Executive Summary

This offering alleviates the difficulty of connecting premise locations to the cloud by rapidly enabling secure connections from datacenters and branch sites to Azure via Azure Virtual WAN. Vandis will establish an ExpressRoute connection with multiple branch sites and deploy a Virtual WAN hub in your designated region. For organizations with WAN hubs in different regions, Vandis will connect them, extending the cloud to your datacenter and branch edge..

With our managed Azure Networking solution, each of your sites will also receive better protection against exploits and malware thanks to a continuous threat service provided by FortiGuard Labs and the expertise of Vandis’ security team.

Offering Description

Vandis engineers will design and implement an Azure network architecture leveraging Azur Virtual WAN and / or ExpressRoute specifically designed to accommodate the traffic between premise locations, cloud locations, and separate regions.  Vandis’ Managed Services can provide remote support and 24/7 Monitoring of connections deployed at all locations with custom alert notifications. Included in this service is ad hoc Break/Fix Support and Change Request Support provided by Vandis Certified Engineers including escalation, as needed, to Microsoft Support Services.

Scope of Work

• Establish initial subscription for new Azure customers​
• Set up Virtual WAN hub
• Connect ExpressRoute and branch connectivity solution into Virtual WAN
• Azure Virtual WAN IPSec, and BGP configurations for the Azure and up to five premise sites.
• Create Security Policies for the traffic between premise locations, cloud locations, and the Internet if applicable
• Implement proper RBAC and Cloud Security Posture​
• Create Alerting and Monitoring Profiles
• Onboard Customer into Vandis Managed Services Desk if applicable

Deliverables

• Low Latency, Secure Mesh Communication Fabric
• Integration with SASE or centralized firewall management solution if applicable
• Terraform deployment of resources
• ExpressRoute bandwidth utilization assessment
• Unified Logging, Reporting, Threat Profiles across organization
• Fully Managed and Monitored Azure Networking environment (For Gateways in Scope)
• Onboarding into Vandis Managed Services with operational runbook.