What is SD-WAN?
Software-defined WAN is a new approach to network connectivity that lowers operational costs and improves resource usage for multi-site deployments, allowing network administrators to use bandwidth more efficiently and ensure the highest possible level of performance for critical applications without sacrificing security or data privacy.
For more information on deploying and configuring SD-WAN on the Meraki MX Security Appliance, see the Meraki SD-WAN Deployment Guide
- Easy-to-configure IPsec overlay using
Meraki Auto VPN
- Traffic distribution over multiple pathways (Internet, cellular, MPLS) with built-in load balancing and
automatic failover capabilities
network visibility and control
- QoS and bandwidth management with Meraki
Intelligent Path Control
- Policy-based routing: Traffic path assigned based on source, destination, or application
- Dynamic path selection: Traffic path chosen per-application based on loss, latency, and jitter
- Intuitive, scalable VPN solution to connect remote sites with ease (Auto VPN)
- AES encryption to ensure data privacy
Why Choose SD-WAN?
Today, IT departments are under pressure to do more with less: manage more sites and more clients with limited budgets and a relatively small team, all without any reduction in reliability and security. The high cost of enterprise WAN connectivity, support, and personnel combined with the growth of bandwidth-hungry streaming applications and cloud-based services, is forcing many network admins to search for alternative solutions.
With SD-WAN, remote sites are connected over low-cost Internet links secured by VPN. MPLS-like reliability is provided through multiple uplinks with load balancing capabilities, intelligent path control, and automatic failover.
Dual-Active VPN uplinks
In addition to supporting dual WAN uplinks and automatic VPN failover, the MX also has the ability to build multiple VPN tunnels that are active simultaneously on both uplinks, whether they are Internet or MPLS connections. Traffic can then be load-balanced across these tunnels to make optimal use of available bandwidth.
Policy-Based Routing (PbR)
PbR functionality allows administrators to assign traffic to a particular VPN path based on criteria such as traffic protocol, source, destination, or application.
Dynamic path selection
Dynamic path selection allows administrators to set performance thresholds for different types of traffic, in order to ensure that critical applications and data transfers always use the best path based on the loss, latency, and jitter over the available VPN tunnels.
Deep dive: Penn Mutual saves $858K
- Implement a BYOD platform at 50 remote sites
- Reduce management and connectivity costs
- Complete Meraki hardware stack: MX, MS, MR
- Broadband connectivity at branch locations
- Reduced Telco spend by 40%
- Improved IT efficiency with unified management platform
Projected 3 year cost with legacy WAN deployment
T1 × 45 at branches (1.544Mbps each)
Broadband × 2 at HQ & DR (45Mbps each)
Content filtering software
Hardware Security Appliance
|3 year Total Cost of Ownership (TCO)||$2,193,750|
Projected 3 year cost with Meraki (including rip & replace)
Broadband × 38 at HQ & branches (50Mbps each) WAN Management vendor (one time installation costs)
Meraki Hardware & Licensing
MX, MS, and MR × 41 at branches
MX, MS, and MR licensing
26 branch offices wired for MR
|3 year Total Cost of Ownership (TCO)||$1,334,893|