SDWAN@nettrain
SDWAN@nettrain
SDWAN@nettrain
FIGURE 1
Please see the Appendix for detailed methodology, market definition, and scoring criteria.
T.me/nettrain
IN THIS EXCERPT
The content for this excerpt was taken directly from IDC MarketScape: Worldwide SD-WAN
Infrastructure 2023 Vendor Assessment (Doc # US50471623). All or parts of the following sections are
included in this excerpt: IDC Opinion, IDC MarketScape Vendor Inclusion Criteria, Essential Guidance,
Vendor Summary Profile, Appendix and Learn More. Also included is Figure 1.
IDC OPINION
This IDC study represents a vendor assessment model called the IDC MarketScape, which is a
quantitative and qualitative research assessment of vendors' present and future offerings, for the
software-defined wide area network (SD-WAN) infrastructure market. This study assesses the
capability and business strategy of 12 SD-WAN infrastructure vendors. The evaluation is based on a
comprehensive framework and a set of parameters expected to be most conducive to success in
providing SD-WAN infrastructure solutions.
The SD-WAN infrastructure market is highly competitive and undergoing important strategic shifts. Key
findings include:
▪ SD-WAN remains an important network infrastructure technology for enterprises due to its
ability to improve user and application experiences, provide integrated connectivity and
security, and enable seamless connectivity to the cloud and hosted applications, all while
optimizing costs.
▪ Key components of SD-WAN infrastructure include a centralized policy controller, automatic
management of hybrid wired and wireless WAN connections, dynamic path selection of
application traffic, and optional programmability, security, and analytics of wide area network
(WAN) traffic.
▪ For organizations, SD-WAN enables myriad benefits including, but not limited to, improving
reliability by augmenting existing WAN connectivity with redundant failover across dual links,
setting application traffic steering via automated software management tools and ensuring that
sensitive traffic is prioritized over noncritical traffic, and the ability to provide more direct
connections between users and devices and the distributed applications they're accessing.
▪ In 2022, the SD-WAN infrastructure market grew 25.0%. IDC estimates that through 2027, the
market will grow at a compound annual growth rate of 10.1% to reach $7.5 billion.
▪ The need for intelligent, adaptable, and pervasive connectivity has become a mandatory
requirement for businesses to operate and for people, processes, and things to connect with
one another. IDC's Future of Connectedness research shows the strategic importance of a
wireless-led and cloud-enabled connectivity strategy that removes network and IT silos,
automates critical business processes, empowers employees to become more productive, and
ensures a continuous digital experience for employees, customers, and partners.
This research includes the analysis of 12 SD-WAN infrastructure vendors spanning IDC's research
coverage. This assessment is designed to evaluate the characteristics of each firm across a set of
criteria broken into two major buckets: current and future capabilities of the SD-WAN infrastructure and
current and future strategy of the SD-WAN infrastructure offering.
T.me/nettrain
IDC used a variety of primary research methods to produce this document including interviews with
vendors and customers, a detailed questionnaire all vendors completed, and detailed product briefings
from each vendor. This evaluation should not be considered a final judgment of firms to consider for a
project, however. An enterprise's specific objectives and requirements will play a significant role in
determining which firms should be considered as potential candidates for an engagement.
SD-WAN infrastructure is a compelling technology for any organization looking to improve WAN
reliability and cost, optimize network performance, and enhance user experiences for applications
accessed via the WAN. IDC's 2022 Global SD-WAN Survey of existing and prospective SD-WAN
users asked respondents how much savings they expect to derive from deploying SD-WAN. The
median response rate was 15.0%, but almost one-third of respondents (31.8%) said they expect to
save more than 20% on WAN costs from deploying SD-WAN.
Another survey question asked what respondents believe are the most important features of a modern,
enterprise-grade SD-WAN platform. Figure 2 shows the responses, with the top answers being
integrated security, ability to provide robust network and application performance assurance, and
integrated machine learning/artificial intelligence (ML/AI)-enhanced SD-WAN management
capabilities.
All SD-WAN products featured in this IDC MarketScape have a core set of features. These include
WAN routing, management of multiple WAN links (e.g., broadband, MPLS, and 4G/LTE), dynamic
WAN path selection, application-based policy controls, and application steering and prioritization.
Beyond these features, most SD-WAN offers on the market today include additional features such as
direct connections to public clouds (IaaS and SaaS), WAN link visibility and analytics, end-user
experience monitoring, zero-touch provisioning, integrated security, and cellular routing options.
