Arjan Kunstman, author op Wanscale

Centralized and uniform firewall management

Arjan Kunstman — Tue, 05 Aug 2025 14:22:56 +0000

As the founder of Wanscale, I’m proud of everything we’ve built over the past few years. But if I had to pick one thing I’m most proud of, it would be our centralized firewall management. What started as an idea on the drawing board is now running in full production at many companies and organizations and it truly makes a difference.

Managing firewall rules across dozens, or even hundreds, of locations is normally no easy task. Different networks, vendors, routers, and configurations quickly lead to complexity, errors, and frustration. But at Wanscale, we’ve made it simpler than ever. With one platform, one portal, and one policy, you gain control, clarity, and speed.

In this article, I’ll explain how we made that possible and why this is a true game changer for network security in many organizations.

Why Centralized Firewall Management is Indispensable

In today’s world of hybrid networks, cloud applications, and distributed infrastructures, the complexity of network security is growing exponentially. Yet many organizations still manage their firewall rules in a decentralized way, per location, per cloud environment, or even per application. This typically results in:

Inconsistent policies across locations
Increased risk of errors due to manual configurations
Limited visibility and slow incident response
Difficult audits and compliance challenges

Wanscale breaks through this fragmentation with one powerful platform that lets you define, deploy, and manage all firewall rules centrally, regardless of infrastructure or location.

How Wanscale makes the Difference

With Wanscale, you manage firewall rules through a single centralized policy that is automatically enforced across all layers of the network — from edge to cloud. This ensures a consistent level of security, regardless of the hardware or location in use.

The platform is fully modular and scalable. Whether you have five sites or five hundred, new locations and applications can be added with ease. They automatically align with the existing policy, without the need for manual configuration.

Wanscale also offers complete visibility into what’s happening on the network. Through a central dashboard, you can monitor real-time data traffic, policy hits, and any blocked actions. Anomalies are immediately visible, with clear logging and reporting.

For organizations subject to strict regulations, such as in finance, healthcare, or government, Wanscale makes compliance significantly easier. Security rules are fully traceable, consistently enforced, and audit-ready, whether you’re working toward ISO 27001, NIS2, or GDPR.

In Practice: 50 Locations, 1 Policy

A leading logistics company with over 50 locations across Europe had been managing multiple firewall systems for years, each with its own configuration. This resulted in a lack of clarity, increased risks, and high management costs.

Since switching to Wanscale, all firewall rules are now centrally managed and deployed. The number of unique rules has been reduced by 40%, and incident response times have improved by 70%. As a result, security is not only tighter, but management has become significantly clearer and more efficient.

Simplicity, Security and Control

Centralized firewall management through Wanscale means less operational burden and more assurance. By decoupling security policies from physical infrastructure and managing them centrally and scalably, organizations finally gain control over their network security without sacrificing flexibility.

Ready to take control of your firewall management?

With Wanscale, you bring structure, control, and speed to your network security, managing all your firewall rules centrally and effortlessly maintaining control, from the data center to the edge.

Arjan Kunstman
Founder & CEO Wanscale

Het bericht Centralized and uniform firewall management verscheen eerst op Wanscale.

Virtual Machines on the Wanscale Platform

Arjan Kunstman — Wed, 30 Jul 2025 09:55:48 +0000

Sometimes you get into such a great flow that you completely lose track of time. You know the feeling: you glance at the clock and suddenly the day is already over. That’s exactly how I felt over the past few weeks while building new functionality for the Wanscale platform. It took me back to my time at DC Spine, we were pioneering then too, coding something new, something that didn’t exist yet, but that we just knew would truly make customers happy.

I felt that same excitement again. Together with the team, we dove into the code, considered every detail of the user experience, and built something that simply felt right.

Adding virtual machines (VMs) to both the service edge and the central platform feels like a logical and valuable step forward. And the best part is: it works exactly as we hoped. Simple, powerful, and flexible.

