Coforge, formerly known as NIIT Technologies, is a global digital services and solutions provider with a presence in 21 countries. The company has more than 20,000 employees, 250-plus customers, and 25 delivery centres spread across nine countries.\n\nHowever, as recently as three years back, these numbers didn\u2019t look as good. \u201cIn 2018-19, the India-based company had about 9,000 employees and 11 offices. This was when the management decided to accelerate growth by aggressively adding employees and newer geographies. The existing network infrastructure at that time, however, was severely inadequate and couldn\u2019t have matched steps with the desired business growth,\u201d says Jitendra Mohan Bhardwaj, CIO and CISO at Coforge.\n\nThe company was saddled with a distributed network architecture with multiple managed service providers to deal with. There were issues such as high network maintenance costs, poor collaboration experience, only moderate data security, and excessive time for customer onboarding. It ultimately turned to an SD-WAN (software-defined wide area network) to address all these issues.\n\nSushant Rabra, a partner at KPMG, says the benefits Coforge saw are in accordance with the potential of SD-WAN. \u201cLarge and complex organisations, with a lot of legacy infrastructure, pay through their noses when it comes to network connectivity. Managing different service providers, ensuring point-to-point quality of service, and delivering at the right speed are all a burden on companies. The cost savings of 25% to 30% achieved by leveraging SD-WAN, therefore, doesn\u2019t surprise me. The technology uses the same network more efficiently, thereby lowering costs,\u201d he says.\n\nKPMG\u2019s Rabra says the technology is \u201cfairly mature\u201d and its adoption in multinational enterprises, financial services and manufacturing companies will increase going forward. Various reports peg the SD-WAN market growth in India at 24% to 30% annually. \u201cThere are several drivers for this growth. COVID has led to a disruption in the location of work. [In India,] companies are now looking at opening offices in smaller cities such as Coimbatore and Lucknow. The explosion of data from varied sources such as IoT and video analytics is driving an explosion in network outreach. With 5G launch around the corner, there will be thousands of sources to connect to. In such a scenario, the classical mode of connectivity is too complicated. SD-WAN can help overcome all these challenges,\u201d he says.\n\nLegacy network infrastructure posed multiple business and technology challenges\n\nAs Coforge had overseas development centres at various locations, there were network termination links at each of the sites. To manage these sites, it had to deploy several network engineers, which increased the cost of maintaining the network. \u201cBesides, the teams had to manually migrate failover traffic from one ISP [internet service provider] to other during service degradations. Managing bandwidth of ODCs [overseas development centres] in different time zones of the US, Europe, and Australia was also a challenge,\u201d says Bhardwaj.\n\n\u201cOne of the first things a potential customer asks is how much time will it take to set up the IT infrastructure. If I must onboard a customer, I need network connectivity at that place. So, mastering this turnaround time and uptime, once the customer was onboarded, was also on our priority list,\u201d he says.\n\nThe emergence of cloud as a business differentiator was another driver for the company to take a new look at its existing network infrastructure. \u201cFor instance, earlier, people had Microsoft Exchange on their premises. But with the advent of Office 365, you need to have better cloud connectivity and control over bandwidth optimisation. SaaS collaboration solutions were also gaining traction. In a distributed architecture with multiple service providers in multiple locations, managing all this was a nightmare,\u201d Bhardwaj says.\n\nWith a spurt in cyberattacks, there was also a need for a single pane of view of what was happening in the company\u2019s infrastructure. \u201cWe needed to know if any link was going down, if a particular router was under threat, or if there was a DDoS attack happening. It was critical to monitor any abnormal traffic flowing from a particular IP address, which could indicate a ransomware attack or malicious activity. Unfortunately, we were unable to track all this with the multiprovider setup,\u201d he says.\n\nZeroing in on SD-WAN as the right solution\n\nTo overcome these bottlenecks in the way of business growth, Coforge decided to implement an SD-WAN.\n\n\u201cIn 2019, SD-WAN was a new concept, with few implementations in the country. We therefore decided to go for a proof of concept to see how the solution would work in the company\u2019s environment. Proof of concept is normally done in controlled environments. [But] once the controls are off and the solution experiences full load, performance degrades. Several projects have been rolled back because of this,\u201d Bhardwaj says.\n\nTo avoid such a situation, Bhardwaj decided to go for a proof of concept with full load. Locations at two cities that didn\u2019t have too much traffic were run live in parallel, with traffic was diverted to them.\n\n\u201cWe spent considerable time of about eight weeks in this because we wanted to test the solution with full load. If successful, this could be the template for other cities. Once we were satisfied with the outcome, we decided to go ahead,\u201d he says.\n\nAfter a cost-benefit analysis and looking at the lack of relevant skills in the market, the company decided to go ahead with the implementation through the managed services route. Coforge provided sitewide configuration to the service provider, and the implementation was done remotely with policy push at all SD-WAN customer premises equipment (the routers). There were WAN links at Coforge\u2019s offices, the controller was deployed at the ISP cloud to centrally manage all the customer premises equipment, and a cloud gateway was established for connectivity with other locations.\n\nCoforge implemented the SD-WAN across 11 office locations, including Greater Noida, Mumbai, Hyderabad, and even foreign locations such as Atlanta, New Jersey, and London. The project took six months to complete and went live just before the COVID-19 pandemic started.\n\nAppropriate planning to ensure setup with minimal disruption\n\nBhardwaj divided the project into smaller pieces \u201cto monitor its success and ensure that learnings from each phase are ploughed back into the next phase. Phase 0 involved a lot of brainstorming with our service providers and customers. In phase 1, high-level designs were done, requirements were frozen, and risk mitigation was completed. We identified the cities and conducted the proof of concept in phases 2 and 3. Some of our customers have point-to-point connectivity, while some of them have IPsec tunnel connectivity. In some cases, we had to set up VPN for them. This was taken up in phase 4 where we worked closely with our customers\u2019 IT teams,\u201d says Bhardwaj.\n\nCommunication with the technology provider is a bigger challenge. Often, there is a gap between what is promised and what is delivered. So Bhardwaj fixed daily, weekly, and fortnightly meetings to get timely and frequent updates on the project.\n\n\u201cBesides the daily and weekly calls with the service provider\u2019s team, I used to have an in-person meeting with their seniormost person in the country every fortnight. SD-WAN routers were the only hardware needed for the project and their timely delivery was crucial. The meeting helped in tracking the delivery time and the make of the equipment. This helped us to do the back-end calculation and come up with the critical path of the project life cycle,\u201d he says.\n\nCoforge also imparted training to its people for smooth functioning of the SD-WAN after it went live. \u201cWe knew we were the project manager and would have to run the project subsequently. So, we invested in our people by getting them trained and certified on the technology,\u201d says Bhardwaj.\n\nAchieving efficiency, security, agility, and cost reduction through the SD-WAN\n\nWith the SD-WAN deployment, Coforge has optimized its WAN Infrastructure, resulting in enhanced efficiency, security, and reduced costs, says Bhardwaj.\n\nAs part of the reorganisation and consolidation of infrastructure, the company moved from 44 internet links to 11 internet links. By replacing multiple service provider offering portions of the bandwidth with a single provider, Coforge was able to save costs.\n\nWith the entire network now managed from a central location, the need for on-site engineers also came down drastically, leading to further cost savings. \u201cWhile there are one or two network engineers at critical locations, we have removed them from most locations. By remotely controlling the services, we were able to move 20% of our workforce from nonbillable projects to billable projects,\u201d says Bhardwaj. Coforge also offers infrastructure management to its customers, and the excess manpower was shifted there.\n\n\u201cIn such projects, one year is not enough to expect return on investment. We therefore looked at a three-year time frame. From a cost-benefit analysis, overall cost savings were in the range of 25% to 30% over three years,\u201d he says.\n\nBecause SD-WAN provides a view of the network load at any point in time, it has helped the company achieve bandwidth optimisation. \u201cIf there is a process running in the US, we can give more bandwidth to it in the evening, while the same link can be used in the morning for a customer in Asia. Similarly, if there\u2019s an important board meeting scheduled with certain processes running parallelly, we can prioritise bandwidth allocation at the click of a button,\u201d says Bhardwaj.\n\nCoforge was also able to optimise bandwidth for its cloud offerings. \u201cA call over a collaboration tool could have multiple points of failure \u2014 a packet drop in the network, a challenge in the endpoint device, or an issue with the cloud service provider. \u201cThe SD WAN helps us proactively see where the packet drops are happening and automatically switches over to another link,\u201d he says.\n\nSimilarly, with the adoption of Office 365, the MPLS and internet requirements have gone up. \u201cThe SD-WAN enables us to recalibrate our bandwidth according to the new infrastructure, thereby lending the much-needed agility,\u201d says Bhardwaj.\n\nCompared to the earlier days of MPLS and distributed architecture, \u201cthe company has also been able to accelerate customer onboarding by 50%. It used to take six to eight weeks, which has now come down to less than four weeks. This brings scalability in operations as we can quicky add a new office. Although this is an internal IT infrastructure, it becomes a selling point for my sales team when they approach customers,\u201d Bhardwaj says.\n\nOn the aspect of cybersecurity, he says, \u201cThe SD-WAN provided us defence against DDoS. We were fortunate to implement it just before the pandemic as we saw lots of attacks during this time on our infrastructure.\u201d KMPG\u2019s Rabra advises, \u201cThe SD-WAN initiative should run in parallel to the cybersecurity initiative. As the technology would bring all traffic under one roof, it becomes even more important to enhance the security of the network. While there is some amount of security in-built in SDWAN and it provides visibility at the packet level, technology leaders would need to know what\u2019s happening with data at the broader level.\u201d\n\nWith SD-WAN\u2019s active\/active mode, which allows for automatic failover without manual intervention, Coforge ensures 99.999% uptime for its customers. In the absence of committing such high uptimes, the organisation risks losing revenue.\n\n\u201cSince the deployment, we have grown tremendously, almost double of our size in terms of revenue and manpower. We have already rolled out SD-WAN to all our offices and delivery centres and will keep extending it to new offices as and when we add them,\u201d says Bhardwaj.