This document provides an overview of Citrix NetScaler SD-WAN. It describes how NetScaler SD-WAN creates a software-defined WAN that is secure, reliable and ensures high application quality by enabling direct access to cloud, integrating multiple network services, and being application aware. Key use cases for NetScaler SD-WAN include always-on branch connectivity, cost savings through the use of broadband links, cloud migration, and improved visibility and control over applications. Case studies are presented showing how NetScaler SD-WAN provided organizations with increased bandwidth, cost savings, and more reliable connectivity.

1. NetScaler SD-WAN
Solution Overview
Luis Crespo
LoL Sales Engineer
NOVEMBER 9, 2017

2. 7 © 2017 Citrix
“Network connectivity is the
lifeblood of our business to
deliver on our member
service.”
US Based Credit Union

3. 8 © 2017 Citrix
MPLS
Oficina
Principal
Sucursal 1
Internet
Sucursal 2
Traditional WAN

4. 9 © 2017 Citrix
Creates a software defined wide area network and cloud
access network that is secure, reliable and ensures high
application quality.
Citrix NetScaler SD-WAN

5. 10 © 2017 Citrix
What defines an SD-WAN built with NetScaler?
An enabler for corporate strategy
Highly
reliable
With
abundant
bandwidth
And
providing
direct
access to
cloud
It is
application
aware
Secure
Easy to manage
Integrating
multiple
network
services

6. 11 © 2017 Citrix
NetScaler SD-WAN Use Cases
• Always-on branch connectivity
• Growth of bandwidth intensive applications
• Cost savings
• Cloud migration
• Data segmentation and security compliance
• Internet offload directly from branch
• Visibility and control over applications and websites
• Operational efficiency and network simplification
• Improve quality and gain visibility into XenApp and
XenDesktop

7. 12 © 2017 Citrix
NetScaler SD-WAN Use Cases
• Always-on branch connectivity
• Growth of bandwidth intensive applications
• Cost savings
• Cloud migration
• Data segmentation and security compliance
• Internet offload directly from branch
• Visibility and control over applications and websites
• Operational efficiency and network simplification

8. 13 © 2017 Citrix
Even MPLS often lacks the
reliability that enterprises
need
And cloud connection using
Broadband have even lower
reliability
Reliability is a challenge with any type of connection
Access
Type
Typical
Availability
Downtime
Per Month
Per Circuit
Consumer-grade DSL 98% 15 Hours
Business DSL 99.0% 7 Hours
Metro Ethernet 99.5% 4 Hours
MPLS Leased Line 99.9% 1 Hour
Source: Gartner (July 2013)

9. 14 © 2017 Citrix
Creates a software defined overlay
MPLS
Internet
LTE/Satellite
NetScaler SD-WAN NetScaler SD-WAN
Logical tunnel created by encapsulating in UDP
VIRTUAL PATH CREATED
FROM DIVERSE LINKS

10. 15 © 2017 Citrix
With an understanding of the underlay
MPLS
Internet
LTE/Satellite
NetScaler SD-WAN NetScaler SD-WAN
Logical tunnel created by encapsulating in UDP
latency loss jitter cong.
latency loss jitter cong.
latency loss jitter cong.
latency loss jitter cong.
latency loss jitter cong.
latency loss jitter cong.

11. 16 © 2017 Citrix
Detects and fails over without user intervention
MPLS
Internet
LTE/Satellite
NetScaler SD-WAN NetScaler SD-WAN
Logical tunnel created by encapsulating in UDP
DETECT PROBLEMS QUICKLY

12. 17 © 2017 Citrix
Detects and fails over without user intervention
MPLS
Internet
LTE/Satellite
NetScaler SD-WAN NetScaler SD-WAN
Logical tunnel created by encapsulating in UDP
AND REACT WITH LOSSLESS FAILOVER
BANDWIDTH
CONTROL

13. 18 © 2017 Citrix
The Danish Agrifish Agency vessels had separate 4G/LTE
connections from different mobile providers, but coverage was
not consistent and applications would disconnect or perform
poorly when the links become degraded or failed.
Why they selected NetScaler SD-WAN
• Solution enabled applications to seamlessly migrate among
mobile connections without disruption or sacrificing security
• When one link failed, applications immediately were moved
to remaining best link
• QoS capabilities ensured that mission critical data was
prioritized over other applications.
Results
• Uninterrupted connectivity
• Centralized management GUI
• Improved throughput
Denmark’s Fish and Agriculture Regulatory Agency
“Our ships have a
better chance of
planning from a
professional
perspective instead of
constantly having to
plan based on a
technical limitation.”
https://youtu.be/0xooZ7BVflU

14. 19 © 2017 Citrix
NetScaler SD-WAN Use Cases
• Always-on branch connectivity
• Growth of bandwidth intensive applications
• Cost savings
• Cloud migration
• Data segmentation and security compliance
• Internet offload directly from branch
• Visibility and control over applications and websites
• Operational efficiency and network simplification

15. 20 © 2017 Citrix
Make all links active
MPLS EF Queue
Internet
LTE/Satellite
NetScaler SD-WAN NetScaler SD-WAN
Logical tunnel created by encapsulating in UDPBANDWIDTH
CONTROL
With SD-WAN in network, use
all the bandwidth available,
whether MPLS or Internet
Understand rated or usage based links
and use only when necessary

16. 21 © 2017 Citrix
SD-WAN: make all links active
MPLS EF Queue
Internet
LTE/Satelliate
NetScaler SD-WAN NetScaler SD-WAN
Logical tunnel created by encapsulating in UDPBOND MULTIPLE LINKS
Even use multiple links for a single
session

17. 22 © 2017 Citrix
The result in more usable and efficient bandwidth use
Total BW

18. 23 © 2017 Citrix
Rehab Management needed more bandwidth for XenApp and
XenDesktop and training videos than was available on MPLS
Why they selected NetScaler SD-WAN
• NetScaler SD-WAN solution would allow them to replace their
MPLS connections with just their existing Internet (ADSL)
access giving them 10x the bandwidth at a lower cost
Results
• By making all links active, achieved the bandwidth they
needed for XenApp and Training videos
• Reduced costs from $500/month/location to
$100/month/location by switching to ADSL lines
• Using multiple links also improved reliability
Rehab Management
Increased
bandwidth
10X while
eliminating
MPLS

19. 24 © 2017 Citrix
NetScaler SD-WAN Use Cases
• Always-on branch connectivity
• Growth of bandwidth intensive applications
• Cost savings
• Cloud migration
• Data segmentation and security compliance
• Internet offload directly from branch
• Visibility and control over applications and websites
• Operational efficiency and network simplification

20. 25 © 2017 Citrix
The WAN is the Most
Expensive Part of the
Enterprise Network
6%
21%
65%
7%
0% 10% 20% 30% 40% 50% 60% 70%
Campus/User Edge
Data Center
WAN
Network Security
Which Portion of Your Network Is Most
Expensive?
Challenges with Today’s Enterprise WAN
Gartner Data Center Conference Dec 2015: Top 10 Ways to
reduce Network/Telecom Budget presentation
Source: Gartner (July 2013)
Access
Type
Typical
Availability
Downtime
Per Month
Per Circuit
Consumer-grade DSL 98% 15 Hours
Business DSL 99.0% 7 Hours
Metro Ethernet 99.5% 4 Hours
MPLS Leased Line 99.9% 1 Hour

21. 26 © 2017 Citrix
Enable hybrid, Broadband and Wireless WANs
MPLS
Internet
LTE/Satellite
NetScaler SD-WAN NetScaler SD-WAN
Logical tunnel created by encapsulating in UDP
MAKE BEST EFFORT NETWORKS SUITABLE FOR ENTERPRISE USE

