Branch networks used to mean one thing: a private MPLS circuit from every site to head office. Today most applications live in the cloud, so sending all traffic back to a data center adds delay and cost. SD-WAN changes the design.
What SD-WAN does differently
SD-WAN builds an overlay across whatever links a site has, such as fibre, broadband and mobile. It measures each path and sends each application over the best one. Policies are set centrally and applied to every branch.
MPLS still has a place
- Predictable latency and service levels for voice or real-time systems.
- Sites in areas where internet quality is inconsistent.
- Carrier-managed connectivity where the team is small.
Many organizations keep MPLS at key sites and add internet links with SD-WAN, which gives resilience and reduces cost without taking big risks.
What to check before you decide
- Applications: where they run and how sensitive they are to delay and loss.
- Link availability and quality at each branch, including the local carrier options.
- Security: whether the SD-WAN includes firewalling and inspection or relies on separate devices.
- Operations: central management, reporting and who will run it.
- Commercials: licensing model, contract terms and the cost of links, not only devices.
Fortinet and Cisco both offer mature SD-WAN platforms. Choose the one that fits your security design and the skills of your team.