Extreme Networks

Extreme Networks is an internationally recognized networking solutions provider that has built its position over the years on the basis of innovation and a comprehensive approach to network infrastructure, covering all its layers – from edge devices, campus and wide area network, to advanced data center and cloud solutions. More than 50,000 customers worldwide have placed their trust in the company , a testament to its strong market position and ability to deliver reliable technology. Extreme Networks’ product portfolio includes the design, development and manufacture of wired and wireless network infrastructure hardware, as well as the development of software dedicated to network management, policy definition, analytics, security and access control.

The main pillars of the product offering

Extreme Networks “offering is based on several key pillars that together form a coherent ecosystem of network solutions. These are primarily advanced switching and routing technologies, high-performance wireless (Wi-Fi) solutions, and, increasingly importantly, cloud management platforms, comprehensive network security systems and deep traffic analytics tools. The company is pursuing a strategy of ‘Customer-Driven Networking’ , with an emphasis on tailoring its offerings to the real needs and challenges of its customers. Extreme Networks” aspiration is to simplify the growing complexity of today’s networks, as demonstrated by the Extreme Platform ONE™ concept. This integrated platform aims to unify network management, security and the use of artificial intelligence (AI) mechanisms to optimize infrastructure performance.

Observing Extreme Networks’ product strategy, there is a clear focus on three fundamental aspects that address the main challenges facing enterprise network administrators and architects. First is the simplification of management, achieved mainly through centralization in the cloud (ExtremeCloud IQ) and the increasing use of artificial intelligence and machine learning (AIOps). The growing number of devices, applications and potential threats is making traditional management methods insufficient. Customers are looking for solutions that automate routine tasks, provide intelligent recommendations and resolve issues faster. Second, providing comprehensive security is integral to the offering. In an era of increasingly sophisticated cyber attacks, technologies such as Zero Trust Network Access (ZTNA) and Fabric-based network segmentation are becoming crucial. Extreme Networks integrates these mechanisms into its solutions, aiming to create a coherent protection system. Third, infrastructure flexibility and adaptability are realized through the concept of Universal Hardware and the ability to choose different operating systems on the same platforms. This allows customers to adapt network functionality to current needs and protect investments made in the long term.

Key acquisitions and their impact on the portfolio

The current shape of Extreme Networks’ extensive portfolio is largely the result of strategic acquisitions made over the years. Acquisitions such as Enterasys Networks, the WLAN division of Zebra Technologies, the networking division of Avaya, the SRA (Switching, Routing, Analytics) unit of Brocade, Aerohive Networks and the SD-WAN division of Ipanema (owned by Infovista) have significantly enriched the company’s offerings. With these moves, Extreme Networks has expanded its competence in key areas such as advanced wireless technologies, data center solutions, security mechanisms, network analytics and, importantly in the context of modern wide area networks, SD-WAN technology.

While these acquisitions have brought the company access to new markets and innovative technologies, they have also created the challenge of integrating disparate products and management systems into a cohesive whole. Platforms such as ExtremeCloud IQ and, in particular, the latest initiative, Extreme Platform ONE™, are the answer to this need. They aim to unify the management of the entire, often heterogeneous, product ecosystem, offering customers a single, consistent environment for administering network infrastructure, regardless of the origin of its individual components. This strategic approach is key to staying competitive and providing customers with the ease of use of expanded offerings.

The following table provides a synthetic overview of Extreme Networks’ main product categories, along with key device series and software platforms, giving a quick overview of the breadth of the company’s offerings.

Switching Solutions

Extreme Networks “portfolio of network switches is extensive and diverse, addressing a wide range of needs – from simple network edge deployments to advanced campus solutions to high-performance platforms for data centers and carrier networks. A key element of the company’s philosophy in this area is the concept of ‘Universal Platforms’ (Universal Hardware Platforms). It allows the selection of one of several available operating systems (such as ExtremeXOS or VSP Operating System – VOSS) on the same physical hardware platform. This approach not only increases deployment flexibility by allowing the switch’s functionality to be tailored to specific requirements, but also protects customers” investments by allowing the network to evolve and reuse existing hardware in new roles or with new features. This is a strategic move to reduce the risks associated with choosing a specific technology and extend the life cycle of the network infrastructure. Customers can adapt switch functionality to changing needs without having to immediately replace the physical device, which is especially important in a rapidly changing IT environment. In addition, most modern Extreme switches are designed to integrate with ExtremeCloud IQ’s cloud-based management platform, simplifying configuration, monitoring and maintenance.

Universal Switches.

The universal switch category is the core of Extreme Networks’ offerings for access and edge networks in campus and distributed environments. They feature a choice of operating systems and tight integration with cloud management platforms.

4000 series (e.g. 4120, 4220)

The 4000 series are Layer 2 switches that are primarily designed to be managed through ExtremeCloud IQ, which aims to maximize the simplification of network operations in campuses, branch offices and distributed geographic locations. They exemplify a “Cloud-managed first” strategy, where devices are built from the ground up with native cloud management in mind. This approach significantly simplifies deployment (thanks to zero-touch provisioning mechanisms) and ongoing maintenance, which is particularly beneficial for a large number of devices spread across multiple locations.

• Key features: The family includes 8-, 12-, 24- and 48-port models. The 4120 offers Multi-Gigabit (1/2.5Gb) access ports with Power over Ethernet (PoE) support of up to 90W (IEEE 802.3bt) on all ports, making it ideal as a hub for Wi-Fi (e.g. Wi-Fi 6E/7 APs) and high-density IoT environments. It also features high-performance uplink ports: 4 x 10/25Gb SFP28 and 2 x 100Gb QSFP28, which can also be used for stacking (switch stacking) with up to 200Gb throughput. The 4220 offers Gigabit and Multi-Gigabit (1/2.5/5Gb) access ports, also with PoE up to 90W, and 4 SFP+ uplink/stacking ports with up to 40Gb stacking capability. Both subseries support Extreme Fabric technology and integration with ExtremeCloud Universal ZTNA security policies. The “Instant Stack” feature simplifies the stack provisioning process from the cloud.
• Management: 4000 Series switches are managed exclusively through the ExtremeCloud IQ platform and/or ExtremeCloud IQ Site Engine. An active subscription to ExtremeCloud IQ Pilot is required for full functionality.
• Target environments: University and corporate campuses, corporate branch offices, distributed office locations, and in particular the 4120 as a hub for modern Wi-Fi access points and IoT devices requiring high PoE power and bandwidth.

5000 series (e.g. 5320, 5420, 5520)

The 5000 Series is a group of versatile hardware platforms that are cloud-ready and designed for use in patch cabinets and at the edge of the corporate network. Their main differentiator is the user’s choice of one of Extreme’s flagship operating systems: the Switch Engine (based on ExtremeXOS) or the Fabric Engine (based on VOSS). This flexibility allows the switch’s functionality to be tailored to a specific deployment scenario – from traditional Layer 2/3 networks to advanced Fabric-based architectures – without having to replace the hardware itself. This is important for investment protection and the possibility of network evolution in the future.

• 5320 Series: These are edge switches, available in 16-, 24- and 48-port Gigabit Ethernet models. They offer PoE 30W (IEEE 802.3at) support, and some models have AC or DC power options and feature quiet operation (with fanless or low-noise fans), making them suitable for installation in noise-sensitive areas such as offices and classrooms. They feature SFP+ uplink ports and enable stacking at 40Gb throughput. They support Fabric Connect technologies and integration with Universal ZTNA policies.
• 5420 Series: These are stackable access switches offering Gigabit and Multi-Gigabit (1/2.5Gb) ports. They provide PoE power in 30W, 60W, and even 90W (IEEE 802.3bt) standards. They have a variety of uplink port options, including SFP+, SFP28 and SFP-DD, which can also be used for stacking. Depending on the operating system selected, they support Fabric Connect (on VOSS) or IP Fabric (on EXOS).
• 5520 Series: These are advanced rackmount switches offering Gigabit and Multi-Gigabit (1/2.5/5Gb) access ports with 30W/60W/90W PoE support. They are distinguished by flexible uplink port options with Versatile Interface Modules (VIMs) that can provide 10Gb SFP+ or 25Gb SFP28 ports, including MACsec support. They enable high-bandwidth stacking of up to 160Gb via QSFP28 ports (using EXOS). They also support innovative Extended Edge Switching technology (on EXOS), which simplifies the management and deployment of access switches by creating a single logical switching architecture.
• Management: all 5000 series switches can be managed using the ExtremeCloud IQ platform or the ExtremeCloud IQ Local Management System – Site Engine. Importantly, each switch in the series comes with a one-year subscription to ExtremeCloud IQ Pilot, allowing users to take advantage of advanced cloud management features without additional upfront costs.

Comparison of Key Features of Universal Switches 4000, 5320, 5420, 5520 Series.

Switches for Data Centers and Network Aggregation/Core

Data center (DC) infrastructure and the aggregation and core layers of campus networks place special demands on switches. Key here are high performance, low latency, high port density with high bandwidths (25GbE, 40GbE, 100GbE and more), scalability and advanced support for virtualization and automation. Extreme Networks addresses these needs through dedicated switch series and technologies such as Fabric Connect and IP Fabric. These technologies enable flexible, automated and secure network structures that simplify management and reduce the time to deploy new services.

7000 series (e.g. 7520)

The 7000 series switches, including the popular 7520 model, are designed for applications requiring high performance at the aggregation layer and network core. Models with 48 10GbE ports (RJ45, model 7520-48XT) and 48 25GbE ports (SFP28, models 7520-48Y, 7520-48YE) are available, providing great flexibility in building modern infrastructures.

• Key features: In addition to access ports, these switches offer 40/100GbE QSFP28 uplink ports (6 or 8 depending on the model). They feature high switching throughput (up to 4 Tbps on 7520-48Y/YE models) and low latency (on the order of 800 ns for SFP28 models). Performance is provided by an 8-core processor, 16GB of DDR4 ECC RAM and 128GB of SSD storage, as well as a 32MB packet buffer. The switches support Fabric Connect technology, enabling the construction of automated and secure backbone networks. Like other universal switches, they can operate under EXOS or VOSS.
• Target environments: Aggregation layer in large campus networks, the core of enterprise networks, and applications in smaller and medium-sized data centers. High port densities of 25GbE and 100GbE, as well as support for Fabric technology, make the 7520 series a platform suitable for network upgrades toward higher speeds and more automated, flexible architectures. The increase in network traffic and bandwidth demand, generated by cloud applications, high-definition video and the growing number of IoT devices, among others, is forcing a migration from traditional 10GbE connections to 25GbE standards at the aggregation layer and 100GbE at the network core. The 7520 Series delivers the right performance and port density to meet these modern demands.

8000 series (e.g. 8820)

The 8000 series, represented by the 8820 model, are high-performance switch-routers. They feature 100Gb ports and are designed to support edge routing, aggregation in the network core at service providers and in large, demanding data centers.

• Key features: 40- and 80-port models are available, all equipped with 100Gb QSFP28 interfaces. They feature deep packet buffers, which is crucial for handling volatile traffic, and support for advanced routing and virtualization features such as BGP-EVPN VXLAN and MPLS. As a general-purpose platform, the 8820 Series supports Extreme IP Fabric technology, advanced policy mechanisms and Trusted Delivery function for reliable data delivery.
• Target environments: Core of large-scale campus networks, advanced data centers, Service Providers networks.

SLX series (e.g., SLX 9250)

The SLX series switches are specifically optimized for data center applications, especially in popular spine/leaf (backbone/leaf) architectures.

• SLX 9250: This model offers a high density of 100GbE or 40GbE ports (32 QSFP+/QSFP28 ports), with the ability to split them (breakout) into 25GbE or 10GbE ports (up to 128 ports). It provides a switching throughput of 6.4 Tbps with an average latency of 800 ns. It operates under the control of a dedicated SLX-OS operating system and supports key technologies for modern data centers, such as BGP-EVPN, VXLAN and Extreme Fabric Automation. An additional advantage is the ability to integrally host applications directly on the switch, allowing it to run monitoring, security or automation tools without the need for dedicated servers. Extreme’s drive to simplify and automate the deployment of complex data center networks, such as IP Fabric with VXLAN BGP-EVPN, is clearly evident here. Building and managing such networks is traditionally complex. Extreme Fabric Automation, running as an application on the SLX switch, aims to automate this process in a plug-n-play model, significantly reducing deployment time and the risk of configuration errors.
• Target environments: Modern data centers (in spine and leaf roles), cloud service providers.

Table 3: Key Features and Applications of Switches for Data Centers and Aggregation/Core (7000, 8000, SLX Series)

Industrial Switches (ISW).

Extreme Networks also offers a specialized line of industrial switches (ISWs) designed for reliable operation in harsh environments. These are ruggedized Layer 2 devices capable of operating over a wide temperature range (typically -40°C to +75°C).

• Key features: ISW switches feature ruggedized enclosures, often with an IP30 rating (for DIN-rail mounted models), and passive cooling (no fans) for increased reliability in dusty and humid environments. They offer flexible support for PoE standards, including IEEE 802.3af/at and 802.3bt, providing up to 90W of power per port, which is crucial for powering CCTV cameras, sensors or wireless access points in the field. Dual DC power input is standard, providing redundancy. The switches provide full Layer 2 switching speeds and support protocols such as LACP, STP/RSTP/MSTP and G.8032 ERPS (Ethernet Ring Protection Switching) for high availability in ring topologies. An important feature is the integration of the Fabric Attach function, which enables the ISW switch to automatically and securely connect to a network based on the Extreme Fabric Connect architecture. This allows extending the advanced networking, virtualization and security services of this architecture to the challenging edge environments often associated with IoT deployments. IoT devices in industry often require secure and managed connectivity. Traditional approaches can be complicated. Fabric Attach automates the connection of these devices to the Fabric network, extending segmentation and security policies all the way to the industrial edge. In terms of security, the ISW series supports MAC address-based authentication, 802.1X EAP standard, RADIUS/TACACS+ servers and access control lists (ACLs).
• Models: Examples include 16801, 16802, 16803, 16804, ISW-4W-4WS-4X, ISW-24W-4X, offering various combinations of copper and fiber ports, including with PoE/PoE+ and HiPoE.
• Target environments: Broad industrial environments, intelligent transportation systems (ITS), utilities, smart city infrastructure (smart cities).

Ethernet Routing Switches (ERS)

Extreme Networks’ portfolio also includes Ethernet Routing Switch (ERS) series switches, which are platforms optimized for branch offices and smaller patch cabinets, offering integrated routing functions. The series is part of the technology legacy acquired with Avaya/Nortel.

ERS 3600 Series

• Key Features: ERS 3600 switches are prized for their ease of use, including 1-Minute plug-and-play for IP phones and automatic configuration for Unified Communications systems. They enable intelligent stacking (stacking) of up to eight units, allowing scaling to 400 ports with a virtual backplane of up to 192Gbps. They support Fabric Attach technology, which allows them to integrate with the more modern Extreme Fabric Connect network architecture. In terms of routing, they offer static and dynamic routing based on the Routing Information Protocol (RIP). They feature Gigabit Ethernet access ports and 10 Gigabit SFP+ uplink ports. Models with PoE/PoE+ support are also available. Many companies still have infrastructures based on ERS technologies. Extreme Networks, through support and integration with newer solutions (such as Fabric Attach), enables these customers to upgrade incrementally and take advantage of new capabilities without the need for immediate, full hardware replacement.
• Models: Examples include the ERS 3626GTS and ERS 3650GTS, also available in -PWR+ (with PoE) versions.
• Target environments: Corporate branch offices, small and medium-sized patch cabinets where proven technology with basic routing and stacking capabilities is required.

Routing Solutions

Routers play a key role in any complex network infrastructure, responsible for directing traffic between different subnets, connecting local networks to the Internet (edge routing), implementing wide area network (WAN) connections, as well as advanced features such as MPLS (Multiprotocol Label Switching) or BGP (Border Gateway Protocol) peering with other autonomous systems. Extreme Networks offers specialized routing platforms that are designed for high performance, scalability and reliability.

SLX Series routers (e.g., SLX 9640)

The SLX series includes high-performance routers designed for the most demanding applications in corporate networks and service providers.

• SLX 9640: This is a high-capacity router that offers a flexible configuration of 100 GbE and 10 GbE ports, with the ability to also support 40 GbE, 25 GbE and 1 GbE interfaces. One of its key features is deep packet buffers (6GB), which are essential for handling volatile traffic and preventing data loss at critical times.
• Key features:
  • Internet-scale routing: The SLX 9640 is capable of handling full BGP protocol routing tables, and also supports other popular routing protocols such as OSPF, MPLS and IS-IS, making it suitable for Internet edge applications.
  • Cloud-managed SD-WAN: This router integrates with cloud-managed SD-WAN solutions, offering advanced end-to-end QoS (Quality of Service), intelligent application-based traffic shaping, and dynamic selection of the optimal path for network traffic.
  • Strong network security: The SLX 9640 platform is equipped with security mechanisms such as strong transmission encryption, advanced authentication and network segmentation capabilities. It also supports BGP FlowSpec to protect against DDoS attacks and extensive access control lists (ACLs) to protect the control plane and data of the router itself.
  • Integrated application hosting: A unique feature is the ability to run virtual machines (VMs) directly on the router, allowing it to host additional applications (e.g., monitoring, security analysis) without the need for dedicated servers.
  • SLX-OS operating system: These routers run SLX-OS, which is a virtualized operating system based on Linux. It provides high programmability through REST APIs, Python and NETCONF.
  • “Pay as you grow” flexibility: The licensing model allows ports to be activated and bandwidth to be increased on demand, enabling customers to tailor their investment to current needs and scale their infrastructure incrementally. The demands on edge routers continue to grow – it’s no longer enough just to forward packets quickly. Intelligence (realized, for example, by SD-WAN), advanced security (such as BGP FlowSpec) and flexibility (such as the ability to host additional applications) are needed. The SLX 9640, combining the traditional functions of a high-performance edge router with these modern capabilities, exemplifies the evolution of the role of the edge router into a more comprehensive service platform.
• Target environments: Internet edge (Internet border), advanced enterprise networks, service provider networks, data center interconnect, metropolitan area networks (MAN) and wide area networks (WAN).

Wireless Solutions

Efficient and secure Wi-Fi networks are now the foundation of most businesses and institutions. Extreme Networks has an extensive portfolio of wireless solutions that includes access points (APs) supporting the latest Wi-Fi standards, as well as software for managing and optimizing wireless networks. The company emphasizes the delivery of high performance, reliability and advanced security features, especially in environments with a high density of users and devices.

Wi-Fi Access Points (Access Points)

Extreme Networks is actively implementing the latest Wi-Fi standards, such as Wi-Fi 6E and Wi-Fi 7, in its flagship access points. In doing so, it is focusing on supporting environments with very high densities of users and devices and providing advanced security features, including through the implementation of dedicated radio sensors. The Wi-Fi 6E standard, by opening up the 6 GHz band, significantly increases available capacity and reduces interference, which is crucial in crowded environments. Wi-Fi 7 (802.11be standard) goes a step further, offering even higher theoretical throughputs and lower latency, thanks in part to Multi-Link Operation (MLO) technology. With the launch of the AP5020 (Wi-Fi 7) access point, Extreme Networks is positioning itself as a technology leader in wireless connectivity.

AP 4000 series (e.g. AP4000).

• Description: AP4000 is a universal access point that operates on Wi-Fi 6E standard.
• Key features: It is a tri-band device, supporting 2.4 GHz, 5 GHz and the new 6 GHz band, with a 2×2:2 MIMO radio configuration for each band. This allows for aggregate throughput of up to 3.9 Gbps. A unique feature of the AP4000 is a dedicated tri-band radio sensor that enables full-time network monitoring for security threats and data collection for location analysis, without affecting the performance of the main radio modules serving customers. It also employs a special multiband filter that eliminates potential interference between the 5 GHz and 6 GHz bands. In terms of security, the AP4000 supports the latest WPA3 standard, has a built-in L2-L7 DPI (Deep Packet Inspection) firewall, and supports PPSK (Private Pre-Shared Key) technology for simplified and secure guest and IoT device access. In addition, an integrated Bluetooth module and USB port extend its capabilities to support IoT devices and location-based services (such as iBeacon). The access point is managed via the ExtremeCloud IQ cloud platform or the local ExtremeCloud IQ Controller.
• Target environments: The AP4000 is designed for environments with a high density of users and devices, such as schools, warehouses, healthcare facilities and stadiums.

AP 5000 series (e.g. AP5020, AP5050U/D)

• AP5020: This is Extreme Networks’ latest flagship access point, operating on Wi-Fi 7 (802.11be). It features three radio modules in a 4×4:4 configuration (for the 2.4 GHz, 5 GHz and 6 GHz bands), allowing it to achieve a theoretical aggregated throughput of up to 20 Gbps. The AP5020 supports key features of the Wi-Fi 7 standard, such as Multi-Link Operation (MLO), which enables devices to use multiple radio bands simultaneously to increase bandwidth and connection reliability. It also has a dedicated security sensor and is managed through the ExtremeCloud IQ platform using AIOps mechanisms.
• AP5050U/D: These are Wi-Fi 6E standard access points, also equipped with three radio modules in 4×4:4 configuration (for 2.4 GHz, 5 GHz and 6 GHz bands), offering aggregated throughput of up to 10 Gbps. They are specially designed to operate in harsh outdoor environments, are IP67-rated, which means dustproof and waterproof, and can operate in a wide temperature range (from -40°C to +60°C). The AP5050D is equipped with integrated directional antennas, while the AP5050U has omnidirectional antennas. Both models have a built-in GPS module, which is used to automatically detect geographic location, which is important for compliance with regulations on outdoor use of the 6 GHz band.
• Target environments: The AP5020 is designed for the most demanding ultra-high-density environments where maximum throughput and the latest technologies are key. The AP5050U/D are ideal for stadiums, open public spaces with high user densities and other harsh outdoor environments.

Other relevant AP series

Also worth mentioning are other access point series in the Extreme Networks portfolio, such as the AP3000 series (also Wi-Fi 6E) , which are designed for indoor applications, and the AP560 and AP460 series (Wi-Fi 6) , which are access points for outdoor applications. The company continues to offer and support a wide range of Wi-Fi 6-based access points, such as the AP305C/CX, AP310i/e, AP410C, AP510C/CX, which are used in a variety of deployment scenarios.

Table 4: Comparison of Key Features of Wi-Fi Access Points (Selected AP4000, AP5000 Series).

Wireless Network Management

Extreme Networks’ wireless infrastructure management is mainly implemented through the ExtremeCloud IQ platform, which will be discussed in detail in the next section. This platform offers comprehensive functions, such as centralized configuration of access points, monitoring of network status and connected clients, creation of coverage maps (heatmap), optimization of radio parameters (Smart RF) and advanced analytics. Older systems, such as NetSight with its OneView interface, also offered integrated wired and wireless network management, and their functionality is gradually being incorporated into newer cloud platforms.

Software, Management and Analytics Platforms

Extreme Networks’ software portfolio plays a key role in integrating, automating and optimizing the operation of the entire network infrastructure. The company is consistently developing its management platforms towards cloud-based solutions, enriched with artificial intelligence (AI) and machine learning (ML) mechanisms. The goal is to provide administrators with tools that not only simplify day-to-day tasks, but also enable them to proactively manage the network and provide a superior user experience.

ExtremeCloud™ IQ

ExtremeCloud IQ is the centerpiece of Extreme Networks’ strategy, described as “1 Cloud, 1 Network.” It is an advanced network management platform that was designed from the ground up to work in the cloud and uses innovative ML/AI technologies to analyze and interpret millions of data points from the network – from edge devices to data centers. The platform aims to provide unified, intelligent and automated management of the entire network infrastructure. The development towards AIOps (implemented by CoPilot, among others) and the offering of flexible deployment options (public cloud, private cloud, edge cloud) demonstrates the company’s desire to adapt to the rapidly changing requirements of modern enterprises. Managing vast and complex networks is becoming increasingly difficult. The cloud offers the necessary scalability and availability in this context, while AI/ML provide the potential to automate and be proactive. ExtremeCloud IQ combines these elements in an effort to simplify the work of IT administrators and increase operational efficiency.