22. 27 © 2017 Citrix
Orianna needed a new electronic medical record (EMR) but
increasing bandwidth would cost an additional $500/site/month
Why they selected NetScaler SD-WAN
• Bonded a broadband link with existing MPLS circuit
• Avoided $300K/yr. increase of network capacity upgrades
with NetScaler SD-WAN by bonding MPLS & broadband links
for better use of existing bandwidth
Results
• Received ten month payback on the purchase versus scaling
existing MPLS connections
• Were able to rollout EMR immediately instead of waiting 90-
120 days for MPLS upgrades
• Instant failover at remote sites achieved better application
reliability and QoS on VoIP
Orianna Health Systems
10 months
payout on the
purchase of
NetScaler
SD-WAN

23. 28 © 2017 Citrix
NetScaler SD-WAN Use Cases
• Always-on branch connectivity
• Growth of bandwidth intensive applications
• Cost savings
• Cloud migration
• Data segmentation and security compliance
• Internet offload directly from branch
• Visibility and control over applications and websites
• Operational efficiency and network simplification

24. 29 © 2017 Citrix
• Enter AWS or Azure credentials
• And with one click, virtual cloud appliance is
started and cloud added to WAN
• Use ZTD provision and download the config
• The new VPX automatically connects into
MCN and the rest of the network
Simple startup and inclusion of cloud in network

25. 30 © 2017 Citrix
Create reliable cloud connections from branch or DC
3© 2016 Citrix |
Confidential
NetScaler SD-WAN
Internet
Internet/Wireless
NetScaler SD-WAN
in Cloud
NetScaler SD-WAN
on premises
Actively manage cloud traffic to
ensure reliable and quality
experience for Azure and AWS
hosted applications
NetScaler SD-WAN
MPLS
Internet/Wireless
NetScaler SD-WAN

26. 31 © 2017 Citrix
NetScaler SD-WAN Use Cases
• Always-on branch connectivity
• Growth of bandwidth intensive applications
• Cost savings
• Cloud migration
• Data segmentation and security compliance
• Internet offload directly from branch
• Visibility and control over applications and websites
• Operational efficiency and network simplification

27. 32 © 2017 Citrix
Includes an integrated stateful firewall
• Comprehensive Firewall security: IP to
Application layer
– Secure hosts, ports and infrastructure
– Support for Dynamic and Static NAT
– Enable firewall rules even for encrypted traffic with
Application intelligence
• Define zones to enforce different policies
for different users
• Single Point of Management across Network
– Provision, troubleshoot and analyze Routing and
Security through SD-WAN center
ALLOW
REJECT
COUNT &
LOG
DROP

28. 34 © 2017 Citrix
NetScaler SD-WAN Use Cases
• Always-on branch connectivity
• Growth of bandwidth intensive applications
• Cost savings
• Cloud migration
• Data segmentation and security compliance
• Internet offload directly from branch
• Visibility and control over applications and websites
• Operational efficiency and network simplification

29. 35 © 2017 Citrix
Direct Internet breakout at branch
Internet
Internet
LTE/Satellite
NetScaler SD-WAN NetScaler SD-WAN
Secure Web Gateway
(Zscaler and
ForcePoint)
IDENTIFY WEB AND SAAS APPLICATIONS
SEND REMAINING INTERNET TRAFFIC TO
INTERNET OR TO SECURE WEB GATEWAY
BLOCK UNDESIRABLE SITES BY CATEGORY,
APPLICATION, OR SUB -APPLICATION

30. 36 © 2017 Citrix
NetScaler SD-WAN
Product Overview

31. 37 © 2017 Citrix
NetScaler SD-WAN: A Comprehensive WAN Edge Platform
Centralized
Management &
Visibility

