuration to the customer but actually we almost just got coffee and observed how the G 50 appliances came online in the CC. ” ● Citrix Cloud. Bridge is still used in some larger locations, but the customer has saved >50 k€ with Ocedo Gear: ● 36 x G 50 W, 20 x AP 3, 2 x G 100 Effort: ● ½ day for demoing the functionality and convince customer ● ½ day per location to replace and configure G 50 -onsite Status February 2016: Ordered, deployment/integration is currently happening, 50% done © 2016 Riverbed Technology. All rights reserved. 14

The Power of Software-Defined Networking Centralized Management & Operational Efficiency r Software-Defined WAN & Remote LAN Single Management & Control Plane For all Sites © 2016 Riverbed Technology. All rights reserved. 15

Demo © 2016 Riverbed Technology. All rights reserved. 16

Applications - Not Just Packets Simple to Use Steel. Head Integrated Visibility Steel. Central

Riverbed SD-WAN Product Roadmap Phase 1 Internet SD-WAN Phase 2 Hybrid SD-WAN Phase 3 Data Center Scale Phase 4 Services Platform ` Use Case Internet WAN Overlay with Branch Network automation Hybrid SD-WAN Overlay with Enterprise-class SD-WAN Extensible service options Dynamic routing for large-scale deployments for converged branches Management/Control Cloud-hosted Visibility via Steel. Central Branch Gateways SDI-130 & 330 up to 200 Mbps, SDI-1030, up to 1 Gbps, 1000 SDI-2030, up to 1 Gbps, 200 sites 2000 sites SDI-2030, up to 1 Gbps, 5000 sites SDI-VGM, up to 2. 5 Gbps SDI-5030 10 Gbps+ with clustering L 2 & L 3 Intra-zone Mesh and Hub & Spoke L 2 & L 3 Intra-zone Mesh and Deterministic path selection DPS Hub & Spoke (DPS) Embedded Steel. OS with Primary SD-WAN services: Static Routing, DPI, Qo. S, Path Selection, integrated Security, VPNs Embedded Steel. OS, Dynamic routing (BGP, OSPF), VRRP, Path Quality, VPN+, Auto Topology, Steel. Head WANOpt integration, Steel/Netflow Data Center Gateways Supported Topologies Services © 2016 Riverbed Technology. All rights reserved. On-prem appliance SDI-5030 10 Gbps+ with clustering Steel. OS, HA via cluster w/ Load Balancing in DC, Path Quality++, optimized cloudbased security – Zscaler, Steel. Central++ Functional separation, ++ Steel. OS, Tighter integration with Steel. Head, WAN-Opt as a service, Integrated 3 rd party service chain 19

Business intent: a common language for fast application rollout and easy change management Business goals I want this new Business leader critical to exclusively be confidential delivered “Financial Consolidation” SAP module In Asia to Users in the Financial Department High level IT abstractions Application Groups Performance Groups Security Groups Sites Users IT leader SD-WAN Controller Global network service abstractions DPI library Network leader © 2016 Riverbed Technology. All rights reserved. Service chains Firewall policies Encrypted Segments Uplinks Active Directory Subnets 20

Steel. Head Hybrid Networking has an exciting future Software Steel. OS 9. 1 § Ri. OS Hybrid Networking § WAN optimization § Controlled by SCC © 2016 Riverbed Technology. All rights reserved. 9. 2 § Hybrid Networking scale and additional enhancements XX 70 § Steel. OS migration with base SD-WAN services / Hybrid Networking § WAN optimization 21

Best of Technology and Enterprise Needs Router Incumbents SDWAN pureplays WAN specialists © 2016

Why Riverbed SD-WAN Excellence Vision Experience Comprehensive application performance, visibility and control product portfolio Driving Market Leading Evolution into the WAN <space> Tier 1 Proven Enterprise Vendor <spacer> © 2016 Riverbed Technology. All rights reserved. 23