{"id":125739,"date":"2025-05-14T10:07:48","date_gmt":"2025-05-14T07:07:48","guid":{"rendered":"https:\/\/www.catonetworks.com\/sd-wan\/sd-wan-%eb%b3%b4%ec%95%88\/"},"modified":"2025-05-26T12:26:18","modified_gmt":"2025-05-26T09:26:18","slug":"solving-the-challenges-of-sd-wan-security-with-cloud-native","status":"publish","type":"af-sd-wan-wiki","link":"https:\/\/www.catonetworks.com\/ko\/sd-wan\/solving-the-challenges-of-sd-wan-security-with-cloud-native\/","title":{"rendered":"SD-WAN \ubcf4\uc548"},"content":{"rendered":"<section class=\"c-block c-margin c-margin--bottom-default c-block b-text b-text--page-solving-the-challenges-of-sd-wan-security-with-cloud-native  align b-text-layout-default b-text-style-default\" id=\"b-text-1\">\n\t<div class=\"c-background c-background--container\">\n    \n    \n    <div class=\"c-background__content\">\n\t\t<div class=\"container\">\n\t\t\t<div class=\"c-text\" >\n\t\t<div class=\"main-description\">\n<p>August 2019 saw a significant increase in the discovery of new malware according to statistics from<span>\u00a0<\/span><a href=\"https:\/\/www.av-test.org\/en\/statistics\/malware\/\">AV-TEST \u2013 The Independent IT-Security Institute<\/a>. In August alone, 14.44 million new malicious programs were registered by the institute, raising the total number of registered malware programs above 938 million. The sheer magnitude of these numbers provides a sobering perspective and helps quantify the threats facing enterprise networks.<\/p>\n<\/div>\n<p>As the WAN is the ingress and egress point of corporate networks, securing it is vital to mitigating risk and improving security posture. However, cloud services and mobile users make networks much more dynamic and difficult to secure than they were just a decade ago.<\/p>\n<p>These fundamental changes in how we do business demand a new approach to WAN security. Appliance-based SD-WAN and MPLS (Multiprotocol Label Switching) simply aren\u2019t designed to address these use cases. Fortunately,<span>\u00a0<\/span><a href=\"https:\/\/www.catonetworks.com\/sd-wan\/\">cloud-based SD-WAN<\/a><span>\u00a0<\/span>offers enterprises a holistic WAN solution capable of meeting modern security challenges at scale with cloud-native software and security as a service.<\/p>\n<p>But what makes cloud-based SD-WAN security and the security as a service model different? Let\u2019s find out.<\/p>\n\n\t<\/div>\n\t\t<\/div>\n\t<\/div>\n<\/div>\n<\/section>\n<section class=\"c-block c-margin c-margin--bottom-default c-block b-text b-text--page-solving-the-challenges-of-sd-wan-security-with-cloud-native  align b-text-layout-default b-text-style-default\" id=\"WAN_Security_and_the_Challenges_Facing_the_Enterprise\">\n\t<div class=\"c-background c-background--container\">\n    \n    \n    <div class=\"c-background__content\">\n\t\t<div class=\"container\">\n\t\t\t<div class=\"c-text\" >\n\t\t<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_86 ez-toc-wrap-left counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.catonetworks.com\/ko\/sd-wan\/solving-the-challenges-of-sd-wan-security-with-cloud-native\/#WAN_Security_and_the_Challenges_Facing_the_Enterprise\" >WAN Security and the Challenges Facing the Enterprise<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.catonetworks.com\/ko\/sd-wan\/solving-the-challenges-of-sd-wan-security-with-cloud-native\/#Why_SD-WAN_Security_with_Cloud-Native_Software_Security_as_a_Service_is_a_Game-Changer\" >Why SD-WAN Security with Cloud-Native Software &amp; Security as a Service is a Game-Changer<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.catonetworks.com\/ko\/sd-wan\/solving-the-challenges-of-sd-wan-security-with-cloud-native\/#Enterprise-Grade_Cloud-Based_SD-WAN_Security_Features\" >Enterprise-Grade Cloud-Based SD-WAN Security Features<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.catonetworks.com\/ko\/sd-wan\/solving-the-challenges-of-sd-wan-security-with-cloud-native\/#Cato_Offers_Modern_and_Scalable_SD-WAN_Security\" >Cato Offers Modern and Scalable SD-WAN Security<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"WAN_Security_and_the_Challenges_Facing_the_Enterprise\"><\/span>WAN Security and the Challenges Facing the Enterprise<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>A good starting point in explaining why cloud-native SD-WAN is so compelling from a security perspective is the shortcomings of two older WAN solutions: MPLS and appliance-based SD-WAN.