¶ Introduction
Managed Service Providers (MSPs) are pivotal in delivering secure and efficient network solutions to small and medium businesses (SMBs). As these organizations navigate increasingly complex digital environments, Exium's SASE CyberMesh offers a powerful solution for streamlining traffic routing among offices, data centers, public clouds, and web and SaaS applications. This brief demonstrates how MSPs can leverage the CyberMesh to enhance security and connectivity for their SMB clients.
¶ Trust Paths: The Backbone of Traffic Routing
Exium's SASE CyberMesh uses Trust Paths to determine routing decisions for private subnet traffic. These Trust Paths are crucial for directing traffic to the correct destination and maintaining secure and efficient network operations.
¶ Examples of Configured Trust Paths for Diverse Needs
As shown in the figure above, the following Trust Paths are defined.
|
|
Configured Trust Paths |
|---|---|
| 1 |
Remote Access to Office:
|
| 2 |
Remote Access to Public Cloud:
|
| 3 |
Remote Access to Data Center:
|
Trust Paths are linked to Cyber Gateways deployed at the respective locations, which serve as pivotal points for directing traffic.
¶ CyberMesh Routing Decisions
The CyberMesh intelligently routes traffic according to these configured Trust Paths. For instance, when traffic meant for the 10.30.150.0/24 subnet, associated with the public cloud Cyber Gateway, arrives at the CyberMesh, it is directed to the public cloud location.
¶ Local and Remote Traffic Management
|
Local Subnet Traffic |
SASE Client Configuration |
|---|---|
Traffic from remote users on the local subnet (e.g., 192.168.110.0/24) directed at the private subnets with Trust Paths, as well as internet-bound public traffic, is routed via the CyberMesh. However, traffic on the immediate local subnet stays local, enabling functions like printing without leaving the local network. |
If the SASE client is activated at a Cyber Gateway site, only the immediate local subnet traffic remains local; other Trust Path subnets are processed by the CyberMesh. |
¶ Illustrative Example
An office device with an IP of 10.10.115.57 on the subnet 10.10.115.0/24 can directly print to a printer with an IP of 10.10.115.101 as shown by the green line path in the Figure above. Conversely, if it needs to access a printer with an IP of 10.10.120.11 on the 10.10.120.0/24 subnet, the traffic is routed through the CyberMesh, as illustrated by the red line path in the Figure..
¶ Conclusion
For MSPs serving SMBs, Exium's SASE CyberMesh is a transformative solution, enhancing traffic routing and security across offices, clouds, data centers, and online applications. By adopting Exium’s robust routing framework, MSPs can deliver comprehensive security solutions that are essential in today's digital landscape, ultimately empowering SMBs with the connectivity and protection they require to thrive.