Security News
Cisco this week announced patches for tens of vulnerabilities across its product portfolio, including a critical severity issue impacting the SD-WAN vManage software. Tracked as CVE-2021-1479 with a CVSS score of 9.8, the critical bug exists because of improper validation of user-supplied input and could allow an attacker to trigger a buffer overflow by sending a crafted connection request to the remote management component of SD-WAN vManage.
The WAN continues to extend its growth, with the number of enterprises connecting to over 100 inter-regional sites growing by 50%, from 19% in 2020 to 28% in 2021, according to Aryaka. This is coupled with continued application growth, with the number of enterprises stating that they've deployed over 500 distinct applications growing to 46%, compared to 32% in 2021.
In a bid to replace MPLS circuits and SD-WAN appliances, Cloudflare has introduced Magic WAN and Magic Firewall and partnerships with VMware, Aruba, Digital Realty, CoreSite and EdgeConneX. Cloudflare Monday introduced Magic WAN with Magic Firewall as well as new strategic partnerships with network hardware and data center providers as part of Cloudflare One, its cloud-based network-as-a-service offering released in October 2020. Magic WAN connects any source of data traffic-data centers, offices, devices, cloud apps, etc.
Cloudflare introduced Magic WAN with Magic Firewall and new strategic partnerships with major networking and data center providers as part of Cloudflare One, its cloud-based network-as-a-service solution. Magic WAN with Magic Firewall gives customers of all sizes a one-stop-shop to connect and secure data, devices, offices, cloud networks, and more without relying on hardware boxes.
Windstream Enterprise announced that it has renewed Payment Card Industry Data Security Standard compliance for its entire portfolio of SD-WAN and Managed Network Security services. Compliance with PCI DSS provides independent verification from a Qualified Security Assessor to ensure the highest levels of security and compliance for the processing, storage and transmission of cardholder data.
Verizon announced the expansion of its long-standing strategic partnership with Cisco, with the addition of three new SD-WAN managed services offerings. "These new services reflect the significant ongoing joint Cisco and Verizon research and development investments which aim to help customers accelerate change."
Bitglass extended its leadership in the secure access service edge market by announcing an expansion of its SD-WAN integration ecosystem. Customers can now leverage Bitglass' platform to secure traffic flowing from remote locations via Cisco, Alkira, Aryaka, Palo Alto Networks, and Versa.
Bitglass announced additional technical integrations between its platform and SD-WAN providers. Specifically, organizations can now use Bitglass to secure traffic coming from branch locations via Citrix, Arista Networks, Aviatrix, and Sophos.
Bitglass announced technical integrations between SD-WAN providers Aruba, 128 Technology, Fortinet, and Silver Peak and its secure access service edge offering; extending market-leading security to traffic stemming from remote locations. With its cloud-native Polyscale Architecture, Bitglass is able to leverage AWS Transit Gateway Connect to integrate with SD-WAN solutions connected to AWS. This enables any organization to integrate its existing SD-WAN fabric with the leading SASE platform from Bitglass.
Cisco this week released software updates to address multiple vulnerabilities across its product portfolio, including critical severity bugs in several small business VPN routers and SD-WAN products. The company warned that the web-based management interface of small business RV160, RV160W, RV260, RV260P, and RV260W VPN routers is affected by seven severe vulnerabilities that could be abused by unauthenticated, remote attackers to execute arbitrary code as root.