JT SD-WAN

Licensing
Premier
Prime Prime Secure Premier Elite
Platform SD-WAN SD-WAN Secure SD-WAN
SD-WAN
LTE ⚫ ⚫ ⚫ ⚫
LTE support
WiFi ⚫ ⚫ ⚫ ⚫
WiFi interface support
WiFi interface support
QoS ⚫ ⚫ ⚫ ⚫
Classification
DSCP marking
Adaptive rate limiting
ZTP ⚫ ⚫ ⚫ ⚫
ZTP agent & server
Certificate based authentication
2-factor authentication
Auto upgrade, configuration
Global ZTP server based
Encrypted URL based
Deployment Options ⚫ ⚫ ⚫ ⚫
Virtual
Physical
Cloud Azure
Cloud AW
Cloud GCE
Provisioning ⚫ ⚫ ⚫ ⚫
Template-based provisioning
Custom parameterization
Zero Touch provisioning

JT Group Limited @JT_Business

Premier
Prime Prime Secure Premier Elite
Platform SD-WAN SD-WAN Secure SD-WAN
SD-WAN
Other Platform Capabilities ⚫ ⚫ ⚫ ⚫
Quick Assist support (hw based encryption/decryption)
TPM chip for storing keys & sensitive data
uCPE ⚫ ⚫ ⚫ ⚫
uCPE - platform level support w/service chaining
uCPE - 3rd party VM Lifecycle Management

Premier
Prime Prime Secure Premier Elite
SD Routing SD-WAN SD-WAN Secure SD-WAN
SD-WAN
Layer 2 - Interface Features⚫ ⚫ ⚫ ⚫
VLAN tagging
Aggregated Ethernet
PPPoE
Routing⚫ ⚫ ⚫ ⚫
Static Routing
OSPF v2/v3
MP-BGP4
MP-BGP IPv6 SAFI support
RIPv2
BFD
ECMP
Policy based routing
Route Reflector
Flow Mirroring
VRRP
Multicast ⚫ ⚫ ⚫ ⚫
IGMP v2/3 (LAN intf)
PIM SM (LAN/WAN)
PIM SSM
PIM RP, Bootstrap RP, Anycast RP
Anycast RP
IP Address Management ⚫ ⚫ ⚫ ⚫
DHCP client
DHCP relay
DHCP server
DHCP v6 client
DHCP v6 server
CGNAT
Static
Dynamic
NATPT
ALG support
EIM/EIF
PBA support
MPLS VPN ⚫ ⚫ ⚫ ⚫
MPLS BGP L3VPN √ √ √ √

JT Group Limited @JT_Business

Premier
Prime Prime Secure Premier Elite
Layer 4 SD-WAN SD-WAN Secure SD-WAN
SD-WAN
IKE based IPSec VPN Tunnels⚫ ⚫ ⚫ ⚫
IKEv2/v1
Pre-shared key/PKI authentication
Dead peer detection
Diffie-Hellman key negotiation
AES 128/256 encryption (IKE/IPsec)
SHA1/SHA256/SHA384/SHA512/null hashing
NAT traversal
Perfect forward secrecy
IPsec rekey time/volume based
Anti-replay
Pre/post fragmentation
Route based VPN
IPv6 based IPSec support
Dual Stack support
Stateful (L4) Firewall
Zone and endpoint based stateful firewall
5 tuple flows based (zone, address, user, region), Geo-IP,
blacklisting
Rich actions (accept, drop/discard, rate-limit, log)
ALG support
IPv6 support
DOS Protection
Aggregate and classified DDoS profiles
L3 ICMP Flood, IP other flood
UDP, TCP SYN flood
ICMPv6 flood
SCTP flood
Port scans and host sweeps
L2-L4 anomaly detection
IPv6 support

Premier
Prime Prime Secure Premier Elite
Prime SD-WAN SD-WAN SD-WAN Secure SD-WAN
SD-WAN
Application Visibility
Identification of 3000+ applications & protocols
Support for user-defined applications & app groups
Support for user defined application filters based on any
combination of family, subfamily, risk, productivity & tag
Nested application support
Enable packet capture based on known/unknown applications
IPv6 support