Other factors SD-WAN buyers should consider are discussed in the sections that follow.
T.me/nettrain
FIGURE 2
n = 1,044
Base = respondents currently use or plan to use SD-WAN technology solutions in the next two years
SD-WAN + Security
One of the most significant developments in the market in recent years has been the advancement of
integrated security functionality in SD-WAN products. Security is an important part of any networking
investment, but there are multiple dimensions to the trend of more integrated management of SD-WAN
and security. One aspect concerns the natively integrated security capabilities offered by SD-WAN
vendors. Common security features in SD-WAN products include intrusion detection and prevention
(IDS/IPS), next-generation firewall (NGFW), and content/web/URL filtering.
T.me/nettrain
A second aspect of this trend is toward secure access service edge (SASE) architectures, which
combine SD-WAN with cloud-based network edge security as a service (NESaaS) tools, such as a
secure web gateway (SWG), cloud access security broker (CASB), and zero trust network access
(ZTNA). SD-WAN customers can work with their existing SD-WAN vendor to consume NESaaS and
build a SASE architecture or use a multivendor approach.
It's important for SD-WAN buyers to consider what security capabilities they value from an SD-WAN
today and into the future. As SD-WANs control connectivity from the enterprise edge across the wide
area network, it's beneficial to have on-premises or cloud-based security integrated with the SD-WAN.
But IDC research shows there is a significant portion of SD-WAN buyers that continue to evaluate SD-
WAN infrastructure for the networking-specific capabilities of the SD-WAN. This research focuses on
the networking strategy and capabilities of SD-WAN vendors, while also taking into account integrated
and partner-led security approaches of SD-WAN vendors.
Customers have a choice for the SD-WAN management platform being hosted on premises or from
the cloud. Most SD-WAN vendors offer a cloud-hosted management plane, but some offer on-
premises management too. Enterprises may also consider existing relationships they have with SD-
WAN vendors across other product areas and what sorts of licensing discounts they may be able to
receive as part of a longer-term subscription package.
Another consideration is what type of partner would organizations like to purchase SD-WAN
infrastructure from. Some SD-WAN vendors have value-added resellers (VARs), others rely on
communication service providers (SPs) that bundle WAN connectivity (e.g., MPLS, broadband, or
cellular) with an SD-WAN service. Many managed service providers bundle and integrate the requisite
underlays (transports) with an SD-WAN overlay.
T.me/nettrain
Visibility and Analytics
Other factors enterprises should consider are what sort of visibility and analytics platforms they require
from their SD-WAN vendor. Some vendors have robust platforms that monitor not just WAN link
health, but application and user experiences too; others offer visibility platforms that extend into the
local area network. Increasingly, visibility and analytics platforms feed data into AI/ML-enhanced SD-
WAN management platforms, which can recommend ways to optimize user and application
experiences or automatically fix problems that arise.
The aforementioned criteria are among the considerations enterprises should research when
purchasing SD-WAN infrastructure, but some features and functions will be more important than others
for individual customers. Organizations should always think about what business need they have and
then consider what solution will best meet those needs.
This section briefly explains IDC's key observations resulting in a vendor's position in the IDC
MarketScape. While every vendor is evaluated against each of the criteria outlined in the Appendix,
the description here provides a summary of each vendor's strengths and challenges.
Cisco
Cisco is positioned in the Leaders category in the 2023 IDC MarketScape for worldwide SD-WAN
infrastructure.
Cisco is a multinational communications company headquartered in San Jose, California, with a broad
product portfolio across networking, security, collaboration, computing, application performance, and
more. Cisco SD-WAN is composed of two products: Cisco Catalyst SD-WAN and Cisco Meraki SD-
WAN. Cisco Catalyst SD-WAN is based on technology from the company's 2017 acquisition of Viptela,
one of the initial start-ups in the SD-WAN market. Cisco Catalyst SD-WAN is offered via both cloud
and on-premises management versions. Cisco Meraki SD-WAN is a simplified, cloud-managed
platform that includes zero-touch provisioning and an intuitive web interface.
Architectural principles of Cisco SD-WAN include creating secure, end-to-end virtual overlay networks
that are flexible and scalable; centralized management and orchestration of globally distributed SD-
WAN deployments; integrated visibility, analytics, and AIOps; multicloud optimizations; and a focus on
security, including integrated security capabilities and hosted security tools, as well as integrations with
third-party security tools.
