One Step Ahead of IT. We do IT right.

Insights

Managed SD-WAN: multiple stores and offices without outages

A store without internet cannot sell or invoice. With managed SD-WAN, every site has two links and switches over on its own, so one ISP failure no longer stops the business.

Updated 12 October 20265 min read

More than 10 workstations · support contract · remote, on-site and phone support

At a glance

For decision-makers short on time.

  • 01SD-WAN: two connections per site and automatic failover to the better one.
  • 02It pays off from three sites, or when an outage costs sales.
  • 03Two loosely dependent offices are well served by a VPN.
  • 04Connectivity map of every site in 10 working days; management under IT Unlimited Premium.
In this article

A shop without internet cannot sell, invoice or serve customers. Managed SD-WAN removes that scenario: each site gets two connections (fibre and mobile, for example) and a device that switches automatically to whichever is performing better, application by application, with every rule written on a central dashboard. For businesses with three or more sites, centralised billing or cloud software, the result is simple: a carrier failure is no longer news.

The essentials in four points

  • Short definition At each site, two or more connections used simultaneously, with the best one chosen automatically for each application.
  • When it pays When an outage at a site costs sales or leaves the team idle; as a rule, from three sites.
  • When it is not needed Two loosely dependent offices are well served by a properly built VPN.
  • Where the value lies Dual connectivity, automatic failover and a single dashboard for every site.

What exactly is SD-WAN?

It is the network that links your sites, but controlled by software. The WAN is the connection between headquarters, shops or offices; "software-defined" means the rules are created on a central dashboard and pushed to every device at once. Picture a navigation app that, seeing the motorway at a standstill, puts you on the A-road without you having to pull over.

The device installed at each site:

  • Combines connections Fibre, a second fibre from another carrier, 4G/5G.
  • Prioritises what matters Billing and voice over the most stable route; downloads and updates over the other.
  • Changes route on its own If a connection drops or slows down, nobody on site has to touch anything.
  • Encrypts between sites Applies the same security across the network.

The phone call "Braga has no system" becomes an entry on the dashboard: "Braga switched connection at 10:14".

When is a VPN enough, and when does SD-WAN pay off?

A site-to-site VPN is an encrypted tunnel, almost always over one connection at each end. It is cheap, it works and it is often the right answer. SD-WAN adds routing intelligence and central management on top.

QuestionSite-to-site VPNManaged SD-WAN
How many sites?Two or three, with few changesThree or more, or regular expansion
What if the internet goes down?The tunnel stays down until someone acts, unless redundancy is in placeSwitches to the second connection on its own
Application priority?LimitedBilling, voice and cloud first
How is it managed?Device by deviceOne dashboard with templates for all
Opening a shop?Manual configurationReplicate the template
Is the status known?When someone complainsEvery connection, in real time

Quick maths: if one hour of a shop offline is worth more than a year of equipment and a second connection at that site, SD-WAN pays for itself. Run the numbers with the method in what an hour of downtime is worth.

What internet redundancy does each site need?

At least two independent connections, without them SD-WAN has no alternative. Truly independent means:

  1. Two carriers: the same carrier can fail on both fibres at once.
  2. Two routes: fibres in the same duct go down together when a digger hits the street; mobile or satellite breaks that dependency.
  3. Backup power: without a UPS, a power cut takes everything down. Read whether your business can withstand a blackout.

What to ask carriers for, and which connection types exist, is covered in our guide to fast, redundant business internet.

Doesn't linking sites open the door to attacks?

It does, without segmentation. That is why every project includes separate networks for tills, office, cameras and guests, and the same firewall policy at every point. We cover this in one firewall policy for every shop.

Many installed firewalls already come with SD-WAN built in. Activating what exists is often cheaper than buying new equipment for each site.

Who already has multi-site networks managed by DataRoad?

Fullest: 16 restaurants, one configuration

Fullest (16 restaurants in Lisbon and Porto, including Adega de São Roque, Bacalhau com Todos and Peixaria do Rossio) entrusted us with its network. Firewall and security, business Wi-Fi, cloud management with the same configuration at every venue, staff and guests on separate networks, and continuous remote monitoring of usage, signal and security settings.

Boost Portugal: Lisbon, Porto, the Douro and Madrid

The contract with Boost Portugal, a tourism activities group, includes redundant internet with automatic failover, link aggregation, remote alerts and availability reports.

In both cases, nobody on site needs to know anything about networks for operations to stay connected and protected.

How is it deployed without closing the doors?

  1. X-ray of each site: connections, carrier, equipment, critical applications and the cost of downtime.
  2. Architecture: second connection, priorities by application, common security policy.
  3. Pilot site: billing, voice and cloud tested, including deliberately cutting the main connection.
  4. Roll-out: one site at a time, away from peak hours.
  5. Monitoring: warning of a degraded connection before it drops, and availability reported per site.

Questions from decision-makers

Does SD-WAN replace the VPN?

Between sites, yes: the encrypted tunnels are created by SD-WAN, with failover and central management. Remote working is solved differently: we explain how in secure remote access beyond the VPN.

Does every site need two connections?

Those that cannot stop, yes. Ideally from different carriers and routes, such as fibre plus mobile.

Does all the equipment have to be replaced?

Rarely. Many recent firewalls already do SD-WAN; only what does not support central management or no longer receives updates is replaced.

How long does it take?

It depends on how many sites you have and how long carriers take to install the second connections. It starts with a pilot and rolls out in phases, without stopping operations.

Next step: a connectivity map of every site in 10 working days

We map the connections, equipment and critical applications at each shop or office, quantify the risk of downtime and deliver the SD-WAN and redundancy design site by site. Management of managed firewalls and network security is included in IT Unlimited Premium, with on-site support. Request a no-commitment proposal.

More than 10 workstations · support contract · remote, on-site and phone support.

Call +351 211 459 950 * or write to sales@dataroad.pt.

*Call to a Portuguese landline.

Sources

Chosen by respected and international companies

Garcia, GarciaGuestUNMQ DigitalMinistério PúblicoVentaskETISMEGReltio by SAPRestreamVelvEscola Nacional de Saúde PúblicaCircuito EstorilSyoneCreative MindsInstituto Superior TécnicoRTPUniversidade Católica PortoUniversidade Católica PortuguesaFaculdade de Medicina de LisboaUniversidade de LisboaClínica MulherPresidência da RepúblicaESELUpMUN[it]STENEmbajada de España en PortugalNBCC ConsultingInstituto dos Registos e do NotariadoVila GaléBe Poet Baixa HotelBe Hotel LisboaRossio Plaza HotelServiced Apartments Boavista PalaceMitrelliJunta de Freguesia de Massamá e Monte AbraãoInsidepurpleUniveteColégio MinervaPTR Pharma ConsultingInfocapitalHD Duecitânia Design HotelYunit ConsultingMyWindowArqsizeAxiaVestasContinentalGRENKEBaker TillyVINCI AirportsANA Aeroportos de PortugalE.LeclercUriachbeqomNewhotel SoftwareeasyHotelOuro Rossio HotelNicola Rossio HotelClínica LambertBanco do BrasilBoostUphillHole19Ambassade de France au PortugalU.S. Embassy PortugalEmbaixada da Arábia SauditaEmbassy of CyprusPanikeAugusta LabsIGASSISPorta da Frente Christie’sonRisingFresh DesignGesto EnergyBernerQuatenusSegurança SocialCâmara Municipal do MontijoManaged SD-WAN: multiple stores and offices without outagesCiphraCentury 21Hotel Solar PalmeirasSINCTAAPCTAVarandas de Lisboa★★★★★ 5,0 · 52 Google reviews

Numbers you can verify

11years in business
232clients
< 10 minaverage response time
15+IT vendor certifications
10+Countries with clients supported
5.0 ★52 Google reviews
Transparency

What many providers hide, we publish.

  • Prices upfrontEssential from €395/month + VAT, Premium from €750 and Premium 365 from €1,200.
  • No lock-inAnnual contract, no lock-in and no joining fees.
  • Everything in writingWhat is included, the scope and the price, before you sign.
  • Support without counted hoursRemote and phone in every plan; on-site support from Premium.

Partners and certifications

Apple Technical PartnerUbiquitiUniFi Partner ProgramMicrosoftMicrosoft Partner NetworkMicrosoft AzureFortinetCiscoCisco MerakiSophosESETVMwareDell Technologies PartnerHewlett Packard EnterpriseHPE Aruba NetworkingLenovoSynologypfSenseNetgateAcronisPalo Alto NetworksMikroTikRuckusNetgearBitdefenderMcAfeeSymantecRed HatAWSGoogle CloudGoogle PartnerSeagateAPCEatonSnomDahua

DataRoad · Industries

One StepAhead of IT.

The same rigour in every industry, with each one’s rules: segmented networks, protected data and a named person in charge.

  • 5 ★on Google · 52 reviews
  • 232clients under management
  • Top 5%SMEs · scoring.pt

We do IT right.

DataRoad IT Unlimited

Operational continuity is not luck. It is method and contract.

IT Unlimited reduces risk and shows in writing what changed.

Request a proposal, no commitment →+351 211 459 950 **Call to a Portuguese landline · More than 10 workstations · support contract · remote, on-site and phone supportNot sure what you need? Talk to the assistant →
Google Business Review 5.0 ★★★★★