The Challenge
In the rapidly evolving landscape of education, robust and reliable network infrastructure has become paramount to enhancing both teaching and learning experiences. A prominent educational institution, with a sprawling network of 45 campuses, faced the challenge of upgrading its existing network to a Software-Defined Wide Area Network (SD-WAN) without disrupting educational activities. Legacy systems were proving inadequate for handling the increasing digital demands of modern curricula, which necessitated a seamless transition to a more agile and resilient network.
The institution's main concerns were ensuring continuity throughout the academic term and avoiding any downtime that could cripple educational processes. Additionally, with 45 dispersed sites, there was a logistical complexity in coordinating upgrades while adhering to strict academic schedules, underscoring the need for a strategic and methodically planned deployment.
The Solution
Adyantrix took on this formidable task, leveraging our expertise in IT consulting and network management to architect a comprehensive SD-WAN deployment strategy. This approach focused not only on technical efficacy but also on ensuring educational activities remained unaffected.
We initiated the project with an extensive audit of the existing network infrastructure across all 45 campuses. This established a solid foundation for identifying potential bottlenecks and planning for scalable solutions. Our strategy involved phased rollouts, with precise scheduling during weekends and school holidays to align with academic schedules, thereby mitigating disruption.
Advanced simulation and testing were integral to our approach. Prior to on-site implementation, we conducted thorough simulations of the SD-WAN environment, enabling us to predict potential disruptions and proactively refine configurations. This laid the groundwork for smooth integration, ensuring new systems were seamlessly assimilated into the institutional framework.
Our solution's hallmark was real-time network analytics integrated into the SD-WAN framework, empowering the institution to monitor network performance continuously and optimise connections on-the-fly. This adaptability was crucial for supporting dynamic educational requirements, from video streaming to interactive learning applications.
Key Results
The implementation of SD-WAN was a triumph. Over 45 separate sites transitioned to the SD-WAN framework without experiencing any downtime during term time. The key to this success was our meticulous planning and phased deployment strategy, ensuring zero disruption to academic activities.
Post-deployment analysis demonstrated a 40% increase in network resilience and efficiency, with a remarkable 50% reduction in latency issues previously plaguing the institution's network. This upgrade resulted in smoother digital learning experiences and enhanced the institution's capacity to integrate future technological advancements fluidly.
User feedback within the institution highlighted significant improvements in connectivity stability and speed, elevating both student and faculty satisfaction levels. Furthermore, our sustainable design for the SD-WAN infrastructure delivered enhanced security protocols, safeguarding critical data and fostering a safe digital environment conducive to learning.
Adyantrix's successful execution of this project exemplified our commitment to delivering cutting-edge IT solutions that transcend operational challenges, perfectly aligning technology deployment with the educational sector's unique needs. This case serves as a sterling example of how modern technology, when deftly implemented, can transform educational institutions into future-ready environments. This model now stands as a blueprint for similar institutions aiming to undertake network modernisation without hampering educational continuity.
Technical Approach
The solution was built on a Fortinet Secure SD-WAN fabric, selected for its tight integration of networking and security functions within a single management plane — a critical factor for an institution that lacked a large dedicated security operations team. The control plane ran on a pair of redundant FortiManager instances hosted in the institution's primary data centre, providing centralised policy management and firmware orchestration across all 45 edge nodes.
Each campus was equipped with FortiGate appliances sized to site traffic profiles, replacing legacy Cisco ISR routers that had been in service for over a decade. Transport diversity was a central design principle: every site was provisioned with a primary MPLS circuit retained from the incumbent provider and a secondary broadband or 4G LTE link, with SD-WAN policies configured to perform active-active load balancing across both paths under normal operation and automatic failover within sub-second switching times on link degradation.
Key architectural decisions included:
- Application-aware routing using deep packet inspection to steer latency-sensitive traffic (VoIP, video conferencing, and interactive e-learning platforms) preferentially over the MPLS path, whilst bulk data transfers and cloud application traffic used the broadband link
- Zero-touch provisioning (ZTP) to enable remote site devices to self-configure on first boot using pre-staged templates, eliminating the need for a skilled engineer to be physically present at each of the 45 sites
- Overlay network segmentation using VXLANs to separate student, staff, administrative, and IoT device traffic at Layer 2 without requiring physical VLAN re-engineering at each site
- Centralised logging and analytics through FortiAnalyzer, feeding a custom dashboard built in Grafana for the internal IT team, providing per-site performance metrics, bandwidth utilisation, and application visibility in a single pane of glass
Integration with Microsoft Azure Active Directory was configured for SAML-based single sign-on across network management tools, aligning with the institution's existing identity governance framework.
