VMware VeloCloud SD-WAN Reviews

We use VMware SD-WAN to connect our network globally.

The most valuable features of VMware SD-WAN are the overall capabilities and ease of use.

VMware SD-WAN could improve if the hardware could integrate the interface using ICP. Additionally, if VMware SD-WAN is used with SSE providers that use tunnels there are some issues prioritizing traffic because it cannot decrypt.

I have been using VMware SD-WAN for approximately four years.

The solution is stable with the physical connectivity.

There are occasional issues with certain devices depending on the current firmware, causing them to reboot with a different configuration. Although this does not affect the operation of the devices, it is a known issue that exists in the background.

I rate the stability of VMware SD-WAN an eight out of ten.

The solution is scalable.

The solution is used daily and is an intricate part of our business.

We have approximately 3,000 users using the solution.

I rate the scalability of VMware SD-WAN a nine out of ten.

We use a third party for support.

I have not used a similar solution prior to VMware SD-WAN.

The installation is relatively easy. We only need to plug it in and it works. However, sometimes there needs some configuration but it is not difficult.

I rate the initial setup of VMware SD-WAN a seven out of ten.

There are firmware updates that require maintenance. One person can complete the task.

I rate VMware SD-WAN a seven out of ten.

We have had some issues with firmware, it is not as flexible as I would like it to be with the configuration. We have not had any critical outages and overall it has been working well.

We use VMware to install some servers and virtual appliances.

It can be deployed on cloud and on-premises.

We have a team of five engineers.

Only one of our customers uses this solution. They're a medium-size enterprise.

It can be used for load balancing and load sharing. It's easy to use and customizable.

The dashboards could be improved.

I have used this solution for one year.

I would rate the stability as 10 out of 10.

It's scalable. I would rate the scalability as eight out of ten.

I would rate technical support as eight out of ten. I haven't faced any challenges.

Deployment took two hours.

I would rate this solution as eight out of ten. I would recommend it.

Our main use cases have been for customers who have been traditionally using MPLS lines and are now moving into a lot more SaaS-based applications to transform the WAN infrastructure. A lot of our customers have end-of-life, end-of-support devices on the WAN and they are always looking for doing RFPs on cutting edge technology. Some of them happen to use a lot of VMware and Cisco portfolios in their data centers and they are constantly trying to see what solution fits best for them.

VMware has been chosen by many of our customers who do not want to do a lot of complex routing in their environment and want a very easy-to-use solution. The most valuable features are simple troubleshooting, Dynamic Multipath Optimization (DMPO), and cybersecurity. 

DMPO is a technology that is similar to a proprietary technology that VMware has. Customers probably do not understand too much about it in detail but they know about the benefits of it in general. What it does is constantly monitors all different areas, such as latency, jitter bandwidth, artificial intelligence, and machine learning. It makes sure that if there is a case where there is a networking jitter contained in the link, it figures out how to maneuver your traffic elsewhere. This is all done automatically without customers getting slowed down on those poor links. The customers do not want to spend too much time researching these complex technologies which VMware automatically takes care of them. It benefits many IT teams by taking a lot of the burden away who are constantly juggling a hundred different other things as well.

The cybersecurity component is very important. VMware also has a lot of security components embedded into the SD-WAN, especially with the traditionally SD-WAN, and now a lot more integration through secure access with partnerships companies, such as Zscaler and other SaaS-based solutions. VMware has a lot of portfolios within themselves that can support many security use cases and if they cannot they have partnerships with industry leaders who can. For example, the Zero Trust Network Access (ZTNA) solutions through the Zscaler partnerships can help customers who want to move from traditional VPN solutions towards ZTNA based ones.

Overall as an experience, I have found that customers like the UI/UX experience that they receive from VMware.

There are customers that have very large routing and segmentation operations who do a lot of segmentation within their network and have complex routing requirements. VMware does not provide the facilities in terms of doing a lot of operations with routing tables, such as complex routing policies. It is more about that out-of-pocket experience that customers get out of VMware. There are other technologies for this type of use case from solutions, such as Versa or other WANs. These are for customers who are wanting to maneuver or configure things themselves, similar to DIY solutions, for them going to technologies, for instance from Versa, makes much more sense because they can do a lot more with routing, complex segmentation, and complex configurations. For customers who have complex service provider requirements, VMware and other solutions cannot support a lot of those use cases.

In an upcoming release, they should allow customers the flexibility to use mobile applications where they can go and check on the information about their networks. A lot of vendors, such as Meraki, have a lot more integration with the use of portals to a mobile application. Having this feature as an alternative to logging into a laptop would be beneficial. If you are a SaaS-based company why not make a mobile application as well. You might not be able to do configurations but at least monitor while away or on vacation.

I have been using this solution for approximately four years.

The software itself is very stable which our customers really like. They do not want to have buggy software or problems. I see the customers choose VMware over others and over time because of positive experiences with use cases, it becomes a trusted vendor and they tend to trust in the name as a brand in the future.

IT vendors are getting much more stable with the code, but nowadays everybody has more attention towards SaaS technology. Networking will just become another bundle to a lot of those providing this type of solution. Many vendors are getting into SaaS solutions and in terms of documentation, code releases, and features, there are probably more advancements. In SD-WAN specifically, a lot more features are moving into SaaS-based solutions. These new solutions are going to get reviewed and push the industries even further towards SaaS solutions it is the future.

The technical support is good.

The solution is straightforward to install compared to other solutions, VMware makes setup simple. SD-WAN vendors have a kind of simplicity embedded into them, just because of the nature of the software-defined components into it. 

I have evaluated Zscaler and Versa.

The advice to others wanting to implement this solution is not to try and do everything yourself. A lot of customers choose this route and are negatively affected two years later. It is important to do a lot of proof of concepts and testing. Get the solution from a trusted service provider who can manage it for you because these technologies are really complex under the code. Having a trusted service provider who can work with you and can have a lot of benefits. If your company business is not running the WAN links, I would suggest just offload that burden to a trusted service provider because then you can focus on your business. Technologies are complex, and doing all of these operations through your own IP node is complex. A trusted service provider who knows what they are doing can offload a lot of that burden allowing for you to relax and actually focus on your main applications and business.

A lot of customers I have seen in the industry try to do all the operations themselves just because they think that it is good to insource everything. This is one of the areas that you should not be insourceed a hundred percent of your team because these technologies can be extremely difficult to do on a day-to-day basis. Service providers handle hundreds of customers and they know a lot more about what you are doing and can be very useful than if you did it by yourself.

I rate VMware SD-WAN an eight out of ten.

I work for a supply chain and we have a site where we want to offload the internet traffic and get to the application, etc. Some of the cloud applications go out directly and automatically through the SD-WAN device to the internet, so it is local and does not go to the MPLS. We can load balance those applications.

Their QOE, or Quality Of Experience, is the most valuable feature. Basically, VeloCloud measures the latency and the chatter and everything on a voice application, and it just routes the traffic or duplicates the packets according to that chatter. 

They have a lot of built-ins. There are so many applications defined inside the solution. It makes it so that we don't have to create some policies. Each and every application is already defined in it.

The solution doesn't offer failover between their own devices. If I want to, I should be able to put the two devices together, so there can be a failover. 

They need to come out with a new device, such as a 510 LTE which would have LTE capabilities.

On the 610 devices, they're saying they're going to have LTE in it. They don't have it. They don't even have a POE feature inside the VeloCloud devices. Therefore, if I want to set up a POE, just the one device with everything in it, I actually don't have a POE support on it.

I've been using the solution for about six months now.

Stability-wise the solution is quite good. It's reliable. It doesn't crash or freeze. It's not buggy at all.

The scalability is giving us problems at the moment. We want to put this as, for example, a primary MPLS, with internet secondary, and cellular tertiary. The LTE device doesn't even failover between them, however. Therefore, there is no scalability there.

We don't deal with technical support, due to the fact that we have AT&T. Since we deal with AT&T, we don't deal with them directly. Therefore, I can't speak to their level of knowledge or responsiveness.

Our company is actually many companies. At another subsidiary, they are doing a POC with Cisco. Cisco is providing them with better pricing. On top of that, they have good availability and failover capabilities on LTE. The Cisco router can do the secondary subnet on the same VLAN, which VeloCloud cannot do.

They have a lot of features we technically need to have but don't on VeloCloud.

The initial setup isn't too complex. It's pretty straightforward.

In terms of the deployment, we designed everything properly, and due to the fact that we took the time to design it correctly, it didn't take a long time. Strategy-wise, we have AT&T as our provider. That said, we have set up a reference architecture in such a way that it just copies every site, according to our site size and the requirements.

If you compare VeloCloud to, for example, Cisco, the pricing is almost the same. However, Cisco offers more features that are integral to the way we need the solution to operate. In that sense, it's better value for money. For example, now we need to have an extra LTE modem outside of VeloCloud, and it's going to add to the cost, which ultimately makes it more expensive.

We're just customers. We don't have a business relationship with the company.

We are not using the newest version of the solution. They already have a newer version, however, we have everything outsourced to AT&T, and they have not upgraded the new version on it yet. The version we have on the VeloCloud is 3.4.3, and the newest version, which, from my understanding, is four, and is already out there.

The greatest advice I have for potential new users is this: when you do deploy the VeloCloud, it's pretty straightforward. However, the only thing you have to remember is to make sure that you have the site requirements in terms of the primary and secondary circuits. For us, the last mile circuit is always a requirement, so we have a tertiary as a cellular. That way, even if the primary and secondary go down, you are okay. Also, you need to make sure to size your VeloCloud equipment or VeloCloud model according to the size of your needs.

Overall, on a scale from one to ten, I'd rate the solution at a nine.

The biggest benefit to SD-WAN is with VoIP. Any real-time data transfer where you cannot have any latency and packet delivery.

What VeloCloud provides is a solution that maintains data integrity. 

The biggest challenge for voice over IP telephone systems, are real-time and also video, and any kind of video conferencing. 

That type of thing, if there are any latencies, you're going to get trashy voice calls and also a lot of intermittent ghosting on conference calls. That's where VeloCloud comes in. They provide a resilient connectivity points system. 

Your connectivity is pretty much preserved.

A lot of companies are moving over to VoIP because they're cheaper. It's a cheaper telephony system than regular phone PBX systems. So, any major company is moving towards a hosted or internal VoIP solution. Again, the biggest challenge is point-to-point latency.

The biggest feature is called D.M.P.O., or Dynamic Multipath Optimization, which is one of the technologies that they use to deliver or ensure data integrity.

One of the things they've done is they've made it user-friendly. If you're a multi-national company and you've got company in France, England, United States, and also in the Southern hemisphere like Australia, and you've got a manufacturing plant, you can see how your plants are performing. You can see the kind of connectivity, as well as the resiliency between each manufacturing plant.

You know whether your internet provider is performing to their service level agreements.

The challenge right now is the customers understanding that it's a subscription-based service. The price is a sticker shock to clients because most clients are used to buying a product and not a subscription service. 

What VeloCloud requires is a combination of a subscription service, which is the cloud orchestration, and the devices, which can be purchased independently. Clients think that they can just buy the product for their endpoint usage and that's it. But, they don't realize they've got to pay for a monthly subscription because the technology that ties the two edge devices together is up in the cloud and you need to have that. That intelligence, you have to pay for monthly. 

It helps to understand this when people are using Microsoft 365, a subscription-based service. People except the fact that, oh if I need Word or Excel, I can buy it from Microsoft for a monthly subscription rate.

Services similar to that are now more and more being accepted. Whereas back a year ago, people were saying, "No, I just want to buy a hardware device." That's where the Cisco Meraki comes in. They don't really have much of a cloud orchestration solution. They have devices that provide SD-WAN solutions. You're dependent on each device to do their functionality, whereas VeloCloud puts it into the cloud.

It's not like you buy a router, install it, and you're good to go. It's the service, and what they call orchestration of maintaining data integrity, delivering point-to-point. 

If you're in China and you're trying to ascend data across the United States or whatever country you're in, you can imagine the path that it's going through from any world destination from the US. There's going to be thousands and thousands of hops, and by the time you get to your endpoint, any of those hops can introduce some sort of problem. High latency. 

With the SD-WAN solution, it determines the optimal path because they have gateways that help reduce the number of hops. If you didn't use VeloCloud and you wanted to set up a telephone call using VoIP from the United States, here in California, to China or wherever, your chances of having good, solid connectivity is going to be slim because you've got no protection. Whereas the SD-WAN VeloCloud solution provides number one, reducing the linkage between the two points and then it also provides some resiliency and ability to recover from data packet losses.

Depending on the clients and how critical the data is for them, it will determine how expensive the solution is. If you are a real estate office and you have ten offices, it may be too pricey for that type of industry, but if you're a manufacturer or a software developer, or a company that makes games, and you provide the gaming service, then the cost of the solution is not going to be a major concern.

If you are in the medical industry and you need to keep your hospitals connected and especially with COVID 19 and sharing of data, then the cost is not the biggest issue. It's really delivering resilient service.

They need to increase their gateways. When I staring with this solution, they only had 600 to 700. I say only, but that's a lot still, but they're now over 1000 gateways. It's like Elon Musk's new satellite service. Their Starlink. It's the same with Gateway. 

For Elon Musk to have to launch 2,400 satellites, and in order to provide satellite internet services and to provide just enough, when they're touting one to two-gigabit transfer rates, in order to do that, where it's ubiquitous, it doesn't matter whether you're out to sea or whether you're in the office, or you're by the shoreline in California, you have access to the internet.  

It performance is mediocre but as more and more satellites are added, the performance and the capabilities are that much more.

They need more gateways. It comes down to access; if for example, you have a gateway in LA, it probably covers San Diego and parts of Sacramento, but if you have two gateways it will cover more traffic that is in that area. The more gateways you have the more connectivity access for clients to use to get to the cloud.

Because of the buyout, it has to integrate with VMware's distribution channels, with their support channels. They have to basically GRAT the development of their solution, and fit right inside with VMware's. It's like Dell buying a small company, and then that small company needs to conform to Dell practices. Right now there, they're in flux.

Right now I have to manually manage the SD-WAN dashboard for the connectivity to the internet and routing from point-to-point.

The routing from point-to-point and all of that stuff are separate from the internal local area network. So, right now, software-defined WAN and software-defined LAN are two separate controlling systems. If they can integrate that, such that they are on one dashboard, I can see what's going on with my China manufacturing plant from the US and I can see from the China plant what devices are failing from the US then that would make it even better. So far, it's certainly a step in the right direction, but there's of course, like in time there's going to be continued improvements.

It provides a solution that all companies need and that's connectivity, resiliency.

I would rate this solution a nine out of ten.

I've been involved with VeloCloud for over a year.

They recently were purchased by VMware.

If I were to stand up a cloud service like Microsoft Office 365, I'm going to install it into a data center that can provide service anywhere in the world. I would have a server that's providing this service.

You can't put all your eggs in one installation location, you're going to have the same technology repeated in multiple data centers around the world. To provide that one service, you're going to have that service, and Office 365 virtualized so that you can run it up in Seattle and Redmond. Then you can add, you can run the same service in China, in Australia, and in the Southern hemisphere. All running the same software service so that if one drops out the other one picks up.

The resiliency is there for cloud-based services. That's why everything has gone cloud. Everybody's doing virtualization.

You can scale it such that, okay. You know, China's growing, they need their own data center that covers that whole market, maybe you need two or three and then you're done. Because virtualization is basically copying your server. You just take an image of your server's operating system and you just reinstall it on another server and you've got the same services on a different server.

Our client size varies from small to large enterprise companies.

It varies, but it can scale. The thing can provide scalability and I can solve a multinational company without actually having to fly to every location. I can just say, Hey, VMware VeloCloud, if you want resiliency, you want to connect your companies. We have Chinese manufacturing, food manufacturing companies in LA, Texas. They've got 13 locations and they're complaining about their phone services. The phone just keeps dropping out on them. I always said, well, you need a VeloCloud SD-WAN. So, it's now rolling it all out.

I deal primarily with the IT staff and obviously, it's helping them with the technology to sell the upper management with it.

Technical support is really good, they are there to help out.

I would rate technical support an eight out of ten.

SD-WAN has been out for the last nine or ten years, but it really hasn't grabbed on until the last five years. As an IT engineer, I had to come up with my own solutions, such that if I'm standing up a data center and I've got 10 to 15 switches, and each of those switches needs to be managed and controlled, each one of those switches has its own management console, so I'm managing 10 different management consoles. Whereas with SD-WAN and SD-LAN, you have a central controller that manages multiple devices, you have software to find networking, a controller that controls multiple switches, multiple routers, that type of thing. So that's where SD software-defined networking has advanced the way you manage networking. You're not overloaded with having to deal with each individual device or appliance. You buy devices that conform to SD-WAN technology or SD-LAN technology, and SD-LAN by Ubiquity is the one I use there.

All of my switches, my routers, my access points, my cameras, security cameras, all of that is being handled by one software that manages them all. I can see at a glance, all of my devices, make modifications, see what's failing, see what needs to be replaced in the one in one software monitoring system.

They have what they call a zero-touch setup. 

I can pre-configure the edge devices that get installed at the client site, and rather than me going in and installing it, I can pre-program it and set it up to where I can shift the unit to their IT person, and they can plug it into their network and they're up and running and have connectivity.

It's an SD-WAN solution and they've got edge devices of different sources and types. Depending on the client's needs, you pretty much choose the type of product that's required. The end result is cloud-based. It's a cloud-based software-defined wide area networking affiliation.

VeloCloud is in the cloud. They have over a thousand gateways to get to their services in the cloud. 

They're tied into Microsoft Azure, Office 365, and also AWS services. If you're going to do a cloud design, what you likely want to do is have an SD-WAN solution like VeloCloud, such that if you're dealing with multiple people or multiple businesses with multiple locations, what you'll do is utilize their cloud-based solutions and edge devices to connect to clients' network nodes. There are different offices and provide resilient connectivity.

They have to understand the solution. A lot of IT technologists don't have a full grasp of the software-defined networking SD-WAN, SD-LAN.

Until technologists understand that, businesses won't understand because the businesses rely on their IT staff to stay in touch with the latest and greatest technologies that can save the operational costs.

We haven't reached the crest of the wave yet for all of us, even VeloCloud. They're just not quite at the crest yet, but soon everybody will understand. Oh, I know what SD-WAN is, I know it's going to save me money. I know it's going to allow me to reduce my IT staff because they're not having to be encumbered by the way the legacy management solutions were back then. That's all dashboard monitorization.

I would rate VeloCloud a nine out of ten.

We are installing edge to support the service providers' enterprise customers. There's a standard hardware edge.

I like that I can combine some different internet connections and resources. For example, MPLS VPN, internet, and 4G. You can combine it all together. Before, we could only use an MPLS VPN only.

The initial setup is very easy.

It is stable. The solution is reliable. 

It's scalable. 

Technical support has been very helpful. 

The product has a very good user dashboard that is simple to navigate.

I'd like them to improve their mobile parts. I want them to get faster in this field.

The cost is a little bit high. We'd like it if it was less expensive. 

We'd like to see more security added to the solution. It would be good if it had firewall functionality.

I've been using the solution for one year. 

This is a stable product. the performance is good and it is reliable. There aren't any bugs or glitches that I have seen and it does not crash or freeze. 

The solution scales well. It's simple to expand. 

Technical support has a lot of expertise. They are knowledgeable and responsive. 

Positive

We found the setup to be straightforward and simple. It is not overly complex. 

I'd rate the ease of setup a five out of five.

It's competitive, yet it's a little bit more expensive than other brands.

We pay about $500 USD, or 700,000 Korean won.

I'd rate it a two or three out of five in terms of affordability.

Compared to Fortinet or Cisco, VMware is quite easy to set up, and the management dashboard is intuitive. 

We are a reseller and distributor. 

I would give the solution a rating of eight out of ten.

The use case is mainly just communication between the branch offices or the branches. That's pretty much it, the communication between the branches.

Also, currently, we're doing what we call a PCI segmentation as well. 

It's stable most of the time. It's reliable I would say. We have rarely or never disconnected unless there's a power issue or power outage. Even then, we have a disconnection from one of the branches. Beyond that we don't have a lot of issues. It's very minimum disruption. That's what I like about it.

It's very easy to work with the solution. We understand it well. Customer service is very good. 

When we upgrade to one of the edges, it goes very smoothly. 

We're trying to integrate it with our Prisma Access architecture in the future. We would just like to see it smoothly deployed. We are going now back and forth between our Palo Alto reps and VeloCloud or VMware SD-WAN reps to find a solution to integrate both into one solution. I'm not sure if this is on Palo Alto's or Prisma's or VMware's side.  Other than that, all the features and everything look great.

The only thing that I'm having issues with is on one of the sites, I can't see the location on the map. That's the only thing that can be fixed.

I've used the solution for the last eight months only. I've been with the company only that long, however, they had this for probably a couple of years, I would say.

It's stable. We've had it for a period of time now and it's very reliable. All of them have issues and most of the time, they're not even related to the solution itself. The solution really does run well.

It's very scalable. One of the edges we have supports 2,000 tunnels and their edge is very scalable. It depends on the model you use. On even some of these small sites, we rely on them for Wi-Fi in our small sites it's been great overall.

We likely have 1,000 users on the solution. 

We have plans to increase usage since we're looking to migrate from a physical data center to Prisma Access on the cloud. Then we have to involve something called the VeloCloud Gateway, which is VMware.

They are our cloud gateways, so those have to be involved in our new architecture or design. We're increasing everything and the only thing that would be decreasing would be where we're closing some offices and that's just the nature of business itself. However, we're still opening others in other states.

Customer service is great. They've been very responsive. One time we had to replace one or two of the edges in one of our main offices in the Houston, Texas area and they send a technician and everything went smoothly on that end.

The technical support is knowledgeable. Customer support is a partner with VMware, so when we ask for support or technical support, and it's always there and they're always helpful.

Positive

I wasn't part of that actual step.

You do not need much maintenance. The last time when I did one site it was only me and then probably a couple of people from our end.

We likely had assistance from the reseller. That's who we deal with when we have any issues with our VMware SD-WAN.

I don't have any insights into any ROI. 

I'm not aware of the licensing aspect of the solution. It might be somewhere in the middle of the market. It's likely not the least expensive not the most. 

Support may be an extra add-on cost as well. 

We are using the VeloCloud version or model.

On each site, on each branch, we have edges of either one or two for redundancies and that's how they communicate. There's an overlay and that's how they communicate between branches so we have on-prem edges, yes. We have one on AW as well, however, the most we use for now is between branches in Texas.

I would recommend people use this product. We've been using it and we don't have any issues. Honestly, we don't want to get away from this solution at all. I recommend using the solution as it's very reliable, convenient, and easy when you communicate with it. Supporting it and then looking into issues and trying to implement rules and best policies is pretty straightforward. Even if not, we always work with their reseller and they always help us.

I'd rate the solution a nine out of ten.

We use this solution to increase our network bandwidth between sites in our company. For example, there are two internet lines and one NPOS network in Taipei and one SD-WAN solution in Poland. The VCE connects these lines and networks to our LAN switch which increases our bandwidth.

If one circuit crashes, we are able to switch to a second circuit without any disruption in connection. 

In the future, we would like to have more capacity using this solution as there are limitations on the VCE. For example, only 50 tunnels can be supported currently but we would like to have 200 tunnels using the VeloCloud VCE device.

The security function on the VCE could be improved as we need to purchase another device to protect our setup. 

This is a stable solution. 

This is a scalable solution. 

We previously used the FortiGate SD-WAN solution. When using this solution, we experienced application disconnection if the network failed. This does not happen with VeloCloud. 

A vendor assisted us with the setup of this solution. 

I would rate this solution an eight out of ten.