The Rise Of SD-WAN And Its Implications For Security & Performance

In this digitally enabled hybrid and remote working world, it’s hard to recall the days when fixed Wide Area Networks (WAN) universally delivered our everyday enterprise network user experience by solidly moving data over a single, private network fixed grade connection. 

Back in the early 2010’s when online collaboration tools, video conferencing and VOIP were in their infancy, some forward-thinking vendors including Viptela (now part of Cisco)  and SilverPeak (Aruba/HP) started pioneering a Software-Defined Wide Area Networking (SD-WAN) as an alternate decentralised approach for networking that would allow for intelligent routing of traffic over multiple connections.

This approach - they promised - would optimise network traffic more efficiently for digital work enablement and respond far quicker to changing business needs such as adding more users/workspaces on the fly.

It would also reverse the backhauling of network traffic back through corporate HQs. Momentum and adoption was quick to follow and by 2015, Cisco, VMware, Fortinet, Palo Alto, Aruba and Citrix had all added SD-WAN cloud networking solutions. Users were able to significantly modernise their network performance and improve connectivity to apps and cloud services by enabling intelligent routing of traffic over multiple cloud connections.

Rapid growth of SD-WAN is still occurring with IDC continuing to project rapid annual growth of over 30%. Market analysts anticipate a global market projection of $13.7 billion by 2026. There are now millions of SD-WAN installations globally, enticed by its flexible design which supports optimised direct access to cloud-first strategies. Enterprises have found it essential for connecting branch locations and remote offices with SaaS applications and AWS and Microsoft Azure public clouds. Network Managers note some of the organisational key benefits as:-

1.    Enhanced Performance: With intelligent traffic routing and dynamic path selection over multiple protocols and technologies, SD-WAN elects for the most efficient paths based on real-time conditions. This brings optimal performance for applications prioritising high-bandwidth and low latency paths. SD-WAN also self-prioritises different types of applications depending on criticality to the business, ultimately delivering a premium user experience. 

2.    Fast Deployment and Cloud Integration:  Connecting new sites to a SD-WAN network is a comparative breeze given centralised management, zero touch provisioning and optimised access into cloud-based apps.

3.    Greater Resilience:  With automatic rerouting in the event of network failovers and multiple connection support (including MPLS, & broadband) SD-WAN can improve network reliability. 

4.    Greater Management:  SD-WAN offers a single view of managing the entire network.  It splits functions into two – managing the control plane and the data plane. With this holistic management comes finer controls, easier analytics on network performance and traffic; and when provisioned correctly from the outset, enhanced security.

5.    Lower costs:   In using WANs, organisations relied on expensive MPLS circuits to offer secure and reliable WAN connections. SD-WAN enables use of public internet connections like broadband or LTE, reducing connectivity costs. Often too, network devices like firewalls and VPNs can be combined into a single platform, reducing costs and IT required resources. 

The Security Challenge of SD-WAN – Security needs seamless integration and consideration into every phase of deployment:

But while this decentralised and joined approach offered by SD-WAN allows for greater agility and a better UX delivered from a dynamic core, it also broadens the possible number of ‘attack surfaces’ with the introduction of multiple entry points into the network. The dynamic nature of SD-WAN with multiple connection paths and constantly changing traffic patterns, needs a vigilant ‘monitor, manage, detect and respond’ security approach. All entry points need flexible and comprehensive security strategies to reduce vulnerabilities to cyber-attacks, cyber breaches and lack of compliance to digital security best practices.

Vulnerabilities are even greater still as SD-WAN often routes traffic over public internet connections which are inherently less secure.

It’s therefore essential that deployment of SD-WAN should go hand in hand with increased cyber surveillance; tracking and tools such as stronger encryption; vigilant monitoring; increased training of users and sophisticated firewalls.  Ideally integrating these increased security measures and monitoring should be planned in detail at the very beginning of the SD-WAN implementation, with security layered from the ground up. 

