Lumen® SASE with VMware® offers a comprehensive cloud-based SASE platform that can be designed, purchased, configured and managed using a centralized Lumen experience. Combined to deliver simplified management of network and security policies, VMware solutions include SD-WAN and Cloud Web Security delivered over VMware Edge devices designed to your specifications for each location.
Version: VCO 5.0.1
By: Lumen Technologies and VMware SASE
Management Software: VCO
Delivery Methods: Self-install or professional installation by request
Pricing and Features
Fully monitored and managed SASE service | ||
Lumen SASE Manager | ||
VCO portal | ||
Standard design profiles | ||
Custom engineering and design profiles | ||
Test, turn-up and activation support | ||
Device failure replacement | ||
Self-service alerts and notifications via VCO | ||
Extra small CPE device | ||
Incident response: troubleshooting, fault detection, diagnosis for health, configuration and policy issues | ||
Change management for customer configuration and policy issues | ||
Configuration management: backup and restore of latest running configuration and software patch management |
*Rates available to qualifying business customers purchasing new service in one eligible continental U.S. location and require a 12-month term agreement. Rates include configuration as set out in pricing table for Extra small CPE single device and one each SD-WAN and security license. Rates exclude connectivity, installation, taxes and fees. Not all configurations are available at all locations. Changes to the configuration may change the monthly service rate and add non-recurring charges. Early termination fees will apply as set forth in customer’s agreement. Customer must remain in good standing and rate may terminate if customer changes their account in any manner including, but not limited to, their service location. Services not available everywhere. Lumen may change, cancel or substitute offers and services, or vary them by service area at its sole discretion without notice. Credit approval and deposit may be required. Offer may not be combined with other offers. Additional restrictions, terms and conditions apply.
Support and Service Options
Service packages are available for your entire Lumen SASE with VMware solution.
Designed for businesses with the internal resources to configure, manage and maintain their entire SASE solution. Additional Lumen support is available for a service fee in the selections below.
You can add additional features to your self-managed service package (already included in pro-managed service package):
Designed for businesses who want to offload daily network and security service management to Lumen to free up or supplement your existing IT resources.
Support
FAQs
Lumen SASE offers the convergence of networking and security functions in a cloud-first unified solution with a focus on the digital experience and built on the world-class Lumen Platform.
The VMware SASE Platform™ is the Secure Access Service Edge (SASE) platform that converges industry-leading cloud networking and cloud security to deliver flexibility, agility, security and scale for enterprises of all sizes. The VMware SASE Platform is offered as a Service, helping offload IT staff from deploying and maintaining WAN/security and designed to save enterprises operational costs.
There are four components of the VMware SASE Platform:
SD-WAN, Secure Access and Cloud Web Security are available with our initial offering. FWaaS availability is targeted for late 2022. Cloud Web Security inspects traffic going to the web/SaaS cloud while FWaaS is deployed to inspect traffic going to the Enterprise Data Center.
VMware runs SASE services inside its own worldwide points of presence (POP). All component services will run inside the VMware SASE POP, including SD-WAN, VMware Secure Access, VMware Cloud Web Security and VMware FWaaS.
In order to take full advantage of the VMware SASE Platform, customers should deploy multiple SASE services.
VMware Cloud Web Security and VMware FWaaS will be managed by VMware SD-WAN Orchestrator on day one of service. VMware Secure Access, Unified Endpoint Management (UEM) and VMware SD-WAN Orchestrator will be used separately initially, with SSO based cross-launch and other workflow on the integration roadmap.
VMware SASE services can be ordered using the Lumen SASE Solutions Marketplace and Lumen SASE Manager experience. Services can always be purchased by contacting our Lumen sales team.
Once user traffic optimized with VMware SD-WAN arrives at the POP, additional services from other SASE services can be applied to that traffic for security checks.
Traffic can come into the VMware SASE POP in two ways: through VMware SD-WAN using a VMware SD-WAN Edge or through VMware Secure Access for remote/mobile users. Once the traffic is inside the POP, it can be sent to VMware Cloud Web Security or VMware FWaaS for further inspection.
The VMware Secure Access solution provides remote access users consistent, optimal and secure cloud application access through a network of worldwide managed service nodes. The solution brings the best of both VMware SD-WAN and VMware Workspace ONE solutions into a single, cloud-hosted offer that helps ensure a consistent application experience and verified access to corporate applications as users work at the office and remotely.
VMware Secure Access is comprised of:
Users have multiple options:
Managed client: Workspace ONE is used as a mobile device management (MDM) to manage endpoints such as laptops, smartphones and tablets in an enterprise. The Workspace ONE client is used to connect to the VMware SASE POP.
Stand-alone: Third-party MDM can be optionally used to install VMware Workspace ONE VPN client to the devices, or the endpoint can download and install this VPN client directly. The Workspace ONE VPN client can then connect to the VMware SASE POP.
Workspace ONE can be used behind a VMware SD-WAN Edge. Depending on the Enterprise policy, Workspace ONE can be configured to pause the tunnel to the VMware SASE POP while the client is on the enterprise network; traffic will be sent over the tunnel between the Edge and the POP.
Cloud Web Security is offered using the centralized portal for managing security and networking policies. This is made possible using the VMware SD-WAN Orchestrator. For example, security policy can be configured in the Orchestrator UI and applied to the network segment as a single workflow. This approach eliminates any mismatch between security and networking policies. NetOps, SecOps, CSO, CIO and compliance teams can get common view of network performance and security posture.
The introduction of VMware Cloud Web Security will not require any hardware upgrades to existing VMware SD-WAN Edge deployments.
VMware Cloud Web Security will include the following functionalities that will be delivered in phases: