Contact sales

Summary

In this episode of the SD-WAN Deep Dive, Dave Macfarlane and James Sirrett discuss the evolving landscape of internet access in organisations. Many enterprises now use multiple internet connections, including satellite and radio, and deploy software on laptops to ensure secure, zero trust network access anywhere. Tools like Microsoft Defender, Global Protect, and VPNs facilitate this secure connectivity to centralised cloud services, irrespective of location.

The rise of hybrid working has further driven the need for secure endpoint connectivity, reducing reliance on corporate networks. SD-WAN is highlighted as a key enabler, simplifying secure, automatic connectivity for users. It’s also crucial for supporting IoT growth, allowing direct internet access for interconnected devices, thus reducing core bandwidth consumption and latency.

James notes that while SD-WAN can use public internet connections effectively, traditional MPLS is still preferred for critical voice traffic due to its stability. SD-WAN’s ability to monitor and route traffic based on application needs provides significant advantages, offering enhanced visibility and control.

Industries like retail are rapidly adopting SD-WAN for scalable deployments, while public sector organisations remain more reliant on MPLS. SD-WAN supports cloud environments by providing seamless connectivity to platforms like Azure and AWS, enabling a flexible, cloud-first strategy. While MPLS is not obsolete, SD-WAN offers a complementary, hybrid solution for modern networks.

Automated Transcript

Welcome back to another episode of our SD-WAN Deep Dive. Once again, I’m joined by our SD-WAN expert, James Sirrett.

Hi, James.

Hi, Dave.

You mentioned something interesting about internet access in organisations. Many have one, two, or even three connections, with some using satellite or radio for backup. So, with this plethora of IP devices, does the internet stop at the organisation’s edge?

No, not really. Organisations deploy a lot of software on their laptops to secure them. We’re seeing a trend where laptops are becoming more like mobile devices, treating any network as zero trust. With tools like Microsoft Defender, Global Protect, and Connect VPNs, these devices are secure end points, consuming centralised cloud services like Cisco Umbrella and Prisma Access from Palo Alto. Whether they’re in a corporate office, at an internet cafe, or at home, the VPN will protect the laptop and connect to the central service.

That’s a significant shift, especially with hybrid working becoming more common over the last five years. Devices are now secure wherever they are, reducing reliance on corporate networks for end user devices.

Exactly. In a typical network architecture, client devices connect securely to a cloud gateway service. Corporate networks are less about moving large amounts of data and more about securing devices that can’t always VPN. This shift is evident in many of our customers now.

The pandemic certainly accelerated this. Our London office, for example, sees few people on Mondays and Fridays, turning these offices into internet cafes. Treating the endpoint securely regardless of location has become essential.

Exactly. This ubiquitous access is critical, whether it’s from an iPad or laptop. Users want automatic, secure connectivity wherever they go.

That simplification is a clear driver for SD-WAN. We discussed the access layer, the foundation of the underlay network, and then the overlay. You mentioned people buy SD-WAN thinking it’s cheaper. If I were a vendor, manufacturing steel and equipment, beyond cost, what’s the next feature or use case driving SD-WAN adoption?

We’re seeing massive growth in IoT, with interconnected services needing fast internet bandwidth. Traditionally, traffic was backhauled to the data centre, but for devices like body-worn cameras and IoT services, you need direct internet access. SD-WAN facilitates this breakout, allowing fast deployment and efficient use of cloud services like Office 365 and Google Suite.

In a 400-site enterprise, for example, Microsoft 365 traffic would break out locally without going through central control, reducing core bandwidth consumption. Microsoft prefers public routing to their cloud over ExpressRoute, which they previously promoted. This approach can lower latency and reduce bandwidth costs in the core.

In the past, we debated whether to prioritise quality or quantity of bandwidth. In today’s internet-access world, does quantity win over quality?

That’s a provocative statement, but it’s true to some extent. With sufficient bandwidth, prioritisation of data becomes key. SD-WAN appliances and routers prioritise voice traffic within a network, ensuring quality even over public internet connections. A recent case with a large customer highlighted this. They wanted to consume a big voice solution over internet and SD-WAN, but found that traditional MPLS was still relied upon for voice due to its stability.

SD-WAN offers hybrid approaches, leveraging both MPLS and large internet pipes. It monitors and routes traffic based on application needs, ensuring voice traffic takes the best path, typically MPLS, unless there’s an issue, in which case it switches to internet.

This increased visibility and application-specific routing are significant advantages. Enterprises can route traffic based on the best available path, whether it’s through MPLS, internet, satellite, or radio.

Exactly. SD-WAN doesn’t care about the underlying transport mechanism as long as it carries IP packets. It continuously tests application performance and routes traffic accordingly, ensuring optimal performance.

Is the technology advanced enough to set service levels per application and let it handle the rest?

Yes, most SD-WAN solutions allow you to define rules and monitor performance metrics like latency and jitter. Enterprises can set it up and monitor network performance through tools like Highlight, which integrates with Meraki dashboards for comprehensive visibility across the network.

This single pane of glass view is something enterprises have long desired. With SD-WAN, they can monitor everything from switches, VLANs, Wi-Fi, security appliances, and SD-WAN tunnels, providing full end-to-end visibility.

Exactly. SD-WAN offers great observability across all layers, showing application usage and allowing organisations to manage their networks more effectively.

So, does SD-WAN provide a faster, better network than MPLS?

Not necessarily faster, but it provides greater visibility and control, enabling better management of critical applications. By prioritising important traffic and reducing noise, SD-WAN can improve network performance.

Which industries are adopting SD-WAN? Any that are hesitant?

Retail is a big adopter, leveraging SD-WAN for quick, scalable network deployments. Small retail branches use SD-WAN to handle card payments and other minimal bandwidth needs efficiently. Public sector organisations, like local councils, still often rely on MPLS due to their proximity and existing fibre infrastructure.

Another use case is the shift to hybrid working. With many employees working remotely, organisations need to extend corporate controls into public clouds, enabling secure access to applications without routing all traffic through central data centres.

This shift supports a cloud-first strategy, enabling organisations to move to SaaS and IaaS models while maintaining flexibility.

So, is MPLS dead?

No, MPLS still has a role, especially in hybrid deployments. Many customers adopt SD-WAN for its benefits but continue using MPLS where it makes sense. Our network supports both, allowing for flexible, hybrid solutions.

How does SD-WAN support cloud environments like Azure and AWS?

Vendors offer onramp solutions for IaaS in clouds, enabling connectivity to these platforms. Gamma can deploy and manage these connections, providing seamless integration with cloud services.

Thanks, James. Great discussion. We hope our viewers found it insightful. Stay tuned for the next episode.

Thanks for joining us.