SD-WAN is a software-defined approach to managing the WAN. The areas needing improvement are generally associated with proprietary backhaul connectivity services, poor network performance, and inconsistent security posture and policy management. All of which inhibit low risk adoption of cloud-based applications and other digital transformation initiatives.
The traditional WAN (wide-area network) function was to connect users at the branch or campus to applications hosted on servers in the data center. Typically, dedicated MPLS circuits were used to help ensure security and reliable connectivity. This has driven Software-defined WAN (SD-WAN) solutions to become increasingly popular as organizations request fast, scalable, and flexible connectivity among different network environments. They also seek to lower the overall total cost of ownership (TCO) while delivering enhanced application performance. But a subpar SD-WAN approach can significantly inhibit an organization’s ability to quickly adapt to changing business demands, especially if it does not offer integrated security.
In a nutshell, SD-WAN is used for security. But what is SD-WAN’s purpose when working towards specific business outcomes?
SD-WAN allows remote sites to connect more easily to networks, data centers, and/or multiple-clouds with lower latency, better performance, and more reliable connectivity. When users demand more of their applications and infrastructure at unprecedented agility and scale, an appealing user experience can be make-or-break.
MPLS and other connectivity technologies aren’t just outdated; they’re also more expensive when the total cost of ownership (TCO) is considered. SD-WAN not only significantly reduces bandwidth costs but can also help reduce capital costs by allowing consolidation of different point networking and security products at the edge while delivering better control and performance.
As network infrastructures have evolved, the sprawl of point products used for networking and security increases complexity. SD-WAN uses automation to make connectivity a simpler process across mixed environments, including on-premises, hybrid, and cloud. SD-WAN enables centralized orchestration, zero-touch provisioning, and analytics along with deep integrations of cloud on-ramps to accelerate cloud connectivity.
An SD-WAN solution needs to have integrated security. Otherwise, it’s just another connectivity option that unfortunately becomes an attack vector. When properly implemented, secure SD-WAN enables private, secure and direct internet access. It’s critical that an SD-WAN solution can ensure consistent security at all edges, from flexible WAN edges to the cloud edge.
|
Watch this demo to see how FortiManager enables centralized management with automation-driven network configuration, visibility, and security policy management of FortiGate Secure SD-WAN devices.
Watch the video
|
Watch this video explain how one of New Zealand's largest fully integrated logistics providers implemented reliable, secure connectivity across 13 branches.
Watch the videoModern SD networking and SD-WAN technology evolved from earlier networking solutions like point-to-point (PPP) leased lines, frame relay, and MPLS. PPP was the original mode for connecting multiple local area networks (LANs) before frame relay removed the need to buy and manage individual connecting links between various corporate locations. MPLS connection made more improvements by bringing previously separate functions such as voice, video, and data networking onto the same network using Internet Protocol (IP)-based technology.
Fast-forward to the 2000s, and multiprotocol label switching (MPLS) came to popularity. MPLS soon overtook frame relay in popularity because of how it leverages Internet Protocol (IP)-based technology to bring previously separate functions such as voice, video, and data networking onto the same network. MPLS today is the most common technology in use for enterprise WANs, and is still held up for the reduced latency and quality of service (QoS) benefits it provides.
In the 2010s, specifically 2013, SD-WAN was born, and as more technologists examined SD-WAN for its benefits, they came to realize many of the same advantages SD-WAN has over MPLS, similar to how MPLS brought more advantages than frame relay. As a simple explanation, SD networks deliver MPLS-level QoS while being significantly less expensive and significantly easier to scale.
SD-WAN can handle a variety of connections and dynamically move traffic over the best transport available, and can provide both redundancy and much more capacity using lower-cost links. SD-WAN solutions are significantly cheaper than MPLS overall when time-to-installation and time-to-delivery are also considered. The best SD-WAN solutions offer zero-touch provisioning, allowing sites to be brought on quickly and not requiring networking or security experts to be on-site for installation.
There are a handful of factors to consider before shifting an organization to an SD-WAN solution from a traditional MPLS configuration. So what is SD-WAN vs. MPLS useful for? Check out the table below to compare each option:
| SD-WAN | MPLS | |
| Complexity | If security is not automatically built-in, teams need add-on options |
Internet traffic backhauled to the data center |
| Visibility | Broad application visibility | Packet routing limits visibility |
| Cost | Consolidated services greatly reduce TCO | Expensive to build and maintain |
| Performance & Availability | Enables MPLS, broadband, LTE for high-speed | MPLS offers limited bandwidth and single point of failure |
One of the critical requirements for SD-WAN success is fully integrated security. Without it, SD-WAN becomes just another attack vector.
A secure SD-WAN solution is explicitly designed to interoperate as a single offering, ideally with each element running on the same operating system and managed using a single-pane-of-glass interface. This ensures that transactions are all seen and inspected, and any threats or anomalous behaviors are shared between every solution for maximum protection. As part of such an integrated monitoring system, the networking and connectivity functionalities of an SD-WAN aren’t just more closely associated with the security solutions installed on the platform. They’re the same thing.
Deployment of security piecemeal is also unwise. Because of the dynamic nature and high scalability of SD-WAN, overlay security is not only very expensive to deploy and maintain, but often ends up with delays when reacting to connectivity changes, leaving critical connections and data vulnerable. An integrated system ensures that SD-WAN connectivity, traffic management functions, and advanced security function as a single, holistic solution.
An NGFW, whose key components include intrusion prevention (IPS), web filtering, secure sockets layer (SSL) inspection, and anti-malware, is an example of an integrated solution. Solutions that combine SD-WAN and NGFW capabilities into single offerings satisfy the key requirements for secure SD-WAN—and ensure the safety and reliability of connections and for the organization overall.
As enterprises adopt remote workforce policies, networks grow more distributed. A new networking and security strategy is required that combines network and security functions with WAN capabilities to support the dynamic, secure internet access for a “work from anywhere” global workforce. SD-WAN plays a critical role in the adoption of emerging solutions like Secure Access Service Edge (SASE) and enables flexible and consistent security across all edges.
Learn more about integrating security with SD-WAN to avoid common WAN security issues.
Learn more about SD-WAN Pricing.
SD-WAN is a software-defined approach to managing the WAN. SD-WAN is used for better security.
SD-WAN allows remote sites to connect more easily to networks, data centers, and/or multiple-clouds with lower latency, better performance, and more reliable connectivity. The traditional WAN (wide-area network) function was to connect users at the branch or campus to applications hosted on servers in the data center.
Please fill out the form and a knowledgeable representative will get in touch with you soon.
