Xcitium offering

SD-WAN

Software-defined networking between sites. Xcitium SD-WAN centrally manages multiple links and connects sites through OmniVPN tunnels and traffic policies.

Discuss your requirements ↗

Branch network infrastructure connects multiple sites

SD-WAN for distributed networks

Connect central policy with dynamic branch traffic paths

SD-WAN connects branch routers over the internet, supports multiple ISP connections, and selects paths dynamically based on performance. The control plane distributes policy; the data plane carries traffic between branches.

Stage 01

Connect branch sites

Branch routers connect over the internet and can use multiple ISP connections. Deployment options include on-premises, cloud, and virtual appliance.

Output: Centrally managed branch WAN

Stage 02

Select paths by performance

The platform monitors network conditions and supports dynamic path selection, load balancing, and bandwidth aggregation.

Output: Traffic path based on current connection conditions

Stage 03

Apply application policy

Central management configures source- and application-based routing, application priority, QoS, and bandwidth allocation.

Output: Rules for each application and traffic class

Stage 04

Combine security and visibility

Encrypted datapaths, branch micro-segmentation, SASE/ZTNA, and firewall capabilities are integrated with network management; ntopng provides traffic analytics.

Output: Central management and traffic analytics

Control plane sets policy; data plane carries branch traffic

Control planeCloud management

Routing · QoS · priorityZero-touch provisioning and updates

Data plane

Branch A · router

ISP connection 1ISP connection 2

Dynamic path by performanceApplication traffic

Branch B · router

ISP connection 1ISP connection 2

Local internet breakoutUser · bandwidth · app · traffic

Capabilities

Capabilities with a specific purpose

Condition-aware dynamic path selection

Xcitium SD-WAN supports WAN port and appliance availability, performance-based path selection, load balancing, and bandwidth aggregation. Test latency, packet loss, and failover across multiple ISP links in a pilot.

Application routing and QoS

Prioritize business traffic using source- and application-based routing, application priority, bandwidth allocation, and strict queuing. Identify critical applications and exceptions with their owners.

Encrypted WAN and network microsegmentation

WAN connections support OpenVPN and WireGuard, encrypted OmniVPN datapaths, and microsegmentation across LANs, VLANs, and subnets. Review cryptographic settings and key-exchange requirements in a pilot.

Integrated security functions

Integrated options include SASE, ZTNA, a next-generation firewall, OpenVAS vulnerability scanning, and real-time connection management. Include licensing, configuration, and coverage for each function in solution design.

Traffic visibility and deployment options

Web-based traffic analysis surfaces users, bandwidth, applications, and traffic types. Available features include on-premises, cloud, and virtual appliance options, plus zero-touch provisioning and automatic updates.

Compare approaches

Network connectivity and application access

Consideration	SD-WAN	ZTNA
Primary job	Connect branches, internet links, and WAN traffic.	Verify a user and device before access to a specific application.
Policy object	Application, source, link, bandwidth, and traffic class.	User, device context, role, and application resource.
Path and control	Dynamic path selection, QoS, failover, and network security.	Least-privilege access, continuous authentication, and adaptive policy.
Complementary role	Provides managed transport between users and sites.	Defines the access boundary for assigned applications and resources.

Before you start

Define a branch connectivity pilot

Start with two representative sites and critical business applications. Map ISP links, routing, and security policies, then define performance and failover tests.

01
Which ISP links, sites, and carrier contracts are in scope?
02
Which applications need prioritization, strict queueing, or local breakout?
03
Which success criteria measure failover, encrypted tunnels, and QoS?
04
How will you select appliance model, deployment form, update window, and rollback?

Evidence for your evaluation

SD-WAN routing and deployment

Xcitium SD-WAN includes dynamic path selection, QoS, encrypted WAN, security functions, and appliance options.

In practice

Connecting branch networks

Several branches use a mix of internet, Wi-Fi, and Ethernet links. The network team wants shared traffic visibility and application priorities, so it first checks topology and appliance compatibility. It can then compare link behavior with business-critical application needs.

What your team gains

01
Central cloud management and zero-touch provisioning options.
02
Dynamic path selection, load balancing, and application prioritization.
03
Combined SASE, ZTNA, firewall, and microsegmentation capabilities.

Before you decide

Questions, answered

What network work is SD-WAN designed to handle?

It focuses on centrally managing branch and internet links, performance-based path selection, load balancing, and application QoS. Measure link and failover requirements in a pilot.

Which security functions are listed with Xcitium SD-WAN?

Xcitium SD-WAN includes SASE, ZTNA, microsegmentation, firewall, OpenVPN, WireGuard, and OpenVAS. Include licensing and coverage for the chosen configuration in solution design.

Which deployment options are described?

Available features include on-premises, cloud, and virtual appliance options, zero-touch provisioning, and automatic software and security updates. Evaluate fit for the network and operating model.

Next step

Discuss your requirements

Tell us about your environment and priorities to discuss the right solution, pilot scope and rollout in Azerbaijan.