The document outlines a presentation on SD-WAN visibility challenges and solutions by ThousandEyes. It highlights the complexities introduced by SD-WAN, the necessity for in-depth visibility into internet performance, and five key requirements for effective SD-WAN visibility. The session includes an introduction to ThousandEyes' approach, various metrics for monitoring application and network performance, and best practices for ensuring cloud readiness.

1. 1@ThousandEyes
Ian Waters, Director of Solutions Marketing
Tim Hale, Solutions Engineer

2. 2@ThousandEyes
• Welcome & Introduction
• SD-WAN Visibility Challenges
• Modern WAN Visibility
• Demo
• Q&A
Agenda
Tim Hale
Solutions Engineer
thale@thousandeyes.com
@timlhale
Ian Waters
Director of Solutions Marketing
iwaters@thousandeyes.com
@iawaters

3. 3@ThousandEyes
• If you have any questions, please type them in the Questions window.
• If you have any audio problems, please chat us for help.
• A recording of this presentation will be sent to you in a few days.
• Tweet us @thousandeyes
Before We Begin…

4. Locations
Austin, USA
New York, USA
Seattle, USA
Toronto, CA
Tokyo, JP
Sydney, AU
Amsterdam, NL
Dublin, IE
London, UK
Munich, DE
HQ San Francisco
2010 Founded
We empower companies with Internet and
cloud intelligence enabling them to deliver
superior digital experiences.
Global 2000
Companies
130+ 6 of the 7
Top US Banks
20 of the 25
Top SaaS Companies
8 of the 10
Top Global Software
Companies
70+
Fortune 500
Companies
Copyright ©2019 ThousandEyes, Inc. All Rights Reserved. 4@ThousandEyes

5. 5@ThousandEyes
What the Traditional WAN Looks Like
Branch Offices
Enterprise Data Center
hosts all applications
Enterprise WAN (MPLS)

6. 6@ThousandEyes
SD-WAN Introduces Massive New Complexities
Branch Offices
Datacenter
Internet CloudEnterprise SD-WAN

7. 7@ThousandEyes
Operations Processes Change in the Cloud
IT Assets You Don’t Control
Evidence Escalate??
IT Assets You Control
Find Fix

8. 8@ThousandEyes
SD-WAN Solutions Have a Visibility Gap
Type of Visibility
SD-WAN
Visibility?
Latency over VPN tunnels Yes
Latency from branch to SaaS Yes
Latency over MPLS Yes
Where in Internet things are breaking No
Hop by hop metrics of Internet underlay No
Detailed visibility from app down to path
visuals, etc.
No
Internet routing issues No

9. 9@ThousandEyes
End-user
Vantage Points
Browser-based plugins installed on
end-user laptops and desktops.
Apple | Microsoft
ThousandEyes Approach
Globally distributed agents installed
and managed by ThousandEyes in
180+ cities around the world.
Cloud
Vantage Points
ISP | Broadband | Cloud Provider
Enterprise
Vantage Points
Lightweight software-based agents easily
installed on your own network, in data centers,
branch offices and VPCs.
Cisco | Docker | JNPR | Linux | MSFT | VMW

10. 10@ThousandEyes
App Experience
• Transaction scripting, page load
HTTP/DNS/RTP Server
• HTTP Availability, response time,
throughput
Scope and Domain
• Geo, HTTP phase, errors
Network Metrics
• Packet loss, latency, jitter
Path Visualization
• Hop-by-hop; multi-point; bidirectional
• Metrics and data per hop
• Integrated Outage Detection
BGP Monitoring
• Reachability, path changes, updates
Most Correlated Visibility In One View
8
3
93
5
4
6
8
6
Time Correlated

11. 11@ThousandEyes
Five Requirements for SD-WAN Visibility
1. In-depth Internet visibility
– SD-WAN exposes companies to Internet unpredictability
2. Ability to drill into the network underlay
– Per ISP, per node, per link
3. App-aware network visibility for SaaS
– Ability to easily correlate between app performance and network level
4. View of historical data-set
– Benchmark, plan and set KPIs
5. Easy and quick fault isolation
– Internal wide area, ISP, IaaS / SaaS?
1
2
3
4
5

12. 12@ThousandEyes
Implement a Cloud Readiness Lifecycle
Baseline
performance
and define
success KPIs
READY
Improve MTTR by 90% prevent
service desk costs from spiking
OPERATE
Improve cloud,
SaaS and
SD-WAN project
success rates
DEPLOY

13. 13@ThousandEyes
Best Practices for SD-WAN Visibility
Branch
Readiness
Rollout &
Remediation
De-Risking
Operations
Extended
Use-Cases
• Evaluate underlay
• Set success KPIs
• Baseline
performance
• POCs
• Site Evaluation
• ISP Selection
• Identify deployment
and provider issues
• Optimize
configuration
• Dashboards for ROI
• Before/After Metrics
• Set SLAs for key
SaaS and DC Apps
• Identify internet
underlay issues
• Verify routing policy
implementation
• Verify performance
• Visual feedback
• Cloud Proxy and
SWG for branch DIA
• DC to Cloud Direct
Connect (Azure
Express, AWS Direct
VPC, etc.)
• Legacy WAN (MPLS)
baseline/comparison
velocloudREADINESS ROLLOUT OPERATIONS

14. Demo

15. 15@ThousandEyes
Overlay – Network Performance
• Data Center to Branches, Throughput, Bi-Directional
• Complete overlay network performance and visibility.
• One test for all branch to DC circuits. DC to Branch
tests optional.
SD-WAN overlay clearly
visible in Path Viz, with
IPSEC/GRE tunnel and
vEdge devices.
Overlay tunnel latency, loss,
throughput, jitter
Agent to Agent
SD-WAN tunnel
Data
Center
Branch

16. 16@ThousandEyes
Overlay – On-Prem Application
• Branch Agents to Data Center Application via
SD-WAN overlay tunnel
• Page Load – http://netdata.sdwandemo.com
• Monitor DX of branch locations targeting on-
prem data center applications.
• Correlate Page Load, Response Time, etc.
with overlay tunnel latency, jitter, loss, and
other network issues.
Page Load
SD-WAN tunnel
Data
Center
Branch

17. 17@ThousandEyes
Underlay – Network Performance
• Branch Agents to Data Center vEdge
• Target vEdge/cEdge for each broadband provider.
Requires separate test for each provider interface to
test.
• Public IPs configured in vManage policy to allow DIA
path.
Agent to Server
Data
Center
Branch
SD-WAN tunnel
Underlay
WAN Interface
DI
A

18. 18@ThousandEyes
Data Center to Cloud IaaS
• Data Center Agent targets multiple Cloud Agents in each public
cloud provider.
• Reverse path (Target to Source) allows monitoring traffic via DIA.
Cisco vEdge with DIA to
access Cloud instance.
Agent to Agent
Data
Center
DIA Internet
Application Traffic

19. 19@ThousandEyes
Branch to SaaS DIA
• Branch Agent targets SaaS application via DIA policy.
One test per application (O365, Salesforce, ServiceNow)
• Page load, HTTP server, and full path visibility to identify
and resolve SaaS branch DX issues.
Page Load
Branch
DIA
Internet
Application Traffic

20. 20@ThousandEyes
Branch ISP Health
• Branch Agent targets multiple Cloud Agents. Reverse
path (Target to Source) allows monitoring traffic via
DIA.
• Get external visibility into all branch broadband/ISP
interfaces in one test.
• No need to target WAN interface with ICMP test.
Agent to Agent
Branch
SD-WAN tunnel
Underlay
DIA

21. Q&A

22. 22@ThousandEyes
• 15 Day Free Trial – Get visibility into your DNS, BGP Routes,
CDNs, ISPs, VoIP Network in five minutes.
• Or go to our website and book a demo us now through the live
chat on the lower left corner!
Try it Free Today or Book A Demo

23. L I V E R E V E A L O F T H E 2 0 1 9 C L O U D P E R F O R M A N C E
B E N C H M A R K :
AWS, AZURE, GCP AND ALIBABA CLOUD COMPARED
NOVEMBER 13th • 11AM–12PM CST
ThousandEyes.com/cloud-state-live
Copyright ©2019 ThousandEyes, Inc. All Rights Reserved. 23@ThousandEyes