Recent Trends in Potential Security Solutions for SD-WAN: A Systematic Review

Varuna, W. Rose; Vadivel, R.

doi:10.1007/978-981-16-3153-5_1

Cited by 3 publications

(1 citation statement)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Therefore, SD-WAN is the solution that best satisfies this requirement because it offers simplified management. A network architecture based on SD-WAN and automatic VPN must be designed and implemented while taking engineering best practices into account [8] . To achieve such goals and operate such architectures, certain technologies need to be implemented.…”

Section: Introductionmentioning

confidence: 99%

Comparative Analysis of Flexiwan, OPNSense, and pfSense Cybersecurity Mechanisms in MPLS / SD-WAN Architectures

Hama Amin,

Ahmed

2023

PJBAS

View full text Add to dashboard Cite

SD-WAN, a software-defined network used in wide area networks, has grown in popularity among major corporations with geographically spread operations. Given the high prices of WAN connections, the key objective is to employ software-based solutions to offer a cost-effective balance. However, the proliferation of SD-WAN solutions from many vendors and open-sources has led in a rise in the number of threats and vulnerabilities to the technology. This research compares three popular open-source firewall solutions inside a certain design and examines cyber-attack vectors within the SD-WAN architecture using Graphical Network Simulator-3 (GNS3) software simulations. The presented topology consists of three branches, each of which employs one of the suggested firewalls, Flexiwan, OPNSense, or pfSense, and is linked by Multiprotocol Label Switching (MPLS), Virtual Private Network (VPN) and Internet Protocol Security (IPSec) tunnels. The research concludes that the solutions mentioned provide similar mechanisms for security, including confidentiality, integrity, and availability. Simulation results show that these open-source firewalls provide in-depth security features for SD-WAN architectures and can be implemented in such environments. However, the three solutions have vulnerabilities, which can be handled as long as they offer tools for adaptation because they are open-source and can be improved in future batches and updates within their community.

show abstract

Section: Introductionmentioning

confidence: 99%