<\/p>\n<p>MPLS was designed to provide dedicated, reliable, and high-performance connections between two endpoints before cloud and mobile took over the world. However, there\u2019s no encryption on MPLS circuits and any security features like traffic inspection, IPS (Intrusion Prevention System), and anti-malware have to be layered in separately. Appliance-based SD-WAN generally offers encryption, solving one of the problems associated with MPLS, but it\u2019s effectively the same story after that. SD-WAN appliances are not security appliances. For example, to achieve the functionality of a Next-Generation Firewall (NGFW), you need to add a discrete appliance at the network edge.<\/p>\n<p>For both MPLS and appliance-based SD-WAN, the \u201cadd appliances to add security\u201d approach has a number of shortcomings including:<\/p>\n<ul>\n<li><strong>Complex and difficult to scale<\/strong>. The more appliances you add, the more complex the network becomes. Not only does each additional appliance require more time investment, it introduces more potential for oversights that lead to costly breaches. A single misconfigured appliance can create a major security risk and manual configuration is conducive to oversight and errors.<\/li>\n<li><strong>Expensive<\/strong>. Each discrete appliance must be sourced, licensed, provisioned, and maintained, and the cost adds up fast.<\/li>\n<li><strong>Limited when it comes to cloud and mobile<\/strong>. Appliance-based architectures are inherently site-focused. There isn\u2019t a simple way to add support for cloud most appliances, both from a security and connectivity standpoint.<\/li>\n<\/ul>\n\n\t<\/div>\n\t\t<\/div>\n\t<\/div>\n<\/div>\n<\/section>\n<section class=\"c-block c-margin c-margin--bottom-default c-block b-text b-text--page-solving-the-challenges-of-sd-wan-security-with-cloud-native  align b-text-layout-default b-text-style-default\" id=\"Why_SD-WAN_Security_with_Cloud-Native_Software_&amp;_Security_as_a_Service_is_a_Game-Changer\">\n\t<div class=\"c-background c-background--container\">\n    \n    \n    <div class=\"c-background__content\">\n\t\t<div class=\"container\">\n\t\t\t<div class=\"c-text\" >\n\t\t<h2><span class=\"ez-toc-section\" id=\"Why_SD-WAN_Security_with_Cloud-Native_Software_Security_as_a_Service_is_a_Game-Changer\"><\/span>Why SD-WAN Security with Cloud-Native Software &amp; Security as a Service is a Game-Changer<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The cloud-native network infrastructure supporting the<span>\u00a0<\/span><a href=\"https:\/\/www.catonetworks.com\/cato-cloud\/\">Cato Cloud<\/a><span>\u00a0<\/span>takes SD-WAN security to the next level by integrating security features to the underlying WAN fabric. Built from the ground up with modern enterprise networks in mind, Cato\u2019s cloud-native infrastructure eliminates the need for most proprietary hardware integrations by baking-in security features, reduces complexity by providing a single management interface, and reduces the technical expertise and time investment required for WAN management.<\/p>\n<p>Additionally, inspections of TLS traffic occur at the PoPs (Points of Presence) on Cato\u2019s global private-backbone helping to secure traffic to and from the cloud efficiently. Further, with<span>\u00a0<\/span><a href=\"https:\/\/www.catonetworks.com\/solutions\/software-defined-perimeter-sdp\/\">Cato\u2019s Software Defined Perimeter<\/a>, support for mobile users becomes simple and scalable.