Notable features of the Cisco SD-WAN portfolio include advanced multicloud access capabilities,
including software-defined interconnect and cloud backbone; application experience optimization,
including for Microsoft 365 and Webex; security innovations, including embedded security tools such
as Umbrella and Duo; and integrations with the recently enhanced Cisco Security Cloud. The company
also offers Cisco+ Secure Connect for a managed SASE offering. Other areas of recent innovation
have been in AIOps, including advanced visibility and analytics capabilities — for example, in the
Predictive Path Recommendations (PPR) feature. Cisco SD-WAN has deep integrations with the
ThousandEyes visibility and analytics platform. Cisco SD-WAN also has an industrial IoT routing
extension for extending enterprise policies to the industrial edge. The company supports hybrid work
experiences via a compact form factor offering that optimizes secure connectivity.
T.me/nettrain
Cisco's approach to SD-WAN and security is multifaceted: The company offers a range of integrated
security capabilities with its SD-WAN, including embedded SSL decryption, and an enterprise firewall,
intrusion prevention, and URL filtering. It also offers integrations with Cisco Umbrella to provide
services such as DNS layer security, secure web gateway, cloud access security broker, and a cloud-
delivered firewall. Cisco SD-WAN leverages the Talos Threat Intelligence platform. In addition to
native security capabilities, the company also integrates its SD-WAN with third-party security tools,
including those from Zscaler, Cloudflare, Netskope, and Palo Alto Networks.
Strengths
▪ Cisco has a strong heritage in enterprise routing and enterprise networking in general, which
the company has leveraged to build a prominent market share position in SD-WAN
infrastructure. Cisco continues to build on-ramps for existing routing customers using the ISR
and Catalyst 8000 routing platforms to upgrade to SD-WAN.
▪ Cisco has two SD-WAN offerings in the market: Cisco Catalyst SD-WAN and Cisco Meraki
SD-WAN. Each is aimed at a different customer profile: Cisco Catalyst SD-WAN is a more full-
featured and programmable SD-WAN offering, while the Cisco Meraki SD-WAN focuses on
simplicity of deployment and operations. Combined, the Cisco SD-WAN offering provides a
comprehensive SD-WAN solution in the market that meets a wide range of customer use
cases and requirements.
▪ Cisco has a strong go-to-market channel with a large network of resellers, managed service
providers, and value-added resellers, along with partnerships with leading communication
service providers.
▪ Cisco also has a strong and diversified supply chain, which the company leveraged during the
COVID-19-induced component shortage crisis.
▪ Cisco has prominent market share positions in important adjacent enterprise networking
domains, including wireless local area networking and datacenter and non-datacenter
Ethernet switching; the company also has integrations of its SD-WAN with its Webex
collaboration and IoT portfolios.
▪ Cisco SD-WAN has strong visibility and analytics capabilities via the ThousandEyes platform,
which is licensed separately from SD-WAN.
Challenges
▪ While Cisco's dual SD-WAN products in the Catalyst and Meraki portfolio are a strength for
meeting a range of customer types, having two offerings causes some confusion in the market
and for customers about which platform is best for which use case.
▪ Cisco has evolved its security strategy with the introduction and continued development of the
Cisco Security Cloud. The company also has strong integrations with Cisco Umbrella and Duo,
along with the Talos Threat Intelligence platform and third-party security platforms. But the
company has an opportunity to further simplify its SD-WAN and security portfolios into more
streamlined product offerings.
▪ In May 2023, Cisco SD-WAN experienced a certificate expiration issue that caused some
Cisco Catalyst SD-WAN customers — specifically certain legacy Viptela and vEdge and cEdge
customers — to experience downtime. Cisco quickly and effectively responded to the issue.
▪ Cisco has an opportunity to further build integrations across its WAN and LAN portfolios,
including across its SD-WAN portfolio and its popular Catalyst switches, WLAN equipment,
and DNA Center software.
T.me/nettrain
▪ Cisco Catalyst SD-WAN is often considered a "premium" option and may not be ideal for
price-conscious SD-WAN buyers; for more price-conscious buyers or those in the midmarket
and below, Cisco Meraki SD-WAN may be a better option.