32. 38 © 2017 Citrix
Ensure application
reliability and quality via
path measurement,
selection, and security
Reduce bandwidth
requirements and create
more responsive
applications
Securely forward application
traffic from branch locations
across the WAN and to the
Internet
Secure the branch perimeter
while controlling application
delivery across the WAN and
to the Internet
NetScaler SD-WAN: A Comprehensive WAN Edge Platform
Centralized
Management &
Visibility

33. 39 © 2017 Citrix
Ensure application
reliability and quality via
path measurement,
selection, and security
Reduce bandwidth
requirements and create
more responsive
applications
Securely forward application
traffic from branch locations
across the WAN and to the
Internet
Secure the branch perimeter
while controlling application
delivery across the WAN and
to the Internet
NetScaler SD-WAN: A Comprehensive WAN Edge Platform
Centralized
Management &
Visibility

34. 40 © 2017 Citrix
Ensure application
reliability and quality via
path measurement,
selection, and security
Reduce bandwidth
requirements and create
more responsive
applications
Securely forward application
traffic from branch locations
across the WAN and to the
Internet
Secure the branch perimeter
while controlling application
delivery across the WAN and
to the Internet
NetScaler SD-WAN: A Comprehensive WAN Edge Platform
Centralized
Management &
Visibility

35. 41 © 2017 Citrix
Ensure application
reliability and quality via
path measurement,
selection, and security
Reduce bandwidth
requirements and create
more responsive
applications
Securely forward application
traffic from branch locations
across the WAN and to the
Internet
Secure the branch perimeter
while controlling application
delivery across the WAN and
to the Internet
NetScaler SD-WAN: A Comprehensive WAN Edge Platform
Centralized
Management &
Visibility

36. 42 © 2017 Citrix
Ensure application
reliability and quality via
path measurement,
selection, and security
Reduce bandwidth
requirements and create
more responsive
applications
Securely forward application
traffic from branch locations
across the WAN and to the
Internet
Secure the branch perimeter
while controlling application
delivery across the WAN and
to the Internet
NetScaler SD-WAN: A Comprehensive WAN Edge Platform
Centralized
Management &
Visibility

37. 43 © 2017 Citrix
Ensure application
reliability and quality via
path measurement,
selection, and security
Reduce bandwidth
requirements and create
more responsive
applications
Securely forward application
traffic from branch locations
across the WAN and to the
Internet
Secure the branch perimeter
while controlling application
delivery across the WAN and
to the Internet
NetScaler SD-WAN: A Comprehensive WAN Edge Platform
Centralized
Management &
Visibility

38. 44 © 2017 Citrix
Ensure application
reliability and quality via
path measurement,
selection, and security
Securely forward application
traffic from branch locations
across the WAN and to the
Internet
Secure the branch perimeter
while controlling application
delivery across the WAN and
to the Internet
NetScaler SD-WAN: Standard Edition
Centralized
Management &
Visibility
Standard Edition

39. 45 © 2017 Citrix
Reduce bandwidth
requirements and create
more responsive
applications
NetScaler SD-WAN: WANOP Edition
Centralized
Management &
Visibility
WANOP Edition

40. 46 © 2017 Citrix
Ensure application
reliability and quality via
path measurement,
selection, and security
Reduce bandwidth
requirements and create
more responsive
applications
Securely forward application
traffic from branch locations
across the WAN and to the
Internet
Secure the branch perimeter
while controlling application
delivery across the WAN and
to the Internet
NetScaler SD-WAN: Enterprise Edition
Centralized
Management &
Visibility
Enterprise Edition

41. 47 © 2017 Citrix
NetScaler SD-WAN
DEMO

42. 48 © 2017 Citrix
NetScaler SD-WAN: Demo Topology
SDWAN 2SDWAN 1
XP2XP 1
DataCenter Sucursal
Internet
MPLS
https://www.youtube.com/watch?v=Ts4b3JJACKI

43. 49 © 2017 Citrix
Questions?

44. 50 © 2017 Citrix