{"id":112852,"date":"2020-06-23T09:00:58","date_gmt":"2020-06-23T16:00:58","guid":{"rendered":"https:\/\/www.paloaltonetworks.com\/blog\/?p=112852"},"modified":"2020-07-09T13:50:25","modified_gmt":"2020-07-09T20:50:25","slug":"network-multi-cloud-networking","status":"publish","type":"post","link":"https:\/\/origin-researchcenter.paloaltonetworks.com\/blog\/2020\/06\/network-multi-cloud-networking\/","title":{"rendered":"Multi-Cloud Networking Advances as Palo Alto Networks and Alkira Team Up"},"content":{"rendered":"

Palo Alto Networks is working with Alkira, a multi-cloud networking provider, to embed Palo Alto Networks VM-Series virtual firewalls into Alkira\u2019s networking-as-a-service platform. This integration is designed to help enterprises rapidly deploy and secure multi-cloud networks.<\/span><\/p>\n

We all recognize that cloud adoption continues to accelerate and shows no sign of slowing down. Enterprises are increasingly transitioning business-critical applications from on-premises data centers to a single or multiple public clouds and SaaS environments.\u00a0<\/span><\/p>\n

This transition to support digital transformation presents significant challenges for traditional network and network security IT architectures, which have neither adapted to the needs of the cloud nor historically operated in synergy with the cloud. All the causes of these challenges are too long to list but include knowledge gaps, disparate cloud capabilities and limits, costly over-provisioning (i.e. overspend), fragmented security controls and operational invisibility, to name but a few. New thinking and approaches are needed to ensure cloud adoption delivers timely, comprehensive and cost-effective solutions to business stakeholders.<\/span><\/p>\n

\u00a0<\/span>Unshackling enterprise IT teams to deliver immediate business value through accelerated cloud adoption requires specific capabilities. In conversations with many enterprises, we consistently hear about the burning need for five cloud network infrastructure and network security services:<\/span><\/p>\n

    \n
  1. Global network connectivity to and across clouds.<\/span><\/li>\n
  2. Consistent and pervasive security model.<\/span><\/li>\n
  3. Operational visibility.<\/span><\/li>\n
  4. Simple provisioning.<\/span><\/li>\n
  5. Cloud-friendly consumption model.<\/span><\/li>\n<\/ol>\n

    The collaboration of Palo Alto Networks and Alkira<\/a> meets each of these enterprise-grade capabilities and more.<\/span><\/p>\n

    \"This<\/span><\/div><\/span><\/p>\n

    At the heart of this is an integration between Palo Alto Networks VM-Series virtual firewalls and the Alkira Cloud Services Exchange (Alkira CSX) unified multi-cloud network, which is delivered as a service. To meet cloud speed and agility, enterprises can now easily deploy a global multi-cloud network integrated with VM-Series virtual firewalls for end-to-end visibility and governance. The entire multi-cloud network is ready for use in minutes, thanks to an intuitive digital design canvas and one-click deployment.<\/span><\/p>\n

    Alkira CSX consists of a network of globally distributed Alkira Cloud Exchange Points (CXPs), which are virtual multi-cloud points of presence interconnected with high-bandwidth, low-latency cloud backbone. VM-Series virtual firewalls live and scale inside the Alkira CXPs<\/span> \u2013 which, in turn, issue intent-based policies that allow enterprises to define traffic of interest for firewall inspection. To eliminate the need for configuring complicated routing domains or forcing network address translation (NAT), symmetric traffic steering simplifies proper stateful VM-Series operation in a single cloud location or across the entire cloud network.\u00a0<\/span><\/p>\n

    As application volumes change, Alkira CSX makes intelligent decisions to autoscale the VM-Series virtual firewalls to accommodate increasing or decreasing capacity demand in realtime. Autoscale avoids provisioning for peak capacity; at the same time, it allows dynamic high firewall scale when needed. Alkira CSX works jointly with Palo Alto Networks Panorama to make sure that autoscaling VM-Series virtual firewalls are configured with consistent security policies.\u00a0<\/span><\/p>\n

    The combination of Palo Alto Networks and Alkira helps make macro-level security consistent. This helps organizations that leverage the concept of <\/span>security zones<\/span><\/a>. For example, \u201cIntranet\u201d zone may be allowed to communicate with \u201cCloud\u201d zone, while \u201cDMZ\u201d zone may not be allowed to communicate with \u201cCloud\u201d zone. VM-Series virtual firewalls enforce advanced security policies to protect the allowed communications between zones with traffic content inspection, IPS, and malware analysis capabilities \u2013 and because Alkira CSX has full interoperability with VM-Series, enterprises can use Alkira CSX to maintain the same security architecture across their entire environment. This means IT security teams can design and enforce uniform zone-based security policies that stretches across on-prem, single cloud and multi-cloud environments to protect the following communication flows:\u00a0\u00a0<\/span><\/p>\n