SD-WAN and SASE:
The new landscape
of networking

Protecting users' access to applications anywhere and anytime.

As the world rapidly adopts a cloud-first strategy, the IT landscape has become significantly different. Enabling secure access to applications wherever users may be is a significant priority. While delivering speed and agility, the multicloud environment creates challenges such as an expanded attack surface and less control over the user experience. Cisco SD-WAN helps you address these issues.

With the power of multicloud access and integrated security, businesses can improve performance, reduce costs, and protect critical assets. As a cloud-native WAN overlay, Cisco SD-WAN ensures application performance and adapts to changing conditions--with minimal manual intervention. Cisco SD-WAN is the foundation for a secure access service edge (SASE)-enabled architecture and offers the ability to extend IT's visibility beyond the corporate network and into the internet and cloud. 

92% of enterprises have adopted a multicloud strategy.1

Harness the power of the cloud.

Today, your network has to work harder than ever to deliver the required user experiences over the cloud. With Cisco SD-WAN Cloud OnRamp, you can enable applications on any platform with consistent, predictable performance in minutes. Software-defined WAN (SD-WAN) helps you optimize your wide area network, which means better experiences for customers and employees.

Cloud OnRamp for software as a service (SaaS) uses real-time analytics to steer users onto the best-performing path for optimal application performance for applications like Microsoft 365, Salesforce, and other cloud-based apps. Enjoy up to 40 percent faster performance for Office 365 with Cisco SD-WAN.2

Cloud OnRamp for infrastructure as a service (IaaS) delivers seamless, automated connectivity to the public cloud. The cloud networking solution simplifies workflows for Amazon Web Services (AWS), Azure, and Google Cloud, including application-aware policies that allow real-time policy enforcement for cloud and on-premises solutions. IaaS spend is projected to grow by 24 percent CAGR to reach $74B by 2022.3

In addition, Cloud OnRamp automates on-demand connectivity to multiple sites and to the world's leading cloud provider networks through software-defined cloud interconnect (SDCI) providers like Equinix and Megaport. 

58% of security decision makers reported that their firm suffered at least one breach in the past 12 months.4

SD-WAN and cloud security lay the foundation for a SASE transformation.

As organizations and users become more distributed, the demand for anywhere, anytime access to applications has resulted in the transformation of networks to deliver uninterrupted connectivity while maintaining security. To protect anywhere, anytime access, organizations need to provide security closer to the user and edge to support network agility and minimize network latency.

Cisco SD-WAN provides full-stack multilayer security capabilities for both on-premises and cloud. It bridges organizations' current security deployments with their SASE rollout by providing consistent security policy enforcement that can be deployed and managed anywhere. 

We've never had application visibility like this before. This added security protects our staff from the ever-present threats on the internet.

Joel Marquez, IT director, Tamimi Markets

Data breach costs rose from $3.86M to $4.24M, the highest average total cost in the history of data breach report.

1/3 of enterprises are transitioning to cloud hosted applications.6

Gain analytics and get more insights.

Applications and users are more distributed than ever, and the internet has effectively become the new enterprise WAN. As organizations continue to embrace the internet, cloud, and SaaS, network and IT teams are challenged to deliver reliable connectivity, application performance, and security over networks and services they don't own or directly control.

Network teams often carry the burden of proving the network innocent when something goes wrong. Application issues might manifest themselves as network issues. Service disruptions can lead to endless finger-pointing. The resulting cycles pinpointing the source of issues can lead to prolonged service interruptions that ultimately damage the revenue and reputation of the business.

Cisco SD-WAN and ThousandEyes integration extend visibility into the internet, cloud, and SaaS applications for actionable insights beyond the traditional corporate network. ThousandEyes assists in making informed business decisions leveraging real baseline data, whether it is moving to the cloud or transitioning to SD-WAN from legacy infrastructures. Enterprises can expedite ThousandEyes agent deployment with vManage integration to quickly pinpoint the source of issues, get to resolution faster, and manage the performance of what matters. vAnalytics correlates application behavior and quality of experience (QoE) with the underlying SD-WAN network, translating real-time data into visualized insights.

37% of enterprise architects consider WAN complexity their top challenge.7

Scale with simplicity.

Managing branch locations has always been a major challenge within traditional WAN architectures and deploying security across global locations adds complexity. This makes consistent policy enforcement a distant goal, made even more unattainable when a policy change needs to be rolled out across all sites. SD-WAN makes consistent policy not only possible but seamless, with automated integration with Cisco Umbrella.

It doesn't matter if you're managing tens or thousands of locations; SD-WAN simplifies network management. With a single WAN fabric, all policies and configuration can be centrally managed, even across multicloud environments. Cloud security can be enabled to thousands of sites within minutes. The outcome is true simplicity at an enterprise scale.

In addition, relying on the internet for enterprise cloud access on a global level adds even more complexity. Link quality and the ease of doing business with internet service providers can vary from region to region. Luckily, Cisco SD-WAN is able to scale your business, thanks to its support for multigigabit wireless. To do this, the Cisco Catalyst 8000 Edge Platforms Family offers multigigabit ethernet interfaces. With these high-performance ports, customers can connect Cisco Catalyst Cellular Gateways and get sub-6-GHz 5G wireless connectivity, reaching speeds of up to 3.3 Gbps and more with upcoming mmWave models. Get fast, flexible connectivity to the cloud that's able to be remotely activated and managed through the Cisco SD-WAN dashboard. Dual 5G SIM for failover and IP pass-through mean that multigigabit 5G for SD-WAN can either complement broadband internet connections or replace them entirely.

Cisco SD-WAN security delivers simplicity and automation so that we can apply the right security controls where needed, when needed. We are very excited to bolster that solution with the Catalyst 8000 Edge Platforms Family.

Director of product management, Riedel Networks

The Cisco Catalyst 8000 Edge Platforms Family provides customers the flexibility to increase memory, capacity, and performance. The portfolio offers investment protection with 5G technology. Cisco offers the highest-performing SD-WAN edge platforms in the industry, with end-to-end visibility through analytics for optimization of cloud applications and edge compute resources.

95% of enterprises are using or expect to use SD-WAN within 24 months.7

Deploy without speed bumps.

SD-WAN delivers rich benefits as far as costs, security, and simplicity. But the key to a successful SD-WAN transformation is to put the right focus on the initial setup and transition of the first 5 to 10 sites, then to expand SD-WAN across the rest of the enterprise rapidly. This is where services from Cisco Customer Experience are able to deliver the biggest value. Drawing from the best practices of successful deployments from numerous enterprises, ranging from simple to complex, the Cisco Customer Experience team's focus is to make the transformation smooth and avoid major hurdles. Categorizing the various sites, establishing templates, defining global policies, and enabling the right security architecture are a sure way to a smooth and successful deployment. An IDC study found that Cisco SD-WAN customers on average achieved 38% reduced 5-year total costs of operations.8  

Deploy with confidence on platforms that increase agility, security, and visibility for connectivity to the cloud.

SD-WAN infrastructure revenue growth will accelerate to 26.5% and 29.8% in 2021 and 2022, respectively, reaching $7.08 billion by 2025.9

See SD-WAN use-case scenarios that can help you keep up

Secure automated SD-WAN

Provide comprehensive on-premises and cloud-based security, enabling enterprises to transition to a SASE architecture where and when it is needed, in a secure and agile manner.

Branch security

Provide WAN access and help enterprises meet compliance demands on site while offering constant protection against all cyber threats from branches to multicloud SaaS environments. 

Application performance optimization

Design a global network where critical enterprise applications always maintain the highest service-level agreements (SLAs) and optimal performance, even if problems occur in the network. 

Multicloud access

Connect branches and a remote workforce to multicloud applications seamlessly with unified visibility and management. 

Secure direct internet access (DIA)

Optimize branch workloads while increasing security and improving application performance. The result is efficient and cost-effective secure access to the network.

Thanks to Cisco SD-WAN, our network topology is now optimized and centralized across all of our operations and IT offices, making it easier to manage data and incrementally save costs.

Head of IT enterprise, Vistara

Why Cisco SD-WAN?

As the market leader, Cisco SD-WAN enables organizations to securely connect any user to any application over any transport while ensuring a predictable user experience. It delivers integrated capabilities for multicloud, security, unified communications, and application optimization--all on a SASE-enabled architecture.