• Key capabilities:
  • Unified management: ExtremeCloud IQ enables consistent management of diverse network infrastructure elements, including Wi-Fi access points, network switches and SD-WAN devices, from a single, central interface.
  • AIOps (AI-powered Operations): The platform uses AI/ML algorithms to provide valuable insights (insights) and automate tasks. This includes, among other things, advanced reporting capabilities that help maintain network health and ensure a positive end-user experience.
  • Virtual Preparation (Digital Twin): This feature allows you to create digital twins of your network infrastructure, enabling you to test configurations and changes in a virtual environment before deploying them on your production network, minimizing the risk of errors.
  • Location-based services: The platform integrates location-based services that can be used in various scenarios, such as in retail to engage customers or in industry to track assets.
  • Mobile management and simplified onboarding: Mobile apps (for iOS and Android) are available to simplify network management and the onboarding process for new devices, such as by scanning QR or bar codes.
  • Automated policy deployment: the “near zero-touch deployment” mechanism allows predefined configuration policies to be automatically applied to newly connected devices, greatly speeding up and simplifying the deployment process.
• Deployment options: ExtremeCloud IQ offers flexibility in terms of deployment model, adapting to different customer needs and requirements in terms of data sovereignty, performance and control :
  • Public cloud: A standard SaaS (Software as a Service) model that eliminates the need for the customer to manage the server infrastructure.
  • Private cloud: Isolated managed services in a public cloud environment, providing the benefits of the cloud while enhancing data privacy.
  • Extreme Cloud Edge: A flexible edge deployment that offers full data privacy and cloud sovereignty with low latency. The platform uses global Points of Presence (PoPs) located at major cloud providers such as Amazon Web Services (AWS), Microsoft Azure and Google Cloud Platform (GCP).
• License levels and components:
  • ExtremeCloud IQ Pilot: This is an entry-level license that streamlines all aspects of network management – from deployment and maintenance to troubleshooting. It includes the functionality of ExtremeCloud Navigator and ExtremeCloud IQ Essentials.
  • ExtremeCloud IQ CoPilot: It works as an extension of the Pilot license and acts as a “digital advisor” for cloud-managed Wi-Fi networks. Its main goal is to proactively reduce risk and provide an optimal user experience. It uses explainable ML/AI algorithms to detect anomalies, provide recommendations and reduce false alarms. CoPilot is constantly learning and evolving, and integrates with Extreme’s technical support center (GTAC) to facilitate faster troubleshooting.
  • ExtremeCloud IQ Site Engine: It is an advanced network management platform designed for on-premise deployments. It enables centralized management of wired and wireless infrastructure, including third-party devices, making it suitable for even the most complex and heterogeneous network environments.
  • ExtremeCloud IQ Essentials: a set of key applications and services integrated into the ExtremeCloud IQ platform :
    • ExtremeGuest: A powerful solution for managing guest access and guest engagement. Provides analytical tools to understand how the guest network is being used (e.g., number of users, frequency of visits, time spent online). It can also analyze social media behavior to increase brand engagement and promotion.
    • ExtremeAirDefense: an application used to protect, monitor and ensure WLAN compliance. It operates continuously (24x7x365), protecting the network from external threats and notifying IT personnel of detected attacks. It uses the existing infrastructure of access points, which can act as sensors to monitor the radio space.
    • ExtremeLocation: a cloud-based solution that provides multi-level location services, supporting Wi-Fi and/or BLE (Bluetooth Low Energy) technologies. Enables enterprises to monitor workflows and resources in real-time or historically, helping to improve operations and productivity. Offers granular location accuracy for a variety of industry applications, such as customer tracking in retail or patient and equipment monitoring in healthcare.
• Legacy management platforms: It is noteworthy that the functionality of legacy management systems, such as NetSight with its OneView interface, is gradually being integrated or replaced by more modern solutions within the ExtremeCloud IQ ecosystem. NetSight offered centralized visibility and control over network resources, while OneView provided a unified web interface for monitoring, reporting and troubleshooting.

Extreme Platform ONE™

Extreme Platform ONE™ is Extreme Networks’ latest strategic initiative to radically simplify the complexity of today’s IT environments by integrating networking, security and artificial intelligence functions into a single, cohesive platform. The platform was announced in late 2023 or early 2024, with general availability for managed service providers (MSPs) planned for March 31, 2025. It is an evolution beyond traditional network management systems (NMS) to a comprehensive operational platform for the entire digital infrastructure, with a strong focus on automation and the use of AI. Making it available to MSPs with a flexible licensing model opens up new market opportunities for Extreme Networks. Enterprises and MSPs often struggle to manage multiple distributed tools, information silos and a lack of effective automation. Platform ONE aims to break down these barriers by offering a single, consistent work environment that uses AI to automate tasks and provide intelligent recommendations.

• Key components and capabilities:
  • Unified experience: Platform ONE offers a composable workspace that enables collaboration and workflows between different teams in an organization – from network and security specialists to finance and procurement departments.
  • Deep AI-based automation: At the heart of the platform is an embedded AI engine called Extreme AI Expert, which uses conversational, interactive and autonomous AI agents to support, advise and accelerate teams. The goal is to reduce the time it takes to complete complex tasks from hours to minutes.
  • Security integration: The platform combines network management with security functions, enabling consistent policy enforcement and threat monitoring.
  • Integration with partner ecosystem: Extreme Platform ONE is open to integration with third-party solutions, which include partners such as Intel, Microsoft Security and ServiceNow. This allows the platform’s functionality to be extended and customized to meet specific customer needs.
  • Simplified licensing and consumption model for MSPs: The platform offers a simplified licensing model, where network and resource management, AI features and support services are included in the subscription. Customers also have the option to purchase or bundle additional security features. For managed service providers (MSPs), there is an innovative billing model based on actual consumption and the ability to create pools of licenses that can be dynamically allocated between customers. This is the first of its kind in the industry.
  • Multi-tenant (multi-tenant) architecture: A key feature for MSPs to manage multiple clients from a single platform.
• Benefits for businesses and SMEs:
  • For enterprises: Increased control over infrastructure, support for innovation, and increased productivity for IT teams. Extreme Networks’ internal testing has shown a potential reduction of up to 95% in troubleshooting and recovery time through the use of AI.
  • For MSPs: The ability to effectively manage the network infrastructure of multiple customers at scale, reduce the time and human resources needed to maintain operations, scale operations more easily, be able to diversify the services they offer and, in turn, deliver greater value to their customers. A flexible licensing and consumption-based billing model aims to lower barriers to entry and accelerate revenue generation.

ExtremeAnalytics™

ExtremeAnalytics™ is an advanced analytics solution that provides detailed visibility and in-depth analysis of applications and network traffic across the entire infrastructure – from edge devices to the campus network to the data center. It is an extension of the capabilities of ExtremeCloud IQ’s on-premise management platform, Site Engine. In today’s complex networks, it is not enough just to know that the network works. It is becoming critical to understand what applications are being used, by whom, how they perform and whether they pose a potential threat. ExtremeAnalytics provides this information, enabling administrators to make informed decisions to optimize performance and strengthen security. Integration with Extreme’s wide range of network hardware and cloud platforms makes it a comprehensive analytics tool.

