SD-WAN – Managed or Do it Yourself?

Managed SD-WAN vs. do-it-yourself: the basic models

SD-WAN, a software-based approach to wide-area network management, provides the flexibility, agility, efficiency and improved usability that modern organizations require. It is characterized by simple deployment, centralized manageability and lower costs. The key benefit is the ability to manage multiple connection types, from broadband to LTE to MPLS, to enable a better application experience for the end user at each location. As organizations consider deployment architectures and potential partners, the question is whether to go the do-it-yourself route alone, opt for a jointly managed service, or a fully managed service. It’s important to know exactly what each option entails before making a decision.

Do-it-yourself model: Some organizations purchase SD-WAN routing equipment and install and configure it themselves at each site. Others hire a system integrator to take these steps and then manage the network themselves. Or they hire a managed network services provider that offers different variations, from provisioning and maintenance to co-managed or fully managed network services.

Co-management mode: Many organizations find that scaling an SD-WAN to global sites can become very complex and they need a managed service provider. In co-management mode, the service provider ensures deployment and management of the infrastructure while internal teams create new application-based routing policies via a web portal and change them instantly as required. Other organizations need more comprehensive support so internal teams can focus on more strategic areas of cloud transformation. A managed service provider helps select the right mix of broadband, 4G/LTE transport and MPLS. Which model fits best depends on the organization’s capabilities and priorities.

Three reasons for a managed SD-WAN service

SLAs and problem-solving processes: With the do-it-yourself model, SLAs must be agreed with each ISP individually worldwide and can be difficult to enforce and harmonize, as each provider handles technical support, communication and dispute resolution differently. A managed service, by contrast, applies uniform SLAs for performance and connectivity across all locations, with a single point of contact for technical support, troubleshooting and communication across all ISPs.

Contractual complexity: With the do-it-yourself model, numerous contracts and invoices have to be controlled and managed globally, which is complex and time-consuming. A managed service, on the other hand, brings simpler billing and greater commercial flexibility, with the ability to add new regions, capacity or security services as needed, or flexibly terminate sites using sunset clauses.

Security: SD-WAN offers native support for IPSec tunneling to encrypt traffic, but this alone is not a panacea, additional protection measures such as SASE or Zero Trust are required. With a managed service, connectivity becomes an integral part of security: organizations can choose from additional services such as cloud-based web traffic filtering, role-based access controls and internal network segmentation.

From physical to virtual

With SD-WAN, devices are installed at each location that orchestrate data traffic via an overlay network. Smaller companies often opt for a dedicated SD-WAN appliance. For companies with more demanding network requirements, these appliances can be automatically connected to cloud or network-based platforms that support virtualized functions such as firewalls, routers and application optimization at scale and speed.