Ultimate flexibility at the edge and in the cloud

With the expansion of Virtual Machines within our platform, organizations can easily run their business-critical applications within our trusted infrastructure. Think, for example, of network scanners for vulnerability detection and traffic monitoring, or monitoring tools such as Zabbix, Grafana, or Prometheus that provide real-time insights into the status of networks and infrastructure. Application proxies for load balancing or caching can now also be deployed directly, as well as SIP Session Border Controllers (SBCs) that ensure secure and controlled VoIP traffic.

Additionally, virtual firewalls can be used for specific segments or temporary network environments, and DNS and DHCP servers can be easily deployed locally for higher availability. For logging purposes, tools like syslog servers or Graylog instances can be utilized, while NetFlow or IPFIX collectors provide valuable insights into network traffic and capacity. Finally, setting up secure, encrypted connections between branches or remote users is possible via flexible VPN gateways.

All these applications seamlessly align with the principle of Network Function Virtualization (NFV), where network services are fully software-based and deployed independently of physical hardware.

This not only makes management simpler but also faster, more scalable, and more secure.

Edge computing: the power of local intelligence

What makes this expansion especially remarkable is that we host Virtual Machines not only in the cloud but also at the service edge. This means: computing power directly at the customer site, as close as possible to the source of the data.

This brings significant advantages. Because applications run locally, users benefit from extremely low latency: responses are faster and performance noticeably better. Additionally, sensitive data remains within the local environment, enhancing security and contributing to compliance. And thanks to our central Wanscale portal, you retain full control over all VMs, whether they run centrally or at the edge of the network.

This approach makes our solution particularly suitable for environments where speed, security, and reliability are crucial.

Central VMs: scalable and powerful

Of course, Virtual Machines also remain available within our central infrastructure. This is especially ideal for applications where latency is less critical, for deployments across multiple locations simultaneously, or when you prefer centralized management of important infrastructure components.

Whether you choose an edge solution, a central approach, or a hybrid combination of both: through the portal, you manage everything clearly in one place, including support for standard solutions as well as custom configurations.

Who is this relevant for?

This new functionality offers clear advantages for a wide range of sectors. IT service providers can deploy solutions for their clients more quickly. Healthcare and education institutions benefit from increased control and data security, which is essential when handling privacy-sensitive information.

In industrial environments, the direct interaction with machines makes a fast and reliable infrastructure indispensable. For retail and logistics chains, being able to run smart applications locally is a game-changer, and internationally operating organizations gain the flexibility to manage specific network functions per region.

In short: if your organization needs a secure, scalable, and easily deployable network infrastructure, Wanscale now offers the ultimate flexibility.

Technology at the service of the customer

At Wanscale, it’s never just about technology. It’s about how technology contributes to the performance, flexibility, and security of your organization.

With VMs both on the platform and at the service edge, combined with smart network services, we build a future-proof digital infrastructure together.

Want to know more or get started with VMs within the Wanscale platform?
Don’t hesitate to contact me. I’m happy to think along with you.

Arjan Kunstman,
Founder & CEO Wanscale

Het bericht Virtual Machines on the Wanscale Platform verscheen eerst op Wanscale.

SD-WAN and SASE

Arjan Kunstman — Fri, 23 Feb 2024 09:55:39 +0000

The world of network technology continues to evolve rapidly. Two of the key concepts receiving significant attention today are SD-WAN (Software-Defined Wide Area Network) and SASE (Secure Access Service Edge).

In this article, I aim to explain the latest insights from renowned research companies such as Gartner and others about these technologies and what they mean for modern businesses.

What is SD-WAN?

SD-WAN stands for Software-Defined Wide Area Network. It is a technology that enables businesses to dynamically manage and optimize their network traffic using software. Rather than relying on traditional network infrastructures, SD-WAN allows the combination of various connection types such as DSL, fiber, Starlink, 4G/5G, and MPLS to enhance performance and gain more insight into configurations.

Benefits of SD-WAN

Costs

By using cheaper internet connections alongside or instead of MPLS, you can often achieve significant cost savings.

Improved performance

Carefully evaluate the Total Cost of Ownership (TCO) of your network, including initial implementation costs, licenses, maintenance, and operational expenses.

Flexibility

It is much easier to add new locations and scale network capacity up or down using SD-WAN.

Insights from Gartner about SD-WAN

According to Gartner, the adoption of SD-WAN continues to grow rapidly. They predict that by the end of 2024, more than 60% of businesses will have implemented SD-WAN. The primary drivers behind this trend include the desire to better support cloud applications and the need for more flexible network management.

What is SASE?

SASE, or Secure Access Service Edge, is a concept introduced by Gartner in 2019. SASE integrates network and security functions into a single, cloud-based platform. This means that both network connections and security are managed from the cloud, providing an integrated approach to network management and security.

Benefits of SASE

Integrated security

SASE offers a wide range of security features, including Zero Trust Network Access (ZTNA), Secure Web Gateways (SWG), and Cloud Access Security Brokers (CASB).

Simple management

Combining network and security services into one platform simplifies management.

Scalability

Businesses can easily scale up or down, depending on their needs, thanks to the cloud-based architecture.

Improved user experience

SASE optimizes network performance and provides secure, fast access to applications, regardless of the user’s location.

Insights from Gartner and other research firms about SASE

Gartner predicts that by 2025, at least 60% of enterprises will have an explicit SASE strategy, compared to only 10% in 2020. This rapid growth is driven by the increase in remote work and the shift towards cloud-based services. Other reputable research firms, such as Forrester and IDC, support these findings and emphasize that SASE will play a crucial role in the future of network and security management.

How do you benefit from SD-WAN and SASE?

Evaluation of the current infrastructure

Companies should start by evaluating their current network infrastructure and security solutions to understand where improvements can be made.

Determine the needs

Identify the specific needs of the business, such as cost savings, improved security, or better support for cloud applications.

Choose the right solution

It is crucial to choose vendors that offer robust and integrated SD-WAN and SASE solutions. Pay attention to factors such as flexibility, scalability, and security capabilities.

Plan and implement

Develop a detailed plan for implementing SD-WAN and SASE, including staff training and thorough testing to ensure the solutions work well within the existing infrastructure.

Conclusion

SD-WAN and SASE are revolutionary technologies that help businesses manage their networks more efficiently, securely, and cost-effectively. With the continuous growth of cloud applications and remote work, these solutions are becoming increasingly relevant. Insights from reputable research firms like Gartner, Forrester, and IDC underscore the importance and benefits of these technologies. By embracing these advancements, businesses can better position themselves for success in the future.

Arjan Kunstman

Het bericht SD-WAN and SASE verscheen eerst op Wanscale.

Network optimization based on real-time telemetry

Arjan Kunstman — Mon, 12 Feb 2024 20:06:39 +0000

In the dynamic world of networking and data transmission, efficiency is key to success. One of the most innovative approaches gaining traction is Telemetry Based Routing (TBR). In this article, I aim to explain what Telemetry Based Routing is and how it operates. Additionally, I will highlight the benefits it offers for modern networks as comprehensively as possible.

What is Telemetry Based Routing?

Telemetry Based Routing is an advanced method for optimizing network traffic. It utilizes real-time telemetry data to make decisions about routing data packets through a network. Instead of using static, pre-programmed routes, TBR dynamically adjusts based on current network conditions such as available bandwidth, latency, packet loss, and congestion.

How does it work?

Collect data

Network devices such as routers, firewalls, and switches continuously gather data about their performance and the state of the network. This includes measurements related to latency, jitter, bandwidth utilization, and associated error rates.

Data analysis

This data is then analyzed by a central system, typically referred to as a Network Controller. This controller utilizes advanced algorithms to recognize patterns in the network conditions.

Routing decisions

Based on the analyzed data, the controller makes decisions regarding the optimal routes for data packets. This may involve rerouting packets to avoid congestion or to ensure lower latency.

