Antikor CTNM: SD-WAN Centralized Management System

Features

Centralized Management

You can connect all your Antikor SD-WAN firewalls to the Centralized Management System, which is under your control. The communication of all connected Antikor devices is encrypted via IPsec Tunnel. You can use different IPsec profiles for encryption on each Antikor SD-WAN device. Additionally, the alerts (Disk, CPU, RAM, etc.) and notifications of the managed Antikor SD-WAN devices can be monitored from a single screen. When needed, it provides the ability to independently manage Antikor SD-WAN devices located at the edge remotely.

Profile Support

Thanks to Profile Support, the Centralized Management System manages multiple security policies under the name “Profile.” Managed Antikor SD-WAN devices can belong to multiple profiles. This feature allows for applying a general security profile to all systems while enabling regional settings with specialized security profiles. Different security rules can be assigned to each profile.

Bulk Policy Management

With Bulk Policy Management, the SD-WAN Centralized Management System applies your corporate security policy to the Antikor Next-Generation Firewalls in bulk. Policies applied from the central system cannot be deactivated, modified, or removed by the administrator at the edge. Additionally, the Monitor on Map feature allows you to view the accessibility status of the managed endpoints from a single screen.

Bulk Configuration Backup

The central system periodically backs up the configuration of all connected Antikor SD-WAN firewalls. If needed, these backups can be restored to individual Antikor SD-WAN devices.

Global Settings Profile Management

By creating a Global Settings Profile, common configurations can be sent to the member SD-WAN devices. Additionally, by activating the Super Global feature, network definitions can be shared across the system. Authorized users and user groups can be added to the created Global Settings Profile.

Settings Profile Management

Configurations of managed SD-WAN devices are made by creating Settings Profiles. After the necessary definitions are made, these profiles are loaded onto the target SD-WAN devices. With these profiles, SD-WAN configurations are consolidated at a single central point. User and group authorizations can be added to the Settings Profiles to strengthen security. The first Settings Profile is created by copying from the main system (central management configuration), and subsequent profiles can be copied from existing ones.

Configuration Management

Necessary configurations can be made via the Settings Profile and loaded onto the target SD-WAN devices. Tunnel settings, DNS, NTP, and all other SD-WAN configurations can be managed centrally under this profile.

Detailed Authorization

User and user group definitions allow for detailed and controlled user authorizations within the system. This way, each user is assigned access rights appropriate to their roles and responsibilities, providing a secure and manageable structure.

Global Configuration Management

Thanks to the Global Settings Profile, common configurations for all connected devices can be centrally managed. General settings that are not device-specific can be applied to all endpoint devices in bulk through this profile.

Update Server Service

With the Update Server Service hosted on the central server, bulk updates can be deployed to connected SD-WAN devices. Using the dashboard and device lists, outdated SD-WAN devices can be easily identified.

Security Policy and Object Management

With the Super Global feature, Security Policies and Objects can be centrally managed from a single point. Similarly, users with access to the devices can also be centrally controlled under the Super Global scope.

Access Tracking on the Map

The Map System can be used in both online and offline modes. The access status of devices can be centrally monitored via the map tool on the dashboard.

Bulk Update Distribution and Management

The Update Server Service enables the central and bulk distribution of software updates to all connected SD-WAN devices. This service offers the following capabilities:

Bulk Update Distribution

Scheduled Updates

Version Control

Update Status Tracking

Notification Mechanism

Read-Only Operation Support

With the Read-Only feature, authorized users are prevented from making direct changes to endpoint devices. This ensures configuration consistency between the central system and edge devices, avoiding unwanted configuration discrepancies.

Individual Endpoint Management from a Single Screen

Each endpoint device can be managed independently via the Endpoint Definitions page. Configurations made at the central system can be sent to the selected endpoint device, and existing configurations on the endpoint device can be imported to the central system. Additionally, the device connection status can be monitored, and various accessibility tests can be performed.

Accessibility Tracking

The accessibility status of all endpoint devices can be monitored through the Dashboard and Endpoint Definitions page. Connectivity tests can be performed for unreachable devices, enabling quick identification of issues.

Periodic Configuration Backup

With the Auto Backup feature, periodic device backups can be taken. Using remote server settings, backups can be automatically sent to FTP, NFS, or other servers at designated times and dates.

Communication Encryption with IPsec Tunnel for Managed Antikor SD-WANs

Automatic Endpoint Registration Settings allow for the automatic addition of endpoint devices. These automatically added devices are matched with the appropriate profiles and settings. This process is carried out securely and encrypted via the IPsec tunnel.

Syslog (Raw, Structured) Service

By configuring Syslog settings, reports generated by the centralized management system can be sent to remote servers. Formats used in SIEM systems, such as JSON and CEF, are also supported.

Detailed Audit Logs

System management reports can provide detailed logs of actions performed by users. Furthermore, if requested, the most recent actions can be rolled back (rollback operation).

Notification Management

Through Notification Management, messages matching the defined notification levels can be sent to users for conditions such as CPU, RAM, disk, Ethernet, gateway status changes, update notifications, backup, cluster status, and endpoint changes. SMS, email, and browser notifications are supported.

Description

Antikor SD-WAN Centralized Management System (CTNM) is a 100% domestic and national product that offers centralized management with advanced management functions. With flexible configuration, a live dashboard, and advanced profile management features, it centrally monitors and manages all Dual Layer SD-WAN devices. Our Antikor SD-WAN products offer features such as Configuration Management, Bulk Update Management, Update Server Service, Security Policy and Object Management, Periodic Configuration Backup, and Advanced Profile Management. With these capabilities, all SD-WAN endpoints can be centrally monitored and managed.

Details and Datasheets: https://www.epati.com.tr/ctnm

Cookie Preferences