Expereo SD WAN & SASE Cybersecurity Solutions

Expereo SD WAN and SASE Solution: Comparisons, Review, Benefits, Use Cases, Pros & Cons

Author: Netify Research Team

If you have questions about Expereo and how their capability is aligned to your needs, email the Netify research team. UK: uk@netify.co.uk North America: northamerica@netify.com

(Please use the UK email for ROW - Rest of the World - questions or inquiries)

Netify Review

Expereo is recommended for small or large enterprises internationally that require SD WAN coverage for multiple or individual locations. This offering is advisable for clients that want cloud optimization solutions, SD WAN and Global Internet through the use of a minimal number of providers. This single provider solution helps reduce the corporate footprint whilst also simplifying the support and IT procurement process. Ideal customers are those who wish to make the transition to an SD WAN backed network from an existing MPLS network and who require redundancy or diversity options. On the 22nd July 2021 Expereo acquired Brodynt, a provider of global managed Internet services, which supports Expereo’s existing services and provides a strong, well rounded, single vendor product portfolio. With a SASE offering featuring CASB (Cloud Access Security Broker), threat intelligence, secure web gateways and DNS (Domain Name System) security and SD WAN supported by global vendors such as Cisco and VMware, Expereo’s service has options to suit most managed service needs.

About Expereo

Expereo is a global provider of SD WAN, managed internet, hybrid networks and cloud connectivity solutions. The company was founded in 2004 and its headquarters is in Amsterdam, Netherlands. Currently they operate active sites in over 194 countries and 10 global offices in Europe, UK, North America, Latin America, and Asia. Expereo partners with 30% of companies that make up the Fortune 500. They support 30 Cloud Accelerated Global Hubs (PoPs) across six continents and offer over 3000 supplier partners worldwide. In 2022 Expereo acquired Breeze Networks, a UK based SD-WAN and security managed service provider, this move will allow expereo to complement its managed network services portfolio and grow its prescnece within the UK market.

What is the Expereo SD WAN Solution?

Expereo offer SD WAN solutions based on strong partnerships with three main vendors. Connectivity is supported by their extensive global IP backbone, which supports DIA and broadband underlay services and leverages 30 PoPs worldwide. 

• VMware: Expereo SD WAN based on VMware is a good choice for those looking for strong cloud capabilities, due to its cloud-first approach. The solution is designed to deliver efficient connectivity to SaaS and cloud-based applications. Expereo are a certified VMware partner. (For more information on VMware and their products, please click here).
• Cisco Meraki: Expereo’s Meraki offering is recommended for clients with smaller IT teams, due to simplified security, application-control and networking management. However, the offering does cater for multi-site deployments. Expereo are certified Cisco Powered and a certified Cisco Partner. (For more information on Cisco Meraki and their products, please click here).
• Cisco Viptela: Cisco Viptela SD WAN provided by Expereo is suitable for clients with large complex network requirements. It includes advanced segmentation, routing and security capabilities. Expereo are certified Cisco Powered and a certified Cisco Partner. (For more information on Cisco Viptela and their products, please click here).

What is the Expereo SASE security solution?

Expereo offer their clients SASE, which combines security and network functions into one cloud-platform, delivered as-a-service. The solution is based on Cato Networks and Zscaler. 

SASE Features: 

• Secure Web Gateway (SWG): All data packets are saved and analyzed whilst suspicious addresses are denied access to prevent malware attacks, with proxies available in the cloud. IPsec tunnels and PAC (Proxy Auto-Configuration) files are also available for further threat prevention and authorized devices, users, data and applications are permitted to interact.
• Interactive Threat Intelligence: Interactive threat intelligence is designed to block the following: untrusted URLs, suspicious domains, as well as a superset of botnet mischief, virus types and phishing actors.
• DNS-Layer Security: DNS-layer security is designed to identify where Internet infrastructures such as domains are staged within the network, and blocks requests from any other port or protocol. This prevents malware infiltration and exfiltration attempts.
• Cloud Access Security Broker (CASB): CASB stores all new applications and analyzes them to identify any security threats. This service can either be fixed to a device on-premises, or deployed in the cloud.
• Cloud-Delivered Firewall: Designed to block security risks at the IP layer by deploying a firewall in the cloud, whilst monitoring all protocols and parts.

How does Expereo access cloud vendors?

