Expereo SD-WAN Netify Review

What is the Expereo SD-WAN Solution?

Expereo offer SD-WAN solutions based on strong partnerships with three main vendors. Connectivity is supported by their extensive global IP backbone, which supports DIA and broadband underlay services and leverages 30 PoPs worldwide. 

• VMware: Expereo SD WAN based on VMware is a good choice for those looking for strong cloud capabilities, due to its cloud-first approach. The solution is designed to deliver efficient connectivity to SaaS and cloud-based applications. Expereo are a certified VMware partner. (For more information on VMware and their products, please click here).
• Cisco Meraki: Expereo’s Meraki offering is recommended for clients with smaller IT teams, due to simplified security, application-control and networking management. However, the offering does cater for multi-site deployments. Expereo are certified Cisco Powered and a certified Cisco Partner. (For more information on Cisco Meraki and their products, please click here).
• Cisco Viptela: Cisco Viptela SD WAN provided by Expereo is suitable for clients with large complex network requirements. It includes advanced segmentation, routing and security capabilities. Expereo are certified Cisco Powered and a certified Cisco Partner. (For more information on Cisco Viptela and their products, please click here).

What is the Expereo SASE security solution?

Expereo offer their clients SASE, which combines security and network functions into one cloud-platform, delivered as-a-service. The solution is based on Cato Networks and Zscaler. 

SASE Features: 

• Secure Web Gateway (SWG): All data packets are saved and analyzed whilst suspicious addresses are denied access to prevent malware attacks, with proxies available in the cloud. IPsec tunnels and PAC (Proxy Auto-Configuration) files are also available for further threat prevention and authorized devices, users, data and applications are permitted to interact.
• Interactive Threat Intelligence: Interactive threat intelligence is designed to block the following: untrusted URLs, suspicious domains, as well as a superset of botnet mischief, virus types and phishing actors.
• DNS-Layer Security: DNS-layer security is designed to identify where Internet infrastructures such as domains are staged within the network, and blocks requests from any other port or protocol. This prevents malware infiltration and exfiltration attempts.
• Cloud Access Security Broker (CASB): CASB stores all new applications and analyzes them to identify any security threats. This service can either be fixed to a device on-premises, or deployed in the cloud.
• Cloud-Delivered Firewall: Designed to block security risks at the IP layer by deploying a firewall in the cloud, whilst monitoring all protocols and parts.

How does Expereo access cloud vendors?

Expereo have access to cloud providers such as AWS, Azure, Oracle Cloud, SAP and IBM Cloud, through their partnerships with SD WAN vendors VMware, Cisco Meraki and Cisco Viptela. They provide connectivity to the cloud with Layer-2 Cloud Connect, a product that allows data to travel through the most direct route possible to cloud providers, passing through as few nodes as possible to create speeds similar to an on-premises based solution. Clients are also offered multiple bandwidth size options, which can be tailored to business needs with no limit on the minimum bandwidth size, ensuring that clients do not overpay. 

Cloud Acceleration is offered, with path selection capabilities, selecting the most efficient path for internet traffic in real-time. This means that all applications remain optimized regardless of which service provider is chosen to be accessed, and lowers average packet loss and latency to increase application performance. Both Cloud Connect and Cloud Acceleration are deployed from an Expereo hub, which makes implementing Cloud Acceleration simpler if Cloud Connect is already in use.

How does Expereo support remote users?

Expereo supports remote users using mobile Internet. Their solution is Mobile Broadband for Business. This uses 4G enabled routers and ready-to-use data SIM cards from mobile operators as an alternative to fixed line Internet. Mobile Broadband for Business can be used as primary, underlay or as failover. This solution reduces data loss, latency and jitter to optimize application performance and adds redundancy to SD WAN networks. Expereo’s mobile internet has 24/7 availability with services in over 150 countries. Expereo leverage multiple mobile operators per country in order to provision a tailored solution dependent on geographical requirements as well as short deployment times suited to temporary remote locations. In remote locations that may require signal enhancement, antennas and other accessories can be added to the solution. Expereo’s Mobile Broadband for Business features: 4G connectivity with 5G coming soon, support for VPN and Generic Routing Encapsulation (GRE), optional static public IP addressing, dual modem/ dual SIM options, 4x LAN Ethernet ports with Wi-Fi options and cloud-based management & reporting.

What is the Expereo managed, co-managed and DIY services solution?

Expereo’s solution is a fully managed service from end-to-end. The solution overlays their managed global internet connectivity. The Expereo fully managed solution includes:

• Full SD WAN network design, including underlay.
• Source and deliver SD WAN Customer Premises Equipment (CPE) to the site.
• Install and initial configuration of SD WAN CPE.
• Migration/integration of site into network. 
• CPE incident resolution (RMA).
• SD WAN network issue management and resolution. 
• Network configuration and Traffic Policies. 
• Ongoing support, design and performance reviews for CSI (Channel State Information).
• On premise and cloud-based SD WAN security services. 

Expereo do not offer a DIY or Co-managed solution as an option.

What Reporting and Management is available via the Expereo Portal?

Expereo.one is Expereo’s single, centralized platform that provides an overview of Internet and SD WAN services as well as the ability to manage both the underlay and overlay. Expereo.one provides real time network estate inventory and performance insights. Customers are capable of using the portal to integrate Expereo services with their applications and software using Application Planning Interfaces (APIs). Expereo.one offers insights into the performance of Internet network and applications. This service also allows customers to control their global Internet services through management features. Together, these provide customers with visibility into their global network, allowing for better decision making and for IT staff to attend to business critical tasks.

What is the Expereo SLA?

Expereo’s SD WAN offering does not have an SLA, since replacing MPLS with fixed Internet cannot provide guarantees against latency and packet loss. An SLA may instead be provided by an SD WAN vendor partner. Expereo do offer Service Assurance which includes regular reports on up-time, performance, service delivery and capacity planning.