The branch is where the cost hides
Every site needs the same five functions and nobody on site to run them
A router, a firewall, a VPN concentrator, a wireless controller and a switch — five boxes, five refresh cycles and five vendors, repeated at every location, none of which has an IT person in the building. Leased WAN links keep the quality but not the budget; internet links keep the budget but not the quality.
The economics only work if the branch collapses to one device that can be provisioned centrally — and if security is something already in it, rather than something you buy again per site.
Where to start
Four solutions for estates measured in sites, not users
SD-BranchFive boxes become oneNetworking, security and SD-WAN converged into a single gateway per site, with policy pushed from the cloud instead of configured on arrival.SD-Edge · uCPEVirtualized services on white boxVNF service chains built by drag-and-drop and matched by VLAN or 5-tuple, so each department gets the security profile its risk actually justifies.SecurityOne platform instead of four appliancesFirewall, VPN, application control, intrusion prevention, antivirus and URL filtering consolidated — as an appliance, a VM, or from the cloud.SD-AccessZero trust without a switch refreshIdentity-based segmentation laid over the wired estate you already own, for the headquarters site where the switches are not going anywhere.
Sized for the site, not the catalogue
400 Mbps → 2 GbpsISG200-F security gateways from a desktop unit for a small office to a 1U rack unit for headquarters
100 → 2,000devices per gateway, so the same product family covers a branch and a campus edge
5,400+metadata attributes extracted by the DPI engine for real-time traffic classification
What you would be deploying
Technical reading
- SD-Branch white paper
- SD-Edge white paper — uCPE and service chaining
- SD-Access white paper
Products
- ISG200-F series — firewall and router in one
- ISG700 / ISG200 / ISG200D — SD-WAN gateways
- IAC5005P / IAC5010P — integrated PoE gateways
- IAP6018 / IAP6030 — Wi-Fi 6 access points
- ISW series — PoE access switches
Consolidating a multi-site estate?
Tell us the site count, the mix of sizes and what each branch has to run locally. Evaluation hardware and deployment references are available on request.
Talk to our team