Managing CPE devices

Kaspersky SD-WAN lets you install CPE devices with the following technical characteristics at your organization's branches or client locations:

• Standard CPU architecture:
  • x86 (Intel 80x86)
  • Arm v8/64 (Advanced RISC Machine)
  • MIPS (Microprocessor without Interlocked Pipeline Stages)
• No vendor lock-in
• Minimal hardware requirements, such as CPU and RAM

Connected CPE devices are automatically registered in the inventory database and have direct internet access (DIA). You can use two types of CPE devices:

• Standard CPE devices

  Telecommunication equipment, including virtual machines, located at the client premises. Used to connect the client location to the SD-WAN network, establish tunnels and transfer traffic between client locations. Traffic can be sent to a data center to provide network functions such as routing protocols, intrusion prevention, or anti-virus protection.

   — to provide additional
  VNFs

  Network functions implemented as virtual machines on Commercial Off The Shelf (COTS) computer platforms.

  from the data center or cloud, you must make the virtual CPE device part of the service chain. After providing the VNF, traffic is sent to its destination.
• Universal CPE

  CPEs with additional support for Virtual Network Function deployment. Note that the device must have sufficient hardware resources to avoid involving the data center or the cloud when providing the VNF.

  (hereinafter also uCPE) — hosting VNFs locally improves response times, optimizes transport streams, and lets you manage these VNFs through the orchestrator web interface.