Enterprise Networking Specialist
Contact us

Foreign Enterprise IPSec Acceleration

No architecture changes, no data inspection—just faster IPSec between Suzhou and Germany headquarters.

A foreign-invested enterprise opened an office in Suzhou connected to its Germany headquarters via IPSec on a FortiGate firewall, under strict mandates for a unified global network architecture and information security compliance. SD-WAN provides a transparent IPSec acceleration channel that passes the encrypted tunnel through intact, making cross-border access noticeably faster and more stable.

Sites
Suzhou Office ↔ Germany HQ
Existing Appliance
FortiGate Firewall
Interconnection
IPSec Site-to-Site Tunnel
Enterprise Mandate
Unified global network architecture and information security compliance
Transparent Acceleration

The encrypted tunnel passes through intact—SD-WAN simply delivers it faster

An IPSec tunnel between the FortiGate firewall at the Suzhou office and the FortiGate firewall at Germany headquarters passes intact through the central SD-WAN acceleration channel; SD-WAN carries only encrypted traffic without touching enterprise data
Both ends remain a FortiGate-to-FortiGate IPSec tunnel; the SD-WAN acceleration channel carries only this encrypted tunnel without touching enterprise data.
Security & Compliance

Three Constants

  1. Architecture Unchanged

    The Suzhou office and Germany headquarters keep their existing FortiGate-to-FortiGate IPSec tunnel, with configurations, routing, and security policies untouched at both ends.

  2. Data Untouched

    SD-WAN carries only already-encrypted IPSec traffic. It neither inspects nor decrypts enterprise data inside the tunnel—it simply delivers the tunnel faster and more reliably.

  3. Policies Intact

    The globally unified architecture and information security standards mandated by headquarters remain intact in full, giving the Suzhou office cross-border acceleration within the compliance framework.

Acceleration Results

The same IPSec tunnel, before and after SD-WAN

Cross-border link quality when accessing Germany headquarters systems from the Suzhou office.

  • IPSec over Public Internet

    Cross-border latencyHigh
    Jitter & packet lossHigh
    Tunnel stabilityProne to drops

    Tunnels drop intermittently during peak hours, making HQ systems sluggish to access.

  • IPSec Accelerated by SD-WAN

    Cross-border latencySubstantially lower
    Jitter & packet lossSignificantly reduced
    Tunnel stabilityConsistently stable

    Endpoint configurations remain unchanged while access feels near-local.

Custom solution consultation

Have similar multi-region networking needs?

Tell us your site locations, existing links, and the applications you need to access, and we will draw on similar deployments to work out a connectivity approach that fits your business.

Get in touch