SaaS Optimization Template

Use this template to select the SaaS applications/services you want to optimize.

To use this template, your Silver Peak appliance must be registered with an Account Name and Account Key for the SaaS optimization feature.

SaaS optimization requires three things to work in tandem: SSL (Secure Socket Layer), subnet sharing, and Source NAT (Network Address Translation).

Enable SaaS optimization enables the appliance to contact Silver Peak's Unity Cloud Intelligence Service and download information about SaaS services.

n	If Advertise is selected for a service (for example, SFDC), the appliance will:

•	Ping active SaaS subnets to determine RTT/metric

•	Add subnet sharing entries locally for subnets within RTT threshold

•	Advertise subnets and their metric (within threshold) via subnet sharing to client-side appliances

•	Upon seeing an SFDC flow, generate a substitute certificate for an SFDC SSL domain (one substitute certificate per domain)

•	Auto-generate dynamic NAT rules for SFDC (but not for unchecked services)

n	When Optimize is selected for a service (for example, SFDC), the appliance will:

•	Ping active SFDC subnets to determine the RTT (metric)

•	Does not advertise metric via subnet sharing (unless Advertise is also selected)

•	Receives subnet sharing metric (RTT) from associated appliances

•	Compares its own RTT (local metric) with advertised metric -- If its own RTT is lower, then the packet is sent pass-through (direct to the SaaS server). -- If an advertised RTT it lower, then the packet is tunnelized.

•	Generate a substitute certificate for an SFDC SSL domain (one sub cert per domain)

•	No NAT rules created

n	When Optimize is not selected for a service (for example, SFDC), the appliance:

•	Receives subnet sharing advertisements for SFDC but doesn't use them

•	Does no RTT calc pinging

•	Does not participate in SSL

•	Creates no NAT rules

•	Sends all SFDC traffic as pass-through

TIPS

n	Initially, you may want to set a higher RTT Threshold value so that you can see a broader scope of reachable data centers/servers for any given SaaS application/service.

n	If the Monitoring page shows no results at 50 ms, you may want to reposition your SaaS gateway (advertising appliance) closer to the service.

Please send comments or suggestions regarding user documentation to techpubs@silver-peak.com.