<\/p>\n<p>In short, by shifting security functions to the cloud, Cato\u2019s delivers security as a service model that brings cloud scalability, economies of scale, and agility to SD-WAN security.<\/p>\n\n\t<\/div>\n\t\t<\/div>\n\t<\/div>\n<\/div>\n<\/section>\n<section class=\"c-block c-margin c-margin--bottom-default c-block b-text b-text--page-solving-the-challenges-of-sd-wan-security-with-cloud-native  align b-text-layout-default b-text-style-default\" id=\"Enterprise-Grade_Cloud-Based_SD-WAN_Security_Features\">\n\t<div class=\"c-background c-background--container\">\n    \n    \n    <div class=\"c-background__content\">\n\t\t<div class=\"container\">\n\t\t\t<div class=\"c-text\" >\n\t\t<h2><span class=\"ez-toc-section\" id=\"Enterprise-Grade_Cloud-Based_SD-WAN_Security_Features\"><\/span>Enterprise-Grade Cloud-Based SD-WAN Security Features<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Now that we understand the architectural advantages of cloud-based SD-WAN security, let\u2019s explore some of the specific features that set Cato Cloud apart.<\/p>\n<ul>\n<li><strong>NGFW<\/strong>. Cato\u2019s NGFW inspects WAN and Internet-bound traffic and allows implementation of granular security policies based on network entities, time, and type of traffic. The NGFW\u2019s Deep Packet Inspection engine classifies applications or services related to a given traffic flow without decrypting payloads. This helps the NGFW achieve full application awareness and contextualize traffic for more granular policy enforcement.<\/li>\n<li><strong>Secure Web Gateway (SWG)<\/strong>. Malware, phishing, and similar attacks that originate on the Internet pose a real threat to enterprise WANs. SWG focuses on web access control to prevent downloads of suspicious or malicious software. Predefined policies exist for a number of website categories and enterprises can input their own custom rules to further optimize web safety within the WAN.<\/li>\n<li><strong>Anti-malware<\/strong>. To deliver enterprise-grade anti-malware functionality, the Cato Cloud takes a two-pronged approach. First, a signature and heuristics-based engine that is updated with the latest information from global threat databases scans traffic for malware. Second, Cato has partnered with infosec industry leader SentinalOne to incorporate artificial intelligence and machine learning to identify unknown malware that may evade signature-based checks.<\/li>\n<li><strong>IPS<\/strong>. Cato\u2019s Intrusion Prevention System provides contextually-aware SD-WAN security. Customers benefit from the scale of the Cato network in the form of a more robust IPS. Cato Research Labs use big data to optimize IPS performance and reduce false positives and false negatives.<\/li>\n<li><strong>Managed Threat Detection and Response Service (MDR)<\/strong>. With MDR, enterprises can offload compromised endpoint detection to Cato\u2019s security operations center (SOC). With MDR, enterprises not only reduce the support burden on in-house staff, they minimize one of the key drivers of damage created by malware: dwell time. With MDR, Cato\u2019s SOC works to rapidly identify and contain threats as well as advise on remediation. The SOC team also provides monthly reports that help quantify network security incidents (here\u2019s a genericized example report for reference (PDF)).