DIY SD-WAN
In a DIY deployment, the enterprise procures SD-WAN hardware and software directly from the vendor (Fortinet, VMware, Cisco Meraki), designs the network architecture, deploys and configures edge appliances, and manages ongoing operations including policy changes, troubleshooting, and firmware updates. This model requires in-house networking expertise and provides maximum control over configuration and vendor selection.
Co-Managed SD-WAN
Co-managed SD-WAN splits responsibilities between the enterprise and a managed service provider. Typically, the provider handles circuit procurement, hardware deployment, and 24/7 monitoring, while the enterprise retains control over application policies, security rules, and network changes. This model balances control with operational burden reduction.
Fully Managed SD-WAN
In a fully managed model, the provider handles everything: circuit procurement, hardware, deployment, configuration, monitoring, and ongoing optimization. The enterprise defines requirements and policies; the provider executes. This model suits organizations without in-house networking staff or those that want to focus IT resources on strategic initiatives rather than network operations.
When to Choose Each
Choose DIY when you have a skilled networking team, need maximum configuration flexibility, or want to avoid ongoing managed service fees. Choose co-managed when you want to retain policy control but need 24/7 monitoring and deployment support. Choose fully managed when you lack networking staff, have multi-site deployments too complex for your team, or when predictable monthly OpEx is preferable to variable internal labor costs.
Common Pitfalls
DIY deployments often underestimate the ongoing operational burden — SD-WAN is not set-and-forget. Co-managed arrangements fail when responsibilities are ambiguously defined — document exactly who handles what before contract signing. Fully managed services sometimes lack the agility for rapid policy changes — verify the provider's change request SLA and self-service portal capabilities.