• Key capabilities:
  • Application and user visibility: ExtremeAnalytics analyzes network flows to accurately identify the applications running on the network, the users using those applications, their locations and the types of devices they connect to. This allows you to understand how network resources are being used and identify potential bottlenecks.
  • Real-time and historical monitoring: The platform offers real-time insights into network flows and the ability to analyze historical data, which is key to identifying trends and long-term optimization.
  • Proactive performance monitoring and alerting: Enables proactive performance monitoring of key applications and generates alerts when problems are detected before they affect the end-user experience.
  • Advanced diagnostics and troubleshooting: Diagnostic tools allow you to quickly separate performance problems on the network itself from problems on the application side, greatly speeding up the process of identifying the source of the problem (root cause analysis).
  • Deep Packet Inspection (DPI): The use of DPI technology allows for detailed analysis of the content of network traffic, enabling precise classification of applications and detection of abnormal behavior.
  • Monitoring “Shadow IT” and unapproved applications: ExtremeAnalytics helps identify and report on unauthorized applications and unusual network traffic that may indicate activities that are not in compliance with company policy or potential security risks.
  • Security Analytics (Security Forensics): The platform provides tools for analyzing security incidents, allowing network activity to be tracked and evidence to be collected. A centralized packet capture feature further supports this process.
  • Broad integration: ExtremeAnalytics integrates with a wide range of Extreme Networks hardware platforms, including Universal, VSP, Summit, ERS, SLX series switches and ExtremeCloud IQ controllers. Application telemetry collected from these devices allows flow analysis without the need to install dedicated probes. Optionally, it is possible to deploy a Traffic Sensor device for real-time analysis in third-party environments. The platform also integrates with public clouds such as Google Cloud Platform (GCP), Amazon Web Services (AWS) and Microsoft Azure, enabling visibility into application flows in these environments.
• Benefits: The main benefits of using ExtremeAnalytics include a better understanding of user behavior and application usage, the ability to optimize Quality of Experience (QoE) for key business services, significantly speed up the troubleshooting process, and support in ensuring compliance with internal and external security regulations.

Extreme Networks Management and Analytics Platforms

Network Security Solutions

Extreme Networks takes a multi-layered approach to network security, integrating protection mechanisms at different levels of the infrastructure – from the physical network layer, to advanced access control, to threat detection and response. Key elements of this strategy are technologies such as Zero Trust Network Access (ZTNA), Network Access Control (NAC), Fabric-based network segmentation and wireless threat protection.

ExtremeCloud™ Universal ZTNA (Zero Trust Network Access).

ExtremeCloud Universal ZTNA is a state-of-the-art security solution that implements the “never trust, always verify” (Zero Trust) principle in accessing network resources and applications, regardless of the location of the user or device. This is Extreme Networks’ answer to the growing demand for granular access control in increasingly distributed and hybrid work environments. Traditional security models based on perimeter network protection are becoming insufficient in an era of remote work, mobility and widespread use of cloud applications. ZTNA verifies the identity of every user and the security status of every device attempting to access a specific resource, every time. Extreme simplifies the implementation of this concept by integrating network access control (NAC) and application access control (ZTNA) functions into a single, cloud-based SaaS platform.

• Features:
  • Unified Cloud NAC and ZTNA: Universal ZTNA combines the functionality of traditional Network Access Control (NAC) with the modern Zero Trust Network Access approach in a single, consistent offering delivered as a cloud service (SaaS).
  • Single Zero Trust policy engine: The solution uses a single, central identity-based policy engine that is used for both network and individual application access control. This ensures consistency and simplifies policy management.
  • Automated policy configuration and enforcement: Security policies are automatically configured and enforced on cloud-managed universal devices (switches, access points) for all types of users (employees, guests) and devices, including IoT devices.
  • Unified visibility and reporting: the platform provides centralized visibility of access events and reporting capabilities to facilitate security monitoring and management.
• Benefits:
  • Seamless user experience: Provides a consistent and secure experience for employees to access applications and resources, whether they are working in the office, remotely, or in a hybrid model.
  • Flexible cloud hosting choices: Offers a variety of secure hosting options in public cloud, private cloud and at the network edge (ExtremeCloud Edge) to meet data sovereignty and privacy requirements.
  • Simplified security management: Consolidation of NAC and ZTNA functions into a single platform and process automation significantly simplify access security management.
• Purpose: Universal ZTNA’s main application areas are securing access in hybrid and remote environments, protecting against insider threats (such as those resulting from user account hijacking), and simplifying IT security operations in general.

Extreme Fabric Connect (in the context of security)

Extreme Fabric Connect’s network virtualization technology plays a key role in the company’s security strategy. Through mechanisms such as hypersegmentation and “stealth networking,” it creates an environment that is inherently more secure than traditional network architectures.

• Security features and benefits:
  • Hypersegmentation: Fabric Connect enables the creation of multiple isolated, virtual network segments on the same physical infrastructure. This allows for the precise separation of critical resources, information and devices (e.g., industrial control systems, medical devices, payment systems) from the rest of the network. This segmentation is scalable and relatively easy to implement.
  • Blocking Lateral Movement Prevention: With the isolation provided by segments, Fabric Connect makes it significantly more difficult or even impossible for attackers to move inside the network (known as lateral movement), even if they manage to compromise a single device or segment. This is a key element in limiting the impact of a successful attack.
  • “Stealth Networking” (Native Stealth): Fabric Connect-based network topology is inherently “stealthy” from the perspective of traditional IP-based scanning tools. Because it is an Ethernet-oriented network, rather than IP routes between “hops” (hop-by-hop), its structure cannot be easily mapped by remote IP tools. This makes the network less susceptible to reconnaissance and attacks.
  • Proven resilience: The effectiveness of Fabric Connect’s security approach has been confirmed in numerous hack-a-thon tests, where it has been proven to resist penetration attempts.