JT Group Limited @JT_Business

Premier
Prime Prime Secure Premier Elite
Prime SD-WAN SD-WAN SD-WAN Secure SD-WAN
SD-WAN
SD-WAN Deployment Options
Behind a NAT device/firewall
Encrypted and Non-encrypted overlays with MPLS/GRE or
VXLAN
SD-WAN Controller
WAN circuit support
Full Mesh Topology
Hub-Spoke Topology
Any Topology
Dynamic IPSec overlays
Direct Internet Access
Number of WAN Links
Carrier-grade SD-WAN
MP-BGP route exchange with SDN controller
Primary to secondary WAN link failover in < 2 seconds
OAM – Handle branch device / link failure to the controller
OAM – Redundant controllers
Multi-tenancy
Stateful high-availability
Link aggregation
Hierarchical QoS
Per tunnel QoS
LTE network optimized probing (adaptive probing)
Shared multi-tenant control plane
Overlay encapsulation options (VXLAN, IPSec)
Dynamic IPSec VPN Tunnel Overlays
Secure (and separate) control and data channels
Automatic Key Management
Secure on-demand data channels with unique key pairs
between any two sites
Two factor authentication
Automatic certificate lifecycle management
Control Plane based - dynamic – OTT topology based IPSec
tunnels for data
Traffic Steering
Route based traffic steering
Seamless integration with WAN optimization devices
App based intelligent path selection – fixed criteria
App based intelligent path selection – user-defined criteria,
least cost, high bandwidth paths
Traffic Load Balancer - inline ADC-lite functionality for best
service chaining experience and L7 load balancing
URL based traffic management
IPv6 support

JT Group Limited @JT_Business

Premier
Prime Prime Secure Premier Elite
Prime SD-WAN SD-WAN SD-WAN Secure SD-WAN
SD-WAN
Application traffic management
Application based traffic steering
AppQoS – Traffic shaping
AppQoS – Rate limiting
Application-based SLAs
Selective application encryption (ie: encryption based on app
or traffic type)
Application blocking
Universal SD-WAN Migration Gateway
BGP based SD-WAN gateway
IPSec based SD-WAN gateway
Application performance based gateway

Premier
Prime Prime Secure Premier Elite
Supreme SD-WAN SD-WAN Secure SD-WAN
SD-WAN
Application traffic conditioning
Forward Error Correction (FEC)
Packet Cloning - Decloning
Packet Striping across SD-WAN path bundle
CODEC support & MOS Score based Traffic Engineering
DIA/DCA Traffic Optimizations for Cloud SaaS destined sites
IPv6 support
User & Group Level Traffic Control for SD-WAN
User/Group based policies with support for Active Directory &
LDAP
Kerberos, Captive Portal Form, Oauth, SAML SP support
SD-WAN QoS Control support by User-ID, Group
SD-WAN Traffic Engineering Policy Control support by User-ID,
Group
SD-WAN L7 SLA policy based traffic engineering by User-ID
and Group
L4 Load Balancer
Layer 4 load balancing
LB algorithms – Hash/RR/Cost
Persistence profiles
Health monitoring – L4 based (TCP/ICMP)
Health monitoring – L7 based (HTTP)
Direct server return – L2
Direct server return – L3
LB behind NAT – reverse proxy forwarding
High-availability – active-backup

JT Group Limited @JT_Business

Premier
Prime Prime Secure Premier Elite
NGFW SD-WAN SD-WAN Secure SD-WAN
SD-WAN
DNS Proxy & Security
DNS Forwarder
DNS Split Proxy
DNS Proxy
DNS Security Feeds and DNS Firewall
Next-Generation (L7) Firewall
L7 application based policies
Application triggers - family/sub family, risk, productivity, tags
Device Identifiction, fingerprinting and logging
Device ID based traffic management
Network Access Control
User/Group based policies with support for Active Directory
& LDAP
Kerberos, Captive Portal Form, Oauth, SAML SP support
802.1x with RADIUS back-end
802.1x Certificate and MAC based access control
Policy trigger support by User-ID, Group
Versa Forward Proxy ⚪ ⚫ ⚫ ⚫
DIA/DCA use-case coverage
SSL-TLS leverage only for traffic forwarding purposes
Security Service Chaining
URL/Content Filtering & Captive Portal ⚪ ⚫ ⚫ ⚫
Predefined/user defined categories and actions
Whitelist/blacklist
Search patterns/strings
Web reputation feeds
Reputation/category based actions / captive portal
URL filter based captive portal w/ rich set of actions
Intelligent Path selection based on URL category
Custom action messages
IPv6 Support (URL Identification and Traffic Engineering)
IPv6 Support (Categoization and Reputation)

JT Group Limited @JT_Business

Premier
Prime Prime Secure Premier Elite
UTM SD-WAN SD-WAN Secure SD-WAN
SD-WAN
Antivirus ⚪ ⚪ ⚪ ⚫
Multiple file types
Multiple protocol detection - FTP, HTTP, Email
Compressed file type detection
Nested compression
Packet direction – client/server
NG-IPS ⚪ ⚪ ⚪ ⚫
Vulnerability Profiles - by CVE ID/signature set /CVSS
Score/Packet direction/Class
Multiple Vulnerability DB Reference
OS/Product based
Signature based & Protocol Anomaly based detection
Packet capture - pre & post window
WAN circuit support
L7 anomaly detection
Javascript anomaly detection
SSL & TLS Proxy ⚪ ⚪ ⚪ ⚫
SSL Inspection for invalid, expired, untrusted certificates
HTTPS Proxy
SSLv4 & TLS 1.2 Proxy
File Filtering & DLP ⚪ ⚪ ⚪ ⚫
File Feeds and Filtering

To find out more contact us at:

JT Group Limited @JT_Business