Companiile cu 5+ locatii abandoneaza MPLS scump in favoarea SD-WAN pe internet broadband. FortiGate domina segmentul cu integrare nativa in security stack.
Ce inseamna SD-WAN cu adevarat
Nu doar load balancing pe doua link-uri. SD-WAN modern e: aplicatii routate inteligent pe link-ul potrivit (Office 365 pe direct internet, ERP pe MPLS), failover sub 1 secunda fara intrerupere, vizibilitate completa pe aplicatii (nu doar IP/port), securizare inline.
Componente FortiGate SD-WAN
- SD-WAN rules — definitii per aplicatie: latency < 50ms, jitter < 10ms, packet loss < 1%
- Performance SLA — masurare continua pe fiecare link, switching automat
- Application control — recunoastere >5000 aplicatii (Office365, Salesforce, Zoom, Teams)
- ADVPN — full mesh dynamic intre toate site-urile fara configurare manuala
- Centralized management — FortiManager pentru push politici la 50+ branches
- ZTNA — Zero Trust Network Access integrat (replacement VPN clasic)
Provocari tipice in deployment
Migrarea graduala fara downtime (overlay parallel cu MPLS existent), tuning regulilor SD-WAN (initial multe false-routing pana ajusti SLA-uri), integrare cu DDI existent (DNS, DHCP central vs local), monitoring per branch fara overhead operational.
Decizii de design
Topologie hub-and-spoke vs full mesh vs hybrid? Numar de link-uri WAN per branch (1, 2, 3+)? Tip backup (4G LTE, Starlink, ISDN legacy)? In ce zone se face SSL inspection (latency vs visibility tradeoff)?
Cost vs MPLS clasic
Pentru o companie cu 20 branches, MPLS €5000/luna devine SD-WAN cu broadband + 4G failover la €1200/luna. ROI tipic in 6-9 luni. Plus crestere bandwidth 5-10x la acelasi cost.
Ce livram
Design retea multi-site, deploy 20-100 branch-uri etapizat, training echipa interna, runbook operational, integrare cu FortiAnalyzer pentru logging centralizat, documentatie completa.