ExtremeControl (Network Access Control – NAC).

ExtremeControl is a Network Access Control (NAC) class solution that enables centralized definition and enforcement of detailed network access policies. Although Extreme Networks is developing a more modern, cloud-based approach in the form of Universal ZTNA, ExtremeControl still plays an important role, especially in existing on-premise deployments, in managing device access to the network. NAC is the foundation for controlling who and what can connect to a network. ZTNA extends that control to access to specific applications and resources. Extreme offers both of these mechanisms, with a clear trend toward unifying them and moving them to the cloud as part of Universal ZTNA.

• Features:
  • Granular policy control: Allows you to specify precisely which users and which devices (including personal devices in the BYOD model and IoT devices) can access the network and under what rules.
  • Authentication and authorization: Integrates with authentication mechanisms (e.g. 802.1X, RADIUS) to verify the identity of users and devices before granting access.
  • Regulatory Compliance: Helps meet regulatory compliance (compliance) requirements by enforcing appropriate access policies.
  • Integration: It has traditionally integrated with the Extreme Management Center management platform (whose functionality is now part of ExtremeCloud IQ Site Engine).

Other security solutions

Extreme Networks’ security portfolio is complemented by other important components and policies:

• ExtremeAirDefense: A specialized Wireless Intrusion Prevention System (WIPS) security solution that monitors the radio space for unauthorized access points, Wi-Fi attacks and other wireless threats.
• Network segmentation: a general principle of designing secure networks, which Extreme Networks implements in a number of ways, primarily through the Fabric Connect technology mentioned above, but also through traditional VLAN mechanisms.
• Security automation: The ability to dynamically create secure network segments and assign appropriate policies based on user identity, device type or connection context.
• Open security ecosystem: Extreme Networks emphasizes that no single vendor can solve all security problems on its own. That’s why the company promotes an open ecosystem, enabling integration of its solutions with products from other specialized security vendors through APIs. This allows it to build comprehensive, multi-layered security systems and automate workflows based on alerts from third-party systems.

SD-WAN solutions

In response to the growing demand for flexible, secure and efficient management of wide area network (WAN) traffic, Extreme Networks has added Software-Defined Wide Area Network (SD-WAN) solutions to its portfolio. The technology was acquired as a result of the acquisition of Ipanema’s SD-WAN division from Infovista and is now offered under the name ExtremeCloud™ SD-WAN. The key objective of this integration is to provide customers with a comprehensive, unified network solution that includes LAN, WLAN and WAN infrastructure, managed from a single, consistent cloud platform. SD-WAN has become an indispensable component of modern corporate networks, enabling optimization of the use of available WAN links, reduction of operating costs and significant improvements in the performance of critical business applications. Integrating this technology with existing Extreme management platforms (ExtremeCloud IQ) and Fabric Connect technologies allows offering a consistent and secure end-to-end solution.

ExtremeCloud™ SD-WAN

ExtremeCloud SD-WAN is a solution that aims to transform traditional WANs by intelligently directing traffic, optimizing application performance and simplifying the management of distributed infrastructure.

• Features and Benefits:
  • Extending the Fabric architecture to the WAN edge (Fabric to the Edge): One of the key advantages of ExtremeCloud SD-WAN is the ability to extend the services and benefits of the Fabric Connect architecture (such as automatic discovery, configuration, segmentation and security) to WAN connections. This makes it possible to create a consistent, automated and secure network structure from the data center to the campus to remote branch offices.
  • Advanced application performance management: The solution offers automatic detection mechanisms for more than 5,000 applications, allowing granular control over their performance and prioritization. This translates into a better end-user experience and higher productivity. In addition, the platform provides maintenance-free and secure connections to public clouds such as AWS and Microsoft Azure, guaranteeing high-performance access to IaaS (Infrastructure as a Service) resources.
  • Unified management with ExtremeCloud IQ: The entire SD-WAN solution, like other Extreme network components, is centrally managed from the ExtremeCloud IQ platform. This provides an intuitive user interface, unified visibility and simplified operations for wired, wireless, SD-WAN and IoT devices. Various deployment options are available (public cloud, private cloud, Extreme Edge Cloud), allowing for data sovereignty. Extensive analytics covering the entire path from LAN, to WAN, to cloud, accelerate problem cause identification and remediation.
  • Ensuring business continuity and resiliency: ExtremeCloud SD-WAN enhances network reliability with intelligent application traffic control, sub-second failover capabilities and high availability (HA) options. Built-in WAN security mechanisms and advanced Internet access protection options protect the network from cyber attacks.
  • Increased operational efficiency: a cloud-native orchestrator with automated workflows, automatic application discovery, and unattended connections to AWS and Azure clouds significantly simplifies operations, offering streamlined visibility, security and performance control.
  • Control costs and purchasing risks: Detailed performance reporting enables cost optimization and fine-tuning of networks. Flexible subscription terms, including all necessary features, reduce investment risk and improve financial efficiency.