Expereo have access to cloud providers such as AWS, Azure, Oracle Cloud, SAP and IBM Cloud, through their partnerships with SD WAN vendors VMware, Cisco Meraki and Cisco Viptela. They provide connectivity to the cloud with Layer-2 Cloud Connect, a product that allows data to travel through the most direct route possible to cloud providers, passing through as few nodes as possible to create speeds similar to an on-premises based solution. Clients are also offered multiple bandwidth size options, which can be tailored to business needs with no limit on the minimum bandwidth size, ensuring that clients do not overpay. 

Cloud Acceleration is offered, with path selection capabilities, selecting the most efficient path for internet traffic in real-time. This means that all applications remain optimized regardless of which service provider is chosen to be accessed, and lowers average packet loss and latency to increase application performance. Both Cloud Connect and Cloud Acceleration are deployed from an Expereo hub, which makes implementing Cloud Acceleration simpler if Cloud Connect is already in use.

Does Expereo offer WAN acceleration and optimization?

SD WAN optimization and acceleration is available as a combined service called SD WAN Performance Optimization, which includes Expereo Cloud Acceleration (see, How does Expereo access cloud vendors?), Expereo Managed Services (see, What is the Expereo managed, co-managed and DIY services solution?) and Expereo Fixed Internet. 

Fixed Internet leverages Expereo’s global IP backbone with local provider partnerships worldwide to provide clients with the most suitable underlay options, supported by expertise from Expereo staff. The global IP backbone can support DIA and broadband with intelligent routing for optimal path selection from the Expereo Cloud Acceleration Hub. Clients will also be regularly updated on network performance by managed services staff and be given recommendations by Customer Success Managers.

Expereo Hosted SD WAN Gateways delivers SD WAN optimisation by aggregating regional traffic and providing a cloud on-ramp. Expereo SD WAN Gateways leverages network infrastructures such as Global IP Core, Enhanced Internet and Cloud Connect. 

The Global IP Core enables global reach between cloud op-ramps, data centres and hub sites. Enhanced Internet is ideally suited for online content and SaaS applications by providing the highest-performing route. In contrast, Cloud Connect allows for direct interconnect to IaaS platforms and cloud service providers.

How does Expereo support remote users?

Expereo supports remote users using mobile Internet. Their solution is Mobile Broadband for Business. This uses 4G enabled routers and ready-to-use data SIM cards from mobile operators as an alternative to fixed line Internet. Mobile Broadband for Business can be used as primary, underlay or as failover. This solution reduces data loss, latency and jitter to optimize application performance and adds redundancy to SD WAN networks. Expereo’s mobile internet has 24/7 availability with services in over 150 countries. Expereo leverage multiple mobile operators per country in order to provision a tailored solution dependent on geographical requirements as well as short deployment times suited to temporary remote locations. In remote locations that may require signal enhancement, antennas and other accessories can be added to the solution. Expereo’s Mobile Broadband for Business features: 4G connectivity with 5G coming soon, support for VPN and Generic Routing Encapsulation (GRE), optional static public IP addressing, dual modem/ dual SIM options, 4x LAN Ethernet ports with Wi-Fi options and cloud-based management & reporting.

What is the Expereo managed, co-managed and DIY services solution?

Expereo’s solution is a fully managed service from end-to-end. The solution overlays their managed global internet connectivity. The Expereo fully managed solution includes:

• Full SD WAN network design, including underlay.
• Source and deliver SD WAN Customer Premises Equipment (CPE) to the site.
• Install and initial configuration of SD WAN CPE.
• Migration/integration of site into network. 
• CPE incident resolution (RMA).
• SD WAN network issue management and resolution. 
• Network configuration and Traffic Policies. 
• Ongoing support, design and performance reviews for CSI (Channel State Information).
• On premise and cloud-based SD WAN security services. 

Expereo do not offer a DIY or Co-managed solution as an option.

What Reporting and Management is available via the Expereo Portal?

Expereo.one is Expereo’s single, centralized platform that provides an overview of Internet and SD WAN services as well as the ability to manage both the underlay and overlay. Expereo.one provides real time network estate inventory and performance insights. Customers are capable of using the portal to integrate Expereo services with their applications and software using Application Planning Interfaces (APIs). Expereo.one offers insights into the performance of Internet network and applications. This service also allows customers to control their global Internet services through management features. Together, these provide customers with visibility into their global network, allowing for better decision making and for IT staff to attend to business critical tasks.

What is the Expereo SLA?

Expereo’s SD WAN offering does not have an SLA, since replacing MPLS with fixed Internet cannot provide guarantees against latency and packet loss. An SLA may instead be provided by an SD WAN vendor partner. Expereo do offer Service Assurance which includes regular reports on up-time, performance, service delivery and capacity planning.