Essential Considerations for Implementing SD-WAN/SASE Networks

What is SD-WAN and SASE?

The rise of hybrid work models and the proliferation of cloud- and artificial intelligence- (AI-) based applications and services have altered the way organizations approach network security, according to SDX Central.

Aryaka's recent report finds five key trends with 70% of CISOs seeking secure access service edge and software-defined WAN convergence for simplified infrastructure management (source Computer Weekly).

Technology leaders are frustrated and stressed with the complexity as they manage hybrid workforces, cloud applications, and an increased risk of Cybercrime.

They are seeking an easier way to improve their cyber resilience and a simpler way to manage networks (network as a service model).

SD-WAN is an evolutionary approach to the WAN that offers simplified management, quick turn-up, better application performance, improved resiliency, and cost savings when compared to traditional approaches. It can replace or work with MPLS, and is delivered directly, via carriers, or managed service providers. SD-WAN can leverage lower-cost connections including DIA, Broadband, LTE/5G, or a combination of all of these options.

SASE (pronounced 'sassy') or Secure Access Service Edge, represents the convergence of networking and security functionality. It seeks to eliminate point solutions, providing holistic visibility into and management of security policies. No matter where the user or application lives, SASE is designed to secure and optimize that traffic.

*Definitions provided by Avant Communications

Why should you consider SD-WAN/SASE?

• Cost savings over MPLS (not in all cases)
• Need more bandwidth
• Enable Cloud Applications
• Replace legacy firewalls
• Simplified Management of locations and hardware
• Auto failover and redundancy leveraging dual connections
• Improved application QoS
• Network contract expiration
• Strengthen security posture
• Replace routers

What is your desired WAN setup?

Here are the types of common connectivity options when considering SD-WAN/SASE:

• Dual Internet (dedicated Internet + broadband)
• Dual Internet (dedicated internet + dedicated internet)
• Active/Passive (Broadband + LTE/5G)
• Triple Internet (DIA + Broadband + LTE/5G
• Hybrid (MPLS + Internet

Other factors to consider:

When considering SD-WAN/SASE, looking at your overall network and security is critical.

These factors should also be considered when evaluating SD-WAN/SASE:

• Do you require DDoS mitigation, or would you like to proactively block traffic from known bad IP addresses?
• Do you need new circuits at some sites or are you looking to replace current connectivity?
• How many locations are in scope?
• Where are your offices located? US only, Globally, EMEA, Canada, etc
• What is your current primary network type? MPLS, VPN, etc
• Who are your current network carriers and when do those contracts expire? Do you have termination liability on any of the contracts?
• Do you plan to replace your network or keep it? What about a secondary network?

SASE Factors to Consider

What security products do you have in place today?

• Next-Gen Firewall
• Zero Trust Network Access (ZTNA)
• Cloud Access Security Broker (CASB)
• Remote VPN
• Secure Web Gateway (SWG)

Are you interested in replacing or implementing any of these technologies?

What is your desired firewall setup?

• Firewall at each site
• Local breakout for trusted apps?
• Cloud-based firewall service

What apps are hosted in the cloud? Examples include PBX/Voice, ERP, CRM, Email, Video, etc

What are your current cloud services?

• Amazon Web Services (AWS)
• Microsoft Azure
• Google Cloud Platform (GCP)
• Salesforce
• Microsoft Office 365
• Dropbox

What are your current routing protocols? BGP, OSPF, and Static are some examples

Do you require WAN Optimization?

Do you require a Content Delivery Network (CDN)?

Do you require High Availability (HA) for the SDWAN devices?

Desired Management of SD-WAN/SASE

The final factor to consider is the management of the network. In terms of your current state, who manages your network today? Do you manage it internally or is your network managed by the carrier or MSP?

For future state leveraging SD-WAN/SASE what is your desired management goal?

• Do you need assistance help with professional services in deploying, configuring, and tuning the SD-WAN/SASE solution?
• Do you need ongoing Managed Services including Network Operations Support, changes, and vendor and network performance reviews?
• Do you want to use internal resources to deploy and manage SDWAN/SASE?
• Do you require a bundled network and SD-WAN from one provider?
• Do you want a single provider who submits trouble tickets and resolves issues, as well as one provider for consolidated billing?

Key SD-WAN/SASE Providers

How a Trusted Advisor can help you find the right provider

This quick video (approx 6 minutes in length) explains the process in which a Trusted Advisor like NetSharx can assist you with finding the right SD-WAN/SASE provider through agnostic engineering, provider comparisons, pricing analysts, and competitive research.

Conclusion

The global cost of cybercrime is expected to rise from $9.22 trillion in 2024 to $13.82 trillion in 2028 as more people turn online and cybercrime techniques become more advanced according to SDX Central.com

SD-WAN/SASE is fundamentally about efficiency and security. It comes down to giving the people who work for you the tools they need to compete, win, and be productive.

This is the responsibility of upper management and technology leaders.

Network capacity and security impact your customers too. If it becomes limited, SD-WAN/SASE combined gives you the power to prioritize bandwidth, ensuring that the applications most critical to customer experience don’t skip a beat while drastically improving security.

To learn more about SD-WAN/SASE or to receive a FREE analysis, take our Quick Interactive Assessment related to SD-WAN/SASE

?