Implementation Highlights
Delivering a simultaneous upgrade across 45 geographically dispersed sites, each with its own timetable constraints and local IT contacts, required a deployment methodology that was both repeatable and flexible. We structured the rollout into five waves of nine sites each, with each wave aligned to school holiday windows — half-term breaks, the Christmas recess, and Easter — to guarantee no live teaching sessions were at risk.
Pre-deployment site surveys were completed remotely via structured questionnaires and on-site photographs submitted by local IT contacts, supplemented by SNMP polling of existing infrastructure to build accurate traffic baselines for each site. This approach reduced the need for costly preliminary site visits whilst still producing reliable design inputs.
Staging and ZTP configuration meant that devices arrived at each site pre-configured and validated in our lab environment against a digital twin of the target network. Local IT contacts simply racked the device, connected cabling as per a laminated one-page guide, and powered it on — full SD-WAN operation was typically established within twenty minutes.
The most operationally sensitive moment in each site migration was the MPLS cutover — transitioning from the legacy router to the SD-WAN edge device as the active gateway. We developed a standardised cutover runbook with a defined rollback procedure executable within three minutes, ensuring that if any unexpected issue arose during the maintenance window, the site could be returned to its previous state before the school day began.
Post-deployment hypercare was provided for a minimum of four weeks following each wave, with on-call network engineers available from 06:00 to 22:00 to address any issues reported by site staff. In practice, only three sites across the entire deployment required post-cutover intervention, all of which were resolved remotely within thirty minutes.
Measurable Outcomes
The network performance improvements recorded in the three months following full deployment provided a compelling picture of the upgrade's impact:
- Average WAN latency across the campus estate fell from 47 ms to 19 ms, representing a 60% reduction — materially improving the responsiveness of cloud-hosted learning management systems
- Application availability for the institution's Microsoft 365 tenancy improved from 98.1% to 99.87%, with SD-WAN path steering virtually eliminating the brownout periods previously caused by congestion on shared MPLS capacity
- Bandwidth utilisation headroom increased significantly: peak utilisation on uplinks dropped from an average of 84% to 51% following load balancing activation, providing substantial capacity for future growth
- IT helpdesk tickets related to network connectivity fell by 67% in the three months post-deployment compared to the equivalent prior-year period
- Annual WAN spend was reduced by approximately 22% through decommissioning of secondary MPLS circuits at smaller sites, replaced by lower-cost broadband with SD-WAN resilience providing equivalent or better continuity guarantees
The centralised visibility afforded by FortiAnalyzer gave the institution's IT team, for the first time, a unified view of network behaviour across all 45 sites — enabling proactive identification of capacity constraints before they manifested as user-facing issues.
Lessons Learned
Several aspects of this engagement reinforced lessons that are directly applicable to any large-scale network modernisation programme in the education sector.
Scheduling discipline is the single largest risk mitigation lever. The academic calendar is unforgiving — a failed cutover that bleeds into a Monday morning is not a recoverable situation. Building the deployment schedule from the academic calendar outwards, rather than from an IT project plan inwards, was a mindset shift that paid dividends throughout the engagement.
Zero-touch provisioning is only as reliable as the template quality. Early waves exposed a small number of ZTP configuration issues caused by site-specific legacy IP addressing that differed from the standard schema. We introduced an automated pre-deployment validation script that cross-referenced each site's survey data against the staged configuration, flagging discrepancies before devices were shipped. This eliminated ZTP failures in later waves entirely.
Local IT contact engagement cannot be underestimated. The willingness and capability of each site's local IT contact varied considerably. Investing time in a structured briefing call with each contact two weeks before their site's cutover window — covering exactly what to expect, what to look for, and who to call — made a measurable difference to cutover confidence and speed at the site level.
Speak with our Cloud & DevOps team at Adyantrix to find out how we can support your next project.
Work with Adyantrix
If you are looking to tackle a similar challenge, Adyantrix has the expertise to help across the full project lifecycle. Our cloud & DevOps practice covers cloud infrastructure, CI/CD, and platform engineering. Our IT consulting practice covers technology strategy, architecture review, and digital transformation advisory. Get in touch to discuss your requirements — no commitment required.
