The software-defined revolution: making SD-Branch possible

Today, software-defined networking is extending to all aspects of the network and has completely changed the way we configure and deploy networks. Fixed links in wide area networks have become SD-WANs, which provide enterprises with a variety of options to connect distributed sites to corporate sites, to each other, and to cloud computing infrastructure.

Compared to MPLS, SD-WAN provides more network flexibility, reduces costs, and gives companies more control over their WAN connections. The capital expenditure for a site's network system may not drop significantly, but operating expenses are reduced.

From SD-WAN to SD-Branch

The next step is to extend this control and monitoring to the branch network. The improvements in visibility and control that SD-WAN provides for the WAN also extend to the branch LAN.

SD-Branch provides a common interface for configuring, monitoring and troubleshooting multiple functions (routing, switching, Wi-Fi, network security, micro-segmentation and application support). It eliminates the need for different user interfaces for each function, when each function is implemented by a separate device, even when the products are from the same vendor.

With SD-Branch, the typical suite of network appliances is replaced with a simpler hardware platform, upon which virtual appliances are installed. Maintenance is greatly enhanced. Need new firewall functionality? Update the firewall virtual instance. Don’t need BGP in your router? Just install an image without BGP. Installing new software enables new features and functionality, which is usually achieved by replacing the hardware platform.

But isn’t SD-Branch all about automation?

You may be wondering how SD-Branch is different from using automation to achieve the same results. SD-Branch is a more holistic approach that provides a single user interface for monitoring, management, and troubleshooting. It may use multiple components under the hood but hides the implementation details. Like SD-WAN, SD-Branch allows for the definition of policies that define connectivity, quality of service, and security for endpoints and applications. For example, an SD-Branch product can be used to define a new VLAN, provision it on routers, switches, and Wi-Fi infrastructure, and add application and security policies.