Enterprises with branches, remote offices and mobile users have embraced SD-WAN as new facilities can be extended and revoked with ease. However, without necessarily having dedicated IT onsite at these facilities, enterprises’ need to necessitate the same protection levels, monitoring, and consistent security policies across all locations. 

To achieve this integrated approach of the entire estate, some organisations have adopted a Unified Security Framework that combines and underlines the roles of firewalls, VPNs, cyber solutions, monitoring and external intrusion prevention with a formulated and integrated approach, often co-advised by a trusted networking partner. Adherence to a security framework has never been more important as the EU (and most developed countries) revise and release mandatory adherence to the NIS2 Directive in October 2024 to strengthen cybersecurity in critical and important infrastructure sectors – (and for their supply chain).

With the correct tools and continuous monitoring services, SD-WAN can be part of this NIS2 compliancy, enhancing visibility and control to mitigate risk, by ensuring regular updates, strong encryption and secure management across the organisation.

Some advanced network monitoring platforms now use machine learning to find anomalies and dynamically respond to cyber threats before they can impact SD-WAN infrastructures. 

John Diamond is Solutions Architect with Park Place Technologies

Image:  Sakorn Sukkasemsakorn

You Might Also Read: 

Many Cyber Security Experts Don’t Understand The Systems They Are Trying To Secure:


If you like this website and use the comprehensive 7,000-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 

« Standards: The Key To Building A Sustainable Quantum-Safe Future 
Iranian State-Sponsored Hackers Attacking Israel »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

Perimeter 81 / How to Select the Right ZTNA Solution

Perimeter 81 / How to Select the Right ZTNA Solution

Gartner insights into How to Select the Right ZTNA offering. Download this FREE report for a limited time only.

IoTium

IoTium

Secure Cloud Managed Software Defined IoT Networks. IoTium simplifies establishing and managing secure network infrastructure for Industrial IoT.

Ambersail

Ambersail

Ambersail provide Penetration Testing and Cyber Security Compliance services.

Critifence

Critifence

Critifence provides unique Cyber Security solutions designed for Critical Infrastructure, SCADA and Industrial Control Systems.

Medigate

Medigate

Medigate is a dedicated medical device security platform protecting all of the connected medical devices on health care provider networks.

infySEC

infySEC

InfySEC is an information security services organization offering Security Technology services, Security Consulting, Security Training, Research & Development.

ResponSight

ResponSight

ResponSight is a data science company focusing specifically on the challenge of measuring risk and identifying changes in enterprise/corporate networks using behavioural analytics.

ARCON

ARCON

ARCON offers a proprietary unified governance framework, which addresses risk across various technology platforms.

Epiphany Systems

Epiphany Systems

Epiphany enhances your defensive security controls by providing you with an offensive perspective. We expose the most likely attack paths to your most critical IT assets and users.

Curity

Curity

The Curity Identity Server brings identity and API security together, enabling highly scalable and secure user access to digital services.

Cornami

Cornami

Cornami delivers real-time computing on encrypted data sets, which is vital for data privacy and cloud security.

Schillings

Schillings

Shillings defends your rights to privacy, reuptation and security. We fight passionately against breaches of your privacy, attacks on your reputation and threats to your security.

PROVINTELL Cyber Security

PROVINTELL Cyber Security

PROVINTELL is a Managed Security Service Provider (MSSP) specialising in Next-Gen Cyber Defense and Response to detect and respond to threats.

Covenant Technologies

Covenant Technologies

Make Covenant Technologies the only choice for your IT and cybersecurity recruitment needs. We deliver quality candidates at the forefront of the cybersecurity and IT industry.

Cybervergent

Cybervergent

Cybervergent (formerly Infoprive) are a leading cybersecurity technology company in Africa. We provide cybersecurity guidance and solutions that help protect your business.

Fescaro

Fescaro

FESCARO is a trusted cybersecurity partner for global automakers and their partners, helping them transition to software-defined vehicles (SDVs) with tailored automotive software solutions.

Seven AI

Seven AI

Seven AI develops cyber security software designed to identify online threats.