•1 min read•Samaneh Pardaz Soroush
Organizations with several branches or offices need to connect those sites to headquarters securely and reliably, so that users can reach central applications and servers.
Site-to-site VPN
The most common approach is an encrypted IPsec tunnel over the internet between the branch firewall or router and headquarters. It is economical and standard, and most security appliances and enterprise routers support it.
What does SD-WAN add?
- Using several links at once (for example fiber, ADSL and mobile internet), with automatic failover when one goes down.
- Application-based routing: sensitive traffic such as VoIP and video conferencing takes the best-quality link.
- Central management: configuring and monitoring every branch from one console.
Before you choose
List the number of branches, the type and quality of the links available, your critical applications and your redundancy needs. In many projects, a next-generation firewall at each branch covers VPN, SD-WAN and security all at once.