<\/li>\n<\/ul>\n\n\t<\/div>\n\t\t<\/div>\n\t<\/div>\n<\/div>\n<\/section>\n<section class=\"c-block c-margin c-margin--bottom-default c-block b-text b-text--page-solving-the-challenges-of-sd-wan-security-with-cloud-native  align b-text-layout-default b-text-style-default\" id=\"Cato_Offers_Modern_and_Scalable_SD-WAN_Security\">\n\t<div class=\"c-background c-background--container\">\n    \n    \n    <div class=\"c-background__content\">\n\t\t<div class=\"container\">\n\t\t\t<div class=\"c-text\" >\n\t\t<h2><span class=\"ez-toc-section\" id=\"Cato_Offers_Modern_and_Scalable_SD-WAN_Security\"><\/span>Cato Offers Modern and Scalable SD-WAN Security<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>As we\u2019ve seen, the complexities and cost of sourcing, provisioning, patching, and maintaining a fleet of appliances are abstracted away with security as a service. Cloud-based SD-WAN offers a number of inherent advantages appliance-based SD-WAN and MPLS simply can\u2019t deliver. This is because cloud-native software and the security as a service model enable Cato to take a converged approach to networking and security. As a result, users benefit from an information security, operations, and business perspective.<\/p>\n<p>This point is driven home by Cato customer Jeroen Keet, Senior Network and System Architect at Kyocera Senco: \u201cCompanies moving to the cloud should have a closer look at Cato. The integrated connectivity, security, and intelligence make it an evolutionary step forward for all businesses. If you are willing to use all of the functionality Cato Networks has to offer, it will bring significant financial, functional and IT management benefits.\u201d<\/p>\n<p>If you\u2019d like to learn more about how Cato is revolutionizing SD-WAN security or need help choosing a WAN connectivity solution that meets your needs, contact us. If you\u2019re still not convinced and would like to see Cato Cloud in action, you\u2019re welcome to<span>\u00a0<\/span><a href=\"https:\/\/go.catonetworks.com\/SD-WAN-demo.html\">schedule a demo<\/a><span>\u00a0<\/span>to see it live.<\/p>\n\n\t<\/div>\n\t\t<\/div>\n\t<\/div>\n<\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"","protected":false},"featured_media":0,"template":"","class_list":["post-125739","af-sd-wan-wiki","type-af-sd-wan-wiki","status-publish","hentry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.3 (Yoast SEO v28.3) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>SD-WAN \ubcf4\uc548 \uacfc\uc81c \ud574\uacb0 | Cato Networks<\/title>\n<meta name=\"description\" content=\"\ud074\ub77c\uc6b0\ub4dc \uae30\ubc18 SD-WAN\uc740 \ub300\uccb4 \uae30\uc220\uc5d0\ub294 \uc5c6\ub294 \ub2e4\uc591\ud55c \uc774\uc810\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4. \uc774 \ubb38\uc11c\uc5d0\uc11c\ub294 Cato\uac00 \uc5b4\ub5bb\uac8c SD-WAN \ubcf4\uc548\uc744 \ud601\uc2e0\ud558\ub294\uc9c0 \uc124\uba85\ud569\ub2c8\ub2e4.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.catonetworks.com\/ko\/sd-wan\/solving-the-challenges-of-sd-wan-security-with-cloud-native\/\" \/>\n<meta property=\"og:locale\" content=\"ko_KR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SD-WAN \ubcf4\uc548\" \/>\n<meta property=\"og:description\" content=\"\ud074\ub77c\uc6b0\ub4dc \uae30\ubc18 SD-WAN\uc740 \ub300\uccb4 \uae30\uc220\uc5d0\ub294 \uc5c6\ub294 \ub2e4\uc591\ud55c \uc774\uc810\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4. \uc774 \ubb38\uc11c\uc5d0\uc11c\ub294 Cato\uac00 \uc5b4\ub5bb\uac8c SD-WAN \ubcf4\uc548\uc744 \ud601\uc2e0\ud558\ub294\uc9c0 \uc124\uba85\ud569\ub2c8\ub2e4.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.catonetworks.com\/ko\/sd-wan\/solving-the-challenges-of-sd-wan-security-with-cloud-native\/\" \/>\n<meta property=\"og:site_name\" content=\"Cato Networks\" \/>\n<meta property=\"article:modified_time\" content=\"2025-05-26T09:26:18+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"SD-WAN \ubcf4\uc548 \uacfc\uc81c \ud574\uacb0 | Cato Networks","description":"\ud074\ub77c\uc6b0\ub4dc \uae30\ubc18 SD-WAN\uc740 \ub300\uccb4 \uae30\uc220\uc5d0\ub294 \uc5c6\ub294 \ub2e4\uc591\ud55c \uc774\uc810\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4. \uc774 \ubb38\uc11c\uc5d0\uc11c\ub294 Cato\uac00 \uc5b4\ub5bb\uac8c SD-WAN \ubcf4\uc548\uc744 \ud601\uc2e0\ud558\ub294\uc9c0 \uc124\uba85\ud569\ub2c8\ub2e4.