Consider Cisco When
Cisco has about 48,000 SD-WAN customers across a range of customer sizes and verticals. Top
verticals for Cisco SD-WAN include retail, manufacturing, professional services, financial services, and
government. Cisco Catalyst SD-WAN is ideal for customers looking for a full-featured and
programmable SD-WAN offering, while Cisco Meraki SD-WAN is ideal for customers that prioritize
simplicity in deployment and ongoing management.
Vendors to Watch
A growing number of vendors continue to enter and compete in the SD-WAN market, making for a
dynamic mix. The three companies discussed in the sections that follow did not meet our criteria for full
inclusion in the IDC MarketScape for worldwide SD-WAN infrastructure, but IDC believes these
vendors are important SD-WAN infrastructure vendors in the market today and will continue to be in
the future.
Ericsson/Cradlepoint
Ericsson is a multinational Swedish vendor that in 2020 purchased Cradlepoint, which has a range of
infrastructure and software for LTE and 5G cellular networks across the wireless WAN edge, including
SD-WAN.
Cradlepoint's NetCloud Exchange (NCX) SD-WAN is designed to be used with LTE or 5G cellular
connections. NCX SD-WAN optimizes traffic across dual modems and hybrid WANs and supports the
ability to traffic steer applications into 5G standalone (SA) network slices. NCX has advanced
functionality related to cellular network performance and analysis, which is used to steer SD-WAN
traffic with cellular-specific attributes. NCX SD-WAN is managed by NetCloud Manager, which
provides full life-cycle management for the Cradlepoint SD-WAN, including zero-touch deployment,
creation of secure networks, and at-a-glance analytics and troubleshooting.
Extreme Networks
Extreme Networks has a portfolio for enterprise campus, branch, datacenter, and edge technologies,
including wired and wireless LAN and SD-WAN along with an AI-enhanced cloud-managed platform.
In September 2021, Extreme Networks acquired the SD-WAN business from Infovista named
Ipanema, which is now the company's ExtremeCloud SD-WAN.
ExtremeCloud SD-WAN provides application visibility and control, allowing users to define end-user
quality of experiences for applications on the WAN. It dynamically controls each user session across
multiple underlying network transports, allowing customers to tie business objectives to WAN routing
policies. It includes native WAN optimization, encrypted IPsec VPNs, cloud-native orchestration, and
integrations with cloud providers and secure web gateway providers. ExtremeCloud SD-WAN
integrates with the ExtremeCloud IQ and Extreme's Network Fabric for cloud-based and unified
management of campus branch, datacenter, and edge/IoT enterprise resources.
T.me/nettrain
Netskope
Netskope was founded in 2012 and provides a set of cloud-delivered network security and data
protection solutions in the network edge security as a service)/Security Service Edge (SSE) market. In
2022, Netskope acquired Infiot, which is now the company's Borderless SD-WAN solution.
The Netskope Borderless SD-WAN includes cloud, on-premises, and end-user components available
in three form factors: hardware, virtual appliance, or unified endpoint client. The combination provides
secure and optimized access, regardless of location, ensuring a smooth experience for users in the
office, at home, or on the road. Netskope offers a single-vendor SASE solution with consistent context-
aware policy for remote users and branch offices. The SASE solution includes integration of Netskope
Intelligent SSE and Borderless SD-WAN and is powered by Netskope NewEdge. The company also
offers integrations between its NESaaS platform and a range of third-party SD-WAN solutions.
APPENDIX
Positioning on the y-axis reflects the vendor's current capabilities and menu of services and how well
aligned the vendor is to customer needs. The capabilities category focuses on the capabilities of the
company and product today. Under this category, IDC analysts look at how well a vendor is
building/delivering capabilities that enable it to execute its chosen strategy in the market.
Positioning on the x-axis, or strategies axis, indicates how well the vendor's future strategy aligns with
what customers will require in three to five years. The strategies category focuses on high-level
decisions and underlying assumptions about offerings, customer segments, and business and go-to-
market plans for the next three to five years.
The size of the individual vendor markers in the IDC MarketScape represents the market share of each
individual vendor within the specific market segment being assessed.
Market Definition
IDC's definition for software-defined wide area network (SD-WAN) infrastructure encompasses the
hardware and software infrastructure products offered commercially by vendors.
T.me/nettrain
SD-WAN provides automated management of hybrid WANs, defined as at least two WAN connections
from each branch office leveraging two or more underlying transport networks (e.g., MPLS, broadband
internet, 4G/LTE/5G).
SD-WAN includes a centralized, application-based policy controller; a software overlay that abstracts
underlying networks; analytics and/or telemetry for application and network visibility; and an optional
SD-WAN forwarder (routing capability). Together, these provide an intelligent path selection across
WAN links, based on the application policies defined on the controller.
▪ SD-WAN controller for centralized implementation of application policy, intelligent WAN path
selection, and network visibility/analytics
▪ SD-WAN edge routing software or hardware infrastructure
▪ Traditional routers and WAN optimization products (hardware/software) — only when they are
integrated into and deployed as an "in use" component of the SD-WAN solution
As such, the SD-WAN infrastructure addressed in this IDC MarketScape excludes the following:
▪ All standalone routers that are not encompassed by "in use" SD-WAN deployments
▪ Security products that are part of a network edge security as a service, Secure Services Edge
(SSE), or secure access services edge (SASE) deployment
▪ SD-WAN managed services (i.e., setup, operations, and support)
LEARN MORE
Related Research
▪ Worldwide SD-WAN Infrastructure Market Shares, 2022: Growth Continues, Driven by Cloud
and Security (IDC #US50604223, May 2023)
▪ SD-WAN and Security Convergence: Are Enterprises Looking for SD-WAN Integrations with
Existing Security Tools or Best-of-Breed Security Solutions? (IDC #US50528623, March 2023)
▪ Five Key Enterprise Networking Trends Driving Connectedness Strategy in 2023 (IDC
#US50412923, March 2023)
▪ Worldwide Multicloud Networking Forecast, 2023–2027 (IDC #US50470923, March 2023)
▪ Global Cloud Networks: Cloud WANs as Digital Infrastructure (IDC #US50438623, March
2023)
▪ Worldwide vCPE/uCPE Forecast, 2023–2026 (IDC #US47851822, February 2023)
▪ Top Features of a Modern, Enterprise-Grade SD-WAN: Integrated Security, Network/App
Performance and Assurance, and ML/AI-Enhanced Automation (IDC #US50049523, January
2023)
▪ Worldwide SD-WAN Infrastructure Forecast, 2022–2026 (IDC #US48793922, June 2022)
T.me/nettrain
Synopsis
This IDC study provides a detailed analysis of 12 vendors in the worldwide SD-WAN infrastructure
market, along with profiles of three vendors to watch. This research followed the IDC MarketScape
research process, which includes in-depth interviews with each of the vendors profiled in the
document, along with customer interviews.
"SD-WAN remains one of the most important markets in enterprise networking, driven by a variety of
factors. Organizations around the globe continue to invest in SD-WAN to optimize their edge network
connectivity, enhance user and application experiences, enable increased operational efficiency, and
save money," says Brandon Butler, research manager, Enterprise Networks, IDC. "This IDC
MarketScape for worldwide SD-WAN infrastructure provides a detailed analysis of vendors in the SD-
WAN market leveraging the proven IDC MarketScape research process. The research is meant to aid
buyers in their selection of SD-WAN infrastructure vendors and provide IDC's view of the competitive
landscape in this dynamic market."
T.me/nettrain
About IDC
International Data Corporation (IDC) is the premier global provider of market intelligence, advisory
services, and events for the information technology, telecommunications and consumer technology
markets. IDC helps IT professionals, business executives, and the investment community make fact-
based decisions on technology purchases and business strategy. More than 1,100 IDC analysts
provide global, regional, and local expertise on technology and industry opportunities and trends in
over 110 countries worldwide. For 50 years, IDC has provided strategic insights to help our clients
achieve their key business objectives. IDC is a subsidiary of IDG, the world's leading technology
media, research, and events company.
Global Headquarters
This IDC research document was published as part of an IDC continuous intelligence service, providing written
research, analyst interactions, telebriefings, and conferences. Visit www.idc.com to learn more about IDC
subscription and consulting services. To view a list of IDC offices worldwide, visit www.idc.com/offices. Please
contact the IDC Hotline at 800.343.4952, ext. 7988 (or +1.508.988.7988) or [email protected] for information on
applying the price of this document toward the purchase of an IDC service or for information on additional copies
or web rights. IDC and IDC MarketScape are trademarks of International Data Group, Inc.
Copyright 2023 IDC. Reproduction is forbidden unless authorized. All rights reserved.
T.me/nettrain