fechar
fechar
Sua Rede do Amanhã
Sua Rede do Amanhã
Planeje seu caminho rumo a uma rede mais rápida, segura e resiliente projetada para os aplicativos e usuários aos quais você oferece suporte.
          Experimente a Netskope
          Coloque a mão na massa com a plataforma Netskope
          Esta é a sua chance de experimentar a plataforma de nuvem única do Netskope One em primeira mão. Inscreva-se em laboratórios práticos e individualizados, junte-se a nós para demonstrações mensais de produtos ao vivo, faça um test drive gratuito do Netskope Private Access ou participe de workshops ao vivo conduzidos por instrutores.
            Líder em SSE. Agora é líder em SASE de fornecedor único.
            Líder em SSE. Agora é líder em SASE de fornecedor único.
            A Netskope estreia como líder no Quadrante Mágico™ do Gartner® para Single-Vendor SASE
              Protegendo a IA generativa para leigos
              Protegendo a IA generativa para leigos
              Saiba como sua organização pode equilibrar o potencial inovador da IA generativa com práticas robustas de segurança de dados.
                E-book moderno sobre prevenção de perda de dados (DLP) para leigos
                Prevenção Contra Perda de Dados (DLP) Moderna para Leigos
                Obtenha dicas e truques para fazer a transição para um DLP fornecido na nuvem.
                  Livro SD-WAN moderno para SASE Dummies
                  SD-WAN moderno para leigos em SASE
                  Pare de brincar com sua arquitetura de rede
                    Compreendendo onde estão os riscos
                    O Advanced Analytics transforma a maneira como as equipes de operações de segurança aplicam insights orientados por dados para implementar políticas melhores. Com o Advanced Analytics, o senhor pode identificar tendências, concentrar-se em áreas de preocupação e usar os dados para tomar medidas.
                        Os 6 casos de uso mais atraentes para substituição completa de VPN herdada
                        Os 6 casos de uso mais atraentes para substituição completa de VPN herdada
                        O Netskope One Private Access é a única solução que permite que o senhor aposente sua VPN definitivamente.
                          A Colgate-Palmolive protege sua “propriedade intelectual "” com proteção de dados inteligente e adaptável
                          A Colgate-Palmolive protege sua “propriedade intelectual "” com proteção de dados inteligente e adaptável
                            Netskope GovCloud
                            Netskope obtém alta autorização do FedRAMP
                            Escolha o Netskope GovCloud para acelerar a transformação de sua agência.
                              Vamos fazer grandes coisas juntos
                              A estratégia de comercialização da Netskope, focada em Parcerias, permite que nossos Parceiros maximizem seu crescimento e lucratividade enquanto transformam a segurança corporativa.
                                Netskope solutions
                                Netskope Cloud Exchange
                                O Netskope Cloud Exchange (CE) oferece aos clientes ferramentas de integração poderosas para alavancar os investimentos em toda a postura de segurança.
                                  Suporte Técnico Netskope
                                  Suporte Técnico Netskope
                                  Nossos engenheiros de suporte qualificados estão localizados em todo o mundo e têm diversas experiências em segurança de nuvem, rede, virtualização, fornecimento de conteúdo e desenvolvimento de software, garantindo assistência técnica de qualidade e em tempo hábil.
                                    Vídeo da Netskope
                                    Treinamento Netskope
                                    Os treinamentos da Netskope vão ajudar você a ser um especialista em segurança na nuvem. Conte conosco para ajudá-lo a proteger a sua jornada de transformação digital e aproveitar ao máximo as suas aplicações na nuvem, na web e privadas.

                                      Severing the Link Between Network Costs and Application Performance

                                      May 09 2023

                                      Over the past two decades we have seen a major shift in working patterns and models at organisations around the world. Intertwined—driven by those workforce changes as well as enabling them—we have also seen a complete rearchitecting of the IT systems that underpin our corporations. Both of these change agents have driven spiralling network costs in the name of maintaining and improving the performance of the essential applications for hybrid workforces.

                                      Let’s be explicit about the changes to which we are alluding.

                                      Firstly, software-as-a-service (SaaS) applications now completely dominate the digital stack for businesses of all sizes, a change driven by vendors removing support for native on-premise applications in favour of cloud delivered services. And it isn’t just the applications that pivoted to an on demand service model.  Platform-as-a-service (PaaS) and infrastructure-as-a-service (IaaS) are both considered the “new” norm for data centre requirements. Like SaaS, these services have enabled businesses to migrate workloads away from private IT architectures sitting in corporate data centres to a pay-as-you-go platform for cloud compute, storage, and network virtualisation.

                                      Alongside these tech changes we have witnessed wider changes in workforce behaviours, the principal of which has been the rise of hybrid work. 

                                      In short, our apps are no longer residing in easily ring-fenced data environments and our employees who are accessing these apps are no longer working from predictable “known” locations. So where does this leave our existing corporate wide area networks? Is it time to reassess their relevance for today’s data connectivity?

                                      These dual transformations (tech and user) are huge, and with both of these in mind, it is important for organisations to re-evaluate their reliance on traditional network architectures for optimised application performance. Why? 

                                      1. Commodity networks (home broadband, 5G) are now considered “good enough” for the vast majority of users. With some notable exceptions, we no longer need to plough money into hugely fat pipes connecting users to resources, but for many organisations these pipes between corporate locations are still being funded and, in some cases, sitting empty. Gartner predicts that by 2026, 45% of enterprise locations will use only internet services for their WAN connectivity1We need to build enterprise infrastructures that enable a positive user experience and a secure connection, using ubiquitous and cost effective WAN connections.
                                      1. While many employees don’t need super fast and ultra resilient network connectivity, some always will. In fact, the popularity of hybrid work for knowledge workers will challenge these requirements for all users through the need to provide real-time communications over non-corporate and uncontrolled network connections.  We need to rethink the economics and operational models of our high performing network connections.
                                      1. Having grown and adapted throughout the most recent period of change (did someone mention a pandemic?), today’s enterprise networks often look like something a mad scientist would build. They are riddled with hairpins to reach legacy security and in order to make use of legacy access technologies, like VPNs, to ensure remote users are secured using the same on-premise tools.  There will always be economic or operational constraints that drive organisations to adapt what they currently have to make it work a little longer, but there comes a time to recognise when such shortcuts actually cost more – in productivity as well as dollars – than a long overdue bold transformation.

                                      Organisations continue to spend vast amounts of money on dedicated network connections like MPLS, even when the destinations that these expensive paths once ran between are no longer populated. A big posh motorway connecting an empty data centre and an empty office is nothing but a waste.   

                                      TeWeBs, CC BY-SA 4.0 https://creativecommons.org/licenses/by-sa/4.0, via Wikimedia Commons

                                      VPNs are another illogical approach in the modern environment, because they backhaul traffic to a third location, rather than providing security functions inline as the traffic goes about its business between remote user and cloud hosted applications. There is also a growing body of evidence confirming that many VPN configurations are insecure due to the overprovisioning of client access to corporate assets. This provides false reassurance in a world where we know a zero trust model is a much more practical and secure approach. 

                                      There is another way in the quest for application performance 

                                      Organisations can benefit from taking a pause and analysing their evolved network traffic patterns.  This knowledge is power, in terms of both improved user experience and significant cost savings. Network technologies don’t stand still and advances like our recently announced integrated endpoint SD-WAN client can make a huge difference to the costs of enabling remote workforces.

                                      Enhancements in SD-WAN are an important part of the mix, but they are not the only lever to pull when looking for better value or a better fit networking architecture for application performance.  SASE (secure access service edge) takes the benefits of evolving SD-WAN one step further.

                                      SASE is a concept for the coming together of SD-WAN services with SSE (security service edge), and the key benefit pertinent to this blog’s theme is that as well as being cloud native security (so it does a significantly better job of securing the modern cloud application stack than legacy technologies), SSE does this inline, without unnecessary hairpinning or backhauling—both of which cost money and severely impact user experience. 

                                      Architecting a network design that favours a framework like SASE can help sever the link between network costs and application performance. SASE enables a cloud-native approach to security and networking that has less reliance on traditional, hardware-based platforms and expensive underlay networks such as MPLS. SASE allows organisations to pivot towards a cloud-delivered platform using lower-cost broadband connections. It simply does not make sense to send internet-bound traffic over expensive network links back to head office for on-premise employees, or over Internet VPNs for remote employees, just so it can be security checked before being forwarded to the internet where our applications reside. It makes more sense to implement security checks “as-a-service” in the cloud.

                                      Getting this right will result in the realisation of cost savings for network links, hardware, software, and support contracts with no detrimental effect on application performance for employees. The result is networking nirvana. 

                                      1Gartner: changes in WAN requirements, SD-WAN/SASE assumptions and magic quadrant for network services, February 2023.

                                      author image
                                      Jason Atkins
                                      Jason Atkins is an accomplished IT professional with more than 30 years across multiple IT domains including cybersecurity, LAN/WAN technologies and telecomm.
                                      Jason Atkins is an accomplished IT professional with more than 30 years across multiple IT domains including cybersecurity, LAN/WAN technologies and telecomm.

                                      Mantenha-se informado!

                                      Assine para receber as últimas novidades do Blog da Netskope