Action

The routing decisions are then communicated to the network devices, which adjust their routing tables accordingly to follow the new routes.

Benefits compared to traditional routing methods

Routing based on telemetry data offers a range of benefits that traditional routing methods do not have. Here are some of the most notable advantages:

Improved network performance

One of the biggest advantages of routing based on telemetry data is the significant improvement in network performance. By utilizing real-time data, the network can continuously optimize itself, reducing latency and increasing throughput. This is especially crucial for applications highly sensitive to delays, such as video streaming and VoIP.

Dynamic adjustments

Unlike traditional routing methods, which often rely on static routes or periodic updates, TBR can dynamically adjust to changing network conditions. This means the network can proactively prevent issues such as congestion or downtime by selecting alternative routes before problems arise.

Better performance

Telemetry Based Routing provides network administrators with unparalleled visibility into the state and performance of their network. The detailed telemetry data enables quick and accurate identification and resolution of issues. Furthermore, these insights can assist in planning and expanding network infrastructure through trend analysis and capacity planning.

Cost Efficiency

While the initial implementation of this technology may incur higher costs, the operational savings can be significant. Improved network performance and reduced downtime lead to higher productivity and lower maintenance costs. Additionally, the reduced need for expensive hardware upgrades can contribute to substantial long-term cost savings.

Security and compliance

TBR can also contribute to enhanced network security. Through continuous monitoring and analysis, the network can promptly respond to suspicious activities or potential security threats. Additionally, detailed logging and reporting can assist in meeting compliance requirements and conducting security audits.

Conclusion

Telemetry Based Routing is a powerful technology that fundamentally changes the way networks are optimized. By leveraging real-time data and advanced analytics, TBR ensures better network performance, dynamic adjustments, cost savings, and enhanced security. For organizations aiming for a robust and efficient network, embracing Telemetry Based Routing is a perfect step towards the future.

It is clear that TBR and SD-WAN are not just buzzwords but essential components of modern network infrastructures. By investing in these technologies now, businesses can address not only their current network challenges but also prepare for the future demands of the digital world.

Arjan Kunstman

Het bericht Network optimization based on real-time telemetry verscheen eerst op Wanscale.

Is connecting to the multi-cloud costly and complex?

Arjan Kunstman — Sun, 17 May 2020 08:45:39 +0000

There is often a misconception that transitioning to a multi-cloud strategy is a costly and complex process. While it does involve technical steps, it is not as daunting as commonly perceived.

Through the Wanscale platform, users can easily monitor and manage various connections, redundancy, and quality to and from the cloud themselves.

If your organization has multiple departments or branches, it may result in multiple cloud environments or the use of multiple SaaS environments or providers. All of this introduces complexity, especially in terms of security and connections.

Wanscale has developed a platform based on SD-WAN and SASE technology that solves this for your organization. Using the Wanscale platform, you consolidate all connectivity to and from multi-cloud environments and internet access into one platform.

No longer time-consuming

Cloud comes in many shapes and sizes, from Office365 and Google Workspace to more business-specific SaaS applications. It ranges from public or private cloud environments to colocating in a data center. Organizations often perceive a fragmented landscape of connections as costly, time-consuming, and complex.

The opposite is possible. By using the Wanscale platform, tasks such as routers, security, redundancy, and quality of service are automated. The distributed nature of the platform eliminates the need to worry about capacity and scalability for the future.

Unique platform

These matters are handled by the underlying Wanscale SD-WAN platform. You no longer need physical server space, routers, or firewalls yourself. The Wanscale platform takes care of everything related to connectivity and security for you. No more hassle with hardware, no more worries about having enough expertise within the organization. All you need are internet connections, and the great thing is, it doesn’t matter which provider you order them from.

Almost too good to be true and truly revolutionary!

Curious and ready to take on the challenge?

Please contact me.

Arjan Kunstman

Het bericht Is connecting to the multi-cloud costly and complex? verscheen eerst op Wanscale.