Network SecurityKaspersky SD-WAN
A fault-tolerant SD-WAN that becomes the on-ramp to SASE.
Kaspersky SD-WAN builds fault-tolerant, secure networks with unified management for distributed businesses — protecting continuity and enhancing productivity across branches. It connects locations over any channel (MPLS, Ethernet, LTE) with Zero Touch Provisioning, and its Virtual Network Functions manager lets you deploy Kaspersky and third-party security tools on top, making it an essential first step toward SASE. Faltrox deploys and manages the fabric.
Overview
What SD-WAN is
Secure Access Service Edge (SASE) is the synergy of network and security services — agile, reliable networks with unified security delivered from the cloud, protecting the whole company network regardless of where users are. Kaspersky SD-WAN is the network foundation that makes building SASE practical: a reliable distributed network you can layer integrated security onto.
It uses any available communication channel — MPLS VPN, Ethernet, 4G/LTE, or a combination — to connect new locations, with Zero Touch Provisioning that brings branches online without on-site configuration. Centralised orchestration manages a network of any size through one web interface or API, link management enforces SLAs for business-critical apps, and the VNF manager deploys Kaspersky and third-party security functions as virtual services. Built-in DPI, stateful firewall, and high-speed encryption secure the fabric itself. Faltrox operates it end to end.
Coverage
What it protects
The platforms, threats, and surfaces this product is built to defend.
Distributed Branches
Connects branch offices to the corporate network over any channel with fault-tolerant tunnels.
Any Communication Channel
MPLS VPN, Ethernet, PPPoE, and 4G/LTE — or any combination — for flexible connectivity.
Business-Critical Apps
Application-aware routing and per-app SLAs keep critical application performance predictable.
Fabric Security
Built-in DPI, stateful firewall, and high-speed per-channel encryption secure the network itself.
Security Service Chains
The VNF manager deploys Kaspersky and third-party security tools as virtual network functions.
The Path to SASE
Provides the reliable distributed network to layer unified, cloud-delivered security onto.
How it works
The mechanism
How the product moves from signal to protected state, step by step.
- 01
Provision
Zero Touch Provisioning connects branches to the corporate network without additional on-site configuration, saving staff time.
- 02
Connect
CPE at each branch sets up tunnels to fault-tolerant SD-WAN gateways over any available channel, in mesh or hub-and-spoke topologies.
- 03
Route
Built-in DPI and application-aware routing steer traffic by application SLA, with WAN load balancing and quality control.
- 04
Secure
Stateful firewall, high-speed encryption per channel, and virtual network functions protect the fabric and its traffic.
- 05
Manage
The SD-WAN orchestrator provides unified control and monitoring of a network of any size through one interface or API.
Capabilities
Key capabilities
Zero Touch Provisioning
Connects new branches to the network with no additional configuration, via DHCP, static, or URL auth with two-factor support.
Centralised Orchestration
The SD-WAN orchestrator manages controllers, service chains, resources, and licences from one graphical interface and API.
Application-Aware Routing
Built-in DPI routes traffic by application and enforces per-application SLAs for business-critical performance.
Virtual Network Functions
The VNF manager deploys and manages Kaspersky and third-party security tools as virtual services on the fabric.
Built-In Security
Stateful firewall, high-speed encryption configurable per channel, and DPI protect the network itself.
Fault Tolerance
High-availability clustering, active/active gateway redundancy, and CPE redundancy (VRRP) keep the network up.
SD-Branch
LAN segmentation, local services (DHCP), local internet access, and universal CPE support at the branch edge.
SLA-Based Link Management
Active traffic probes assess loss, jitter, and delay, with FEC, packet duplication, and multilayer QoS for link quality.
Works with
Part of the platform
Kaspersky products this pairs with, and the Faltrox services that operate it.
Delivery
You buy the outcome, not the console
Managed by Faltrox
Faltrox licenses, deploys, and tunes Kaspersky SD-WAN for your environment, then runs it as part of a managed service, so you get the protection without staffing another security console.
Pricing
Kaspersky SD-WAN price and licensing in India
Faltrox quotes Kaspersky SD-WAN to your scope rather than from a list. Tell us what you need to cover and we come back with a quote for the licence, and for deployment and 24/7 management if you want Faltrox to run it.
- Edition or tier, and any add-on modules
- How many users, endpoints, devices or appliances you cover
- Licence term, and whether you renew or migrate an existing licence
- Deployment and 24/7 management by Faltrox, if you want it run for you
FAQ
Common questions
01Is this a security product or a networking product?
Both, deliberately. Kaspersky SD-WAN is a networking fabric with built-in security — DPI, stateful firewall, per-channel encryption — and a VNF manager that lets you deploy additional Kaspersky and third-party security functions on top. It is positioned as the first step to building SASE.
02What is Zero Touch Provisioning?
It connects a new branch to the corporate network without any on-site configuration — a technician plugs in the CPE and it provisions itself via DHCP, static, or URL auth with two-factor support. For distributed businesses that removes a major deployment cost.
03What connectivity can it use?
Any available channel — MPLS VPN, Ethernet, PPPoE, and 4G/LTE — or any combination, across full mesh, partial mesh, and hub-and-spoke topologies, with SLA-based link management to keep critical applications performing.
04Can we run third-party security tools on it?
Yes. The Virtual Network Functions manager deploys both Kaspersky and third-party vendors’ security tools as virtual services, with service-chain lifecycle management — so you are not locked into a single security stack on the fabric.
05How does Faltrox deliver it?
We design the topology, deploy the gateways and branch CPE, configure the security functions and SLAs, and operate the orchestrator — delivering a managed secure network rather than hardware you configure yourself.
06How much does Kaspersky SD-WAN cost in India?
It depends on the edition, how many users or devices you cover, the licence term, and whether you add deployment and managed operation. Faltrox quotes Kaspersky SD-WAN to your scope; contact us with what you need to protect and we will send a quote.
07Can I buy Kaspersky SD-WAN from Faltrox?
Yes. Faltrox licenses Kaspersky SD-WAN for organisations in India and worldwide, and can deploy, tune and run it 24/7 from our SOC so you get the outcome without staffing another console.
Start an engagement
Secure what’s next.
Speak with the engineering team to define scope, walk through the methodology, and decide whether Faltrox is the right team to test and run your environment.
Contact us