Single-vendor SASE simplifies security, networking, and DevOps. Announcement >
LEARN

What is a wide area network (WAN)? Read more in our Learning Center. What is a WAN?

Magic WAN

Simplify the path to SASE with any-to-any connectivity
  • Secure, performant network connectivity from branch sites, multi-cloud VPCs, or data centers to Cