We just raised a $30M Series A: Read our story
2020-01-07T06:27:00Z

What needs improvement with Cisco SD-WAN?

32

Please share with the community what you think needs improvement with Cisco SD-WAN.

What are its weaknesses? What would you like to see changed in a future version?

ITCS user
Guest
3131 Answers

author avatar
Top 5User

It is transversal to all industries. What is important is to work on the costs of the solution. On the technical side, manufacturer-independent solutions should be able to handle different topologies, simple or complex, and without having to invest more money in infrastructure or licensing. What I also find should be improved is the possibility of really separating the software layer from the hardware layer since today the current offer is not well adopted by the service providers, which is why it does not reach the end customers. I understand this is an issue that directly affects the business goal of each manufacturer.

2021-09-29T19:16:00Z
author avatar
Top 5Real User

In the next release, Cisco should focus on simplifying the configuration of SD-WAN. SD-WAN has a lot of room to grow. If you compare vEdge and something like Cisco CSR, you'll see the difference. Because vEdge is natively from Viptela, it is a little more complicated to set up an SD-WAN compared with an ISE device like CSR or ISR, or ISR 4000. You have now two different configuration spaces like iOS, and then some commands and styles are Viptela. So this is the thing that Cisco should work on.

2021-09-25T12:43:00Z
author avatar
Top 5LeaderboardReal User

The quality could always continuously improve. For example, we've had stability concerns in the past. Native connectivity into the major cloud providers would be ideal. Often, the solution does require a specialized team to come in and assist with the initial setup. Technical support could be more helpful and responsive.

2021-08-26T22:03:45Z
author avatar
Top 20Real User

Cisco should focus more on making products that are convenient for users. Sadly, I think they are more interested in making money rather than making reliable products. The Cisco way of thinking is to create umbrella-like solutions. I would prefer it if this solution was separate from the entire monstrous Cisco portfolio, without additional marketing and other unnecessary features. Still, so far it has been working well. Plus, the support is great. The only drawback is that it's an expensive solution.

2021-05-27T05:51:33Z
author avatar
Top 20Reseller

There is much room for improvement on the cybersecurity side. For most of the clients, it is unacceptable nowadays to have too many people involved in managing the corporate network, and many clients like to see providers that can deliver a unified solution that integrates together with the network functionalities and the cybersecurity functionalities as they go hand in hand, especially in a regulated industry such as in banking, insurance, or healthcare. All governmental infrastructure must be compliant with very specific guidelines and requirements. It's not always it is possible to meet them with out-of-the-box products. You need to integrate on the top. If Cisco can work more in creating a true SASE solution known simply as an SD-WAN solution, that will be magic. That will be perfect. Right now, they need to do more of the cybersecurity side. Cisco is working at the moment. Unfortunately, like all traditional companies, it is very big and quite spread out. That makes it a little bit slower to react than some of the other competitors in the space. Some competitors are much faster in providing out-of-the-box solutions, more innovative solutions. In terms of innovation, in many cases, they're lagging behind.

2021-05-15T06:02:48Z
author avatar
Top 5MSP

The price could be better. From a technical side, and everything's working smoothly. Cisco SD-WAN could be cheaper.

2021-05-11T17:39:36Z
author avatar
Top 20Real User

For the most part, we don't really see any features that are lacking. The actual configuration could use some work. The solution could add in some more automation elements to help with the process. The solution needs to be more flexible around legacy devices. The security should be improved on the solution. They need to make everything more secure. Scalability could be easier to achieve if a company needs to expand. The product could improve its pricing. They are very expensive.

2021-02-11T14:27:16Z
author avatar
MSP

We've worked with BetterCloud, and found the security to be better than what is offered by Cisco. The user interface is nicer as well. Cisco should look at what they are doing and try to replicate it a bit. When it comes to adding more security features, you need to add more RAM. The pricing could be a bit better. When a customer transfers from a traditional WAN to SD-WAN, the subscription price is one big problem for them. The solution is a bit buggy, which makes it slightly unstable. The provisioning could be easier during deployment. Some vendors say they can handle provisioning, however, it differs from vendor to vendor.

2021-02-10T19:18:20Z
author avatar
Top 20Reseller

One of the major areas that Cisco can improve on with their SD-WAN offering is their security features. When compared with Fortinet, who have what they call their 'security pillars' (e.g. firewall and security features built-in to their SD-WAN solutions), Cisco generally comes up short. With Cisco, if you need a security component, you have to pay more to get it done. So if they could add more security features that come part and parcel with their existing solutions, then I think Cisco could be very aggressive in the market. Essentially, they have to incorporate different security features on top of their SD-WAN box. At the end of the day, I should be able to give one single box to the customer which includes SD-WAN and all the necessary features such as security. When it comes to IoT edges, they could possibly incorporate their SD-WAN features into the LAN side together with Cisco's DNA networking, just as Aruba is doing with their ESP solution. If Cisco could come up with a similar solution to that, then I think they will have the upper hand in the market compared to their competitors' brands. They have to come to a point where they can better integrate WAN and LAN into one single platform. Regarding the data center sites, when we're talking about software-defined networking, Cisco has the SD-WAN segment, software-defined access for the LAN segment, and application-centric infrastructure for their data center segment, and they have to combine all three segments into one platform. Just like how the other guys are doing it. Again, if they can accomplish this, then technically they have a fair share in the market. Otherwise, Cisco could also integrate more features on the cloud side of things, like with SD-WAN in the cloud, or SD-WAN in AWS, some of which I believe they have implemented already. Beyond that, I can't say too much about what I'd like to see when it comes to new features because almost every day I've seen Cisco add more features to their SD-WAN and SD-LAN portfolios. At the rate they're going, it could be only a few months before they add the security features I've mentioned. So from my perspective, I think they're doing okay. Finally, in terms of stability, there could be some improvement. In my experience with our current project, there have been some instances where stability has been an issue. But I can't speak for everyone here; other partners who have completed more projects may disagree and this is only my own observations so far.

2021-02-03T14:04:25Z
author avatar
Real User

The security features could be improved. The solution needs to offer better stability. The product could have improved flexibility.

2021-01-23T10:05:52Z
author avatar
Top 20Real User

An area of improvement for this solution is reducing the complexity. Currently, the solution requires people who have a very good understanding of Cisco SD-WAN. For example, VeloCloud can be used and is easier to understand, but it has limited functionality. It is designed like a block box where the internal architecture is hidden. With Cisco, I can see the inner workings of the architecture. Therefore, it is necessary to have a good understanding of how the solution works in order make full use of it. An additional feature that should be included in the next release of this solution is the ability to use a local area network (LAN) behind the domain name system (DNS) box. This feature would allow for better communication protocols to be put in place.

2021-01-06T17:14:00Z
author avatar
Top 20Real User

The bandwidth limitations would be good to remove, but it is a policy and license situation for Cisco because the cost is very high. It would be good to have OTP implemented with VRF. It can have support for EIGRP Over the Top (OTP) VRF. I saw some limitations in regards to the VRF protocol and the advertisement between VRF configuration. EIGRP Over the Top basically was quite limited with the VRF configuration. If you wanted to do rollback in VRF by using the EIGRP OTP protocol, the formation was not populated across. Cisco got back and confirmed that it is a configuration that I need to wait for until the next release, which is going to happen in one year. Cisco documentation is not the way it used to be before. It just gives an easy way to configure, but it doesn't go into the details of the configuration. The information that you need is there, but sometimes you want to go further and get more information, but the information is quite limited. It would be good to cover a few business cases or configuration cases. They used to be there in the past.

2020-11-16T19:21:59Z
author avatar
Real User

Its license model needs to be improved. They always make the license model too complex. There are too many license models and too many options. They should have a flexible license model. They can improve a lot of things in terms of scalability, templates, and automation, mainly automation for onboarding a number of sites. If you want some new features, it can take quite a long time. If you want a feature and it is not yet developed, you need to have the support of the business units to have the feature developed. If the feature is not on their roadmap, it can take quite some time before you get the feature.

2020-11-03T16:26:33Z
author avatar
Top 20Real User

When you buy the equipment, they should already put it into your cloud account. It should already be set up so that we can manage with vBond. We came across an issue where it wasn't resolved in the DNS. We are using Umbrella, so we need to create a VPN IPSec tunnel to Umbrella to enable the users to browse. I would really like to see an internal built-in firewall so that we don't have to go to Umbrella. This functionality might already be there. We are quite new to this solution, and we are still learning about it.

2020-11-03T10:37:57Z
author avatar
Top 20Real User

They should enhance the reporting because, as it is today, they need more executive-level reports. If in the future they can support Cisco SASE then it would be good.

2020-10-20T04:19:21Z
author avatar
Top 5Real User

The licensing model needs to be improved. Sometimes we feel that the choice of models is very limited, so we would like to see additional devices made available.

2020-10-11T08:58:19Z
author avatar
Top 20Real User

I think that the SD-WAN had everything that my client was interested in in our first experience with it. I think that some of the solutions now are being integrated with other services. As an example, Fortinet has a product called FortiGuard. Included in the FortiGuard product is an SD-WAN. So some of these products are expanding capabilities so that they have more to offer in a single product. That would be a nice thing for Cisco. They could provide you your firewall and your SD-WAN solution together. Some people like that approach of nesting products or bundling because they have fewer vendors to deal with and immediate integration. I am sure as time goes on that the threat landscape will continue to change all the time. What was good encryption five years ago may not be such great encryption today. Because of that, I am sure that you have to constantly be looking at the threat landscape to see if you need to change anything. I do not know if I am close enough to that cutting edge of the problem to answer the question as to what Cisco's solution really needs. All I know is that my client is very happy with what they have got in the way of savings and functionality. That does not mean that there are not some other things that they would like to see. I just do not know what they are. There are a number of large companies that have bought out various SD-WAN vendors. If you looked at VMware, you will find that they also have an SD-WAN that they bought. There are several other companies that have bought SD-WAN services because the technology is so good and the cost benefit is so great that it is worthwhile for almost any company to implement it. They get the advantage of performance and the benefit that these systems never go down. As an example, one time locally there was an incident where two providers, CenturyLink and Level 3, went down at the same time. If you had CenturyLink and Level 3, your connection to the internet would have gone down for six or seven hours or whatever the overlap of those outages was. That would be an extreme case. There is another local ISP service called Cox, if you had CenturyLink and Cox, Cox did not go down. In that case, you would continue using your internet or your connections to your branches without ever experiencing an outage and it would just go through Cox. The reason is that Cox's infrastructure, their central office, their wiring, their co-ax cables, or fiber are completely separate from what CenturyLink uses. CenturyLink has got a completely separate central office and completely separate wire. So the chances of those two entities going down exactly at the same time is something that just never happens.

2020-09-23T06:09:54Z
author avatar
Top 20Real User

Cisco products are a little bit complicated, so making them a little bit easier would be an improvement. The installation is easy but having many components, and the integration with other components, is a little bit complex compared to other products and other vendors.

2020-09-23T06:09:00Z
author avatar
Top 20Real User

I would like them to add some more SD-WAN ports. We have seen one implementation where there were four ISPs. Currently, we have a maximum of two ports for ISP in this device. Therefore, we cannot connect directly, and we need other switches. There should be some option to have more than two ports for SD-WAN.

2020-09-03T07:49:49Z
author avatar
Top 20Real User

The inexpensive Viptela hardware may be replaced with overpriced Cisco routers. This would be a tragic mistake for Cisco as the lightweight commodity platform built by Viptela is the reason to own this solution.

2020-03-24T20:12:00Z
author avatar
Top 5LeaderboardReal User

I would like to see a better, web-based interface to make changes to the configuration or to view statistics. The main weakness of Cisco products is the user interface. This solution would be improved with the inclusion of an ISA Firewall.

2020-03-16T06:56:20Z
author avatar
Top 5LeaderboardReal User

On its own the product does what it's expected to do but if you're looking for more features you'd need to move to a dedicated firewall like the ISA firewall. There's something a little inconvenient and old style about it. The solution could have a better web interface to simplify changing configurations or see some statistics. I think the main weakness of the Cisco product is the user interface, I'd like to see things more clearly.

2020-03-16T06:56:19Z
author avatar
Top 5LeaderboardReal User

We've just started using the solution, so I don't know if there are any features that are missing. We haven't used it long enough to find any faults. The initial setup could be a bit less complex.

2020-03-16T06:56:11Z
author avatar
Top 5Real User

Since most user-data is going through the solution, we are concerned about security, as all the information is in the cloud and not on-premises. The user data authentification should be higher to better prevent malicious attacks.

2020-03-16T06:56:08Z
author avatar
Top 20Real User

The client portal needs to be improved in order to make the solution much better. The service care area of the solution needs improvement. That is to say, the ability to have a simplified management system is a key success factor. If you could have the ability to raise an SD-WAN capability just by activating a kind of license, it would great. We have too much hardware deployment needed right now. In the future, if the solution could make it so that there is nothing to deploy beyond a license and some firmware, it would be great.

2020-03-05T08:39:48Z
author avatar
Real User

The main issue is that not in the technology, but it comes back comparison. When we do a comparison with other SD-WAN solutions, they are priced better. Then on that basis, they conclude to use the other solution.

2020-03-05T08:39:00Z
author avatar
Top 20Real User

The whole solution needs to be re-imagined. It's quite complex right now and really needs to be simplified to make it easier for those of us using it. It should offer more simplified management as well. The solution is expensive. They should adjust their pricing to make it more competitive.

2020-02-23T06:17:04Z
author avatar
Top 5Reseller

This solution has a built-in firewall that handles URL filtering and functionality, but you have to buy other cisco services like, Umbrella. Some of the customers would rather just use Fortinet or Palo Alto. This solution should include a fully functional firewall at no extra charge. At this time it supports layers three, four, and five, but it needs support for a level seven firewall.

2020-02-05T08:05:10Z
author avatar
Top 10MSP

The product is not a cheap solution and could be improved by lowering the cost. Most customers who do not buy Cisco give their primary reason as cost. If the cost was reduced then I think we'd be able to sell more. Vendor log in could also be improved. There are a lot of solutions on the market now that are open solutions, meaning boxless solutions. You don't really need to buy the box that Cisco provides. You can upgrade to SD-WAN using the open solutions. Cisco could provide a full mobile solution but I don't think they'll do that because selling their hardware on top of the software is their bread and butter, . Before SD-WAN came in they provided quite a few features. For example, a lot of customers were using Cisco's router and voice gateway which has not been available since the launch of SD-WAN. They are still working on restoring it. It's one of the key issues with the Cisco SD-WAN solution that would be a good additional feature. Whatever features were supported before are not supported in the SD-WAN solution now. If they could incorporate all those features for customers that would be a big improvement.

2020-02-02T10:42:00Z
author avatar
Top 20Real User

It would be very helpful if we had better access to a knowledge base, or online documentation, to help both us and our customers learn to use this solution.

2020-01-09T06:15:00Z
author avatar
Real User

This solution is expensive so pricing is a concern.

2020-01-07T06:27:00Z
Learn what your peers think about Cisco SD-WAN. Get advice and tips from experienced pros sharing their opinions. Updated: November 2021.
552,136 professionals have used our research since 2012.