We have multiple ISP's connected, usually it's two. Two ISP's per site and we have to make sure that the site-to-site connectivity is managed and is maintained — the redundancy has to be maintained.
The different services that we offer from different offices are available wherever we need them. That's the purpose of going with the Meraki SD-WAN solution versus another company. It's very straightforward. Their full mesh network just works. That's important.
The seamless end-to-end setup is really what makes it beautiful; that's why Meraki is good. It's much easier than some of the other vendors to manage and keep track of what's going on because you can see it in real-time on the portal. I don't really feel like VALO Cloud gives you a good idea of what's going on. VALO Cloud devices don't work nearly as well, in my opinion, as the Meraki devices.
I think they should enhance the security. I feel like the security is decent, but some other people that I work with say there are better options available. Cisco requires you to upgrade the firmware to custom firmware on the devices you want to go beyond Diffie-Hellman five. DH5 is in the lower part of the spectrum. Other devices, even Cisco devices are using DH15 or higher. I think DH24 is the highest that's currently available.
The feature set right now requires a firmware upgrade that's custom to enable that kind of encryption. They should just have it in a dropdown. If they could fix that, I could tell my other colleagues, "Hey, look, Cisco can do it right out of the box." To enable higher-end encryption, higher than Diffie-Hellman five, DH5, requires a custom firmware. If they could make that built into the standard firmware as an option, I would love that.
I think that from Cisco's perspective, they've chosen not to do that simply because it requires more performance.
That's how they keep it because they say, "Oh, look at the performance. It's the same as the other guy." Yeah, but the other guy's using DH15 or DH14 and you're using DH5. The level of encryption means more horsepower required from the processor on the devices so that's why it increases the footprint. The more CPU, the hotter it gets and then it doesn't last as long; the performance is not as good because it's using more resources, etc. Cisco should definitely sell equipment with better processes or better performance for our processes because that would give us a higher level of encryption on our firewalls.
I have been using Meraki SD-WAN for roughly four to five years.
The setup time is excellent. The ease of setup is excellent. It's a set it and forget it solution. Once we created the mesh network, if we have to change an ISP, it doesn't mean we have to change an entire configuration. We just unplug it, plug the new one in, change the IPs and it works. Some SD-WAN providers give you a valid internet IP address as part of their solution, and others don't. A lot of the SD-WAN providers that provide internet access use Meraki devices as a black box. They just hand off one interface to the client-side and that's it.
Overall, on a scale from one to ten, I would give Meraki SD-WAN a rating of eight. If they could do better on the performance side, that really would make a difference.