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.catonetworks.com\/ko\/sd-wan\/solving-the-challenges-of-sd-wan-security-with-cloud-native\/","og_locale":"ko_KR","og_type":"article","og_title":"SD-WAN \ubcf4\uc548","og_description":"\ud074\ub77c\uc6b0\ub4dc \uae30\ubc18 SD-WAN\uc740 \ub300\uccb4 \uae30\uc220\uc5d0\ub294 \uc5c6\ub294 \ub2e4\uc591\ud55c \uc774\uc810\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4. \uc774 \ubb38\uc11c\uc5d0\uc11c\ub294 Cato\uac00 \uc5b4\ub5bb\uac8c SD-WAN \ubcf4\uc548\uc744 \ud601\uc2e0\ud558\ub294\uc9c0 \uc124\uba85\ud569\ub2c8\ub2e4.","og_url":"https:\/\/www.catonetworks.com\/ko\/sd-wan\/solving-the-challenges-of-sd-wan-security-with-cloud-native\/","og_site_name":"Cato Networks","article_modified_time":"2025-05-26T09:26:18+00:00","twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.catonetworks.com\/ko\/sd-wan\/solving-the-challenges-of-sd-wan-security-with-cloud-native\/","url":"https:\/\/www.catonetworks.com\/ko\/sd-wan\/solving-the-challenges-of-sd-wan-security-with-cloud-native\/","name":"SD-WAN \ubcf4\uc548 \uacfc\uc81c \ud574\uacb0 | Cato Networks","isPartOf":{"@id":"https:\/\/www.catonetworks.com\/ko\/#website"},"datePublished":"2025-05-14T07:07:48+00:00","dateModified":"2025-05-26T09:26:18+00:00","description":"\ud074\ub77c\uc6b0\ub4dc \uae30\ubc18 SD-WAN\uc740 \ub300\uccb4 \uae30\uc220\uc5d0\ub294 \uc5c6\ub294 \ub2e4\uc591\ud55c \uc774\uc810\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4. \uc774 \ubb38\uc11c\uc5d0\uc11c\ub294 Cato\uac00 \uc5b4\ub5bb\uac8c SD-WAN \ubcf4\uc548\uc744 \ud601\uc2e0\ud558\ub294\uc9c0 \uc124\uba85\ud569\ub2c8\ub2e4.","breadcrumb":{"@id":"https:\/\/www.catonetworks.com\/ko\/sd-wan\/solving-the-challenges-of-sd-wan-security-with-cloud-native\/#breadcrumb"},"inLanguage":"ko-KR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.catonetworks.com\/ko\/sd-wan\/solving-the-challenges-of-sd-wan-security-with-cloud-native\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.catonetworks.com\/ko\/sd-wan\/solving-the-challenges-of-sd-wan-security-with-cloud-native\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.catonetworks.com\/ko\/"},{"@type":"ListItem","position":2,"name":"SD-WAN: Was ist Software-Defined WAN?","item":"https:\/\/www.catonetworks.com\/ko\/sd-wan\/"},{"@type":"ListItem","position":3,"name":"SD-WAN \ubcf4\uc548"}]},{"@type":"WebSite","@id":"https:\/\/www.catonetworks.com\/ko\/#website","url":"https:\/\/www.catonetworks.com\/ko\/","name":"Cato Networks","description":"","publisher":{"@id":"https:\/\/www.catonetworks.com\/ko\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.catonetworks.com\/ko\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ko-KR"},{"@type":"Organization","@id":"https:\/\/www.catonetworks.com\/ko\/#organization","name":"Cato Networks","url":"https:\/\/www.catonetworks.com\/ko\/","logo":{"@type":"ImageObject","inLanguage":"ko-KR","@id":"https:\/\/www.catonetworks.com\/ko\/#\/schema\/logo\/image\/","url":"https:\/\/www.catonetworks.com\/wp-content\/uploads\/2022\/08\/1559077757990.jpg","contentUrl":"https:\/\/www.catonetworks.com\/wp-content\/uploads\/2022\/08\/1559077757990.jpg","width":200,"height":200,"caption":"Cato Networks"},"image":{"@id":"https:\/\/www.catonetworks.com\/ko\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/cato-networks\/"]}]}},"_links":{"self":[{"href":"https:\/\/www.catonetworks.com\/ko\/wp-json\/wp\/v2\/af-sd-wan-wiki\/125739","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.catonetworks.com\/ko\/wp-json\/wp\/v2\/af-sd-wan-wiki"}],"about":[{"href":"https:\/\/www.catonetworks.com\/ko\/wp-json\/wp\/v2\/types\/af-sd-wan-wiki"}],"wp:attachment":[{"href":"https:\/\/www.catonetworks.com\/ko\/wp-json\/wp\/v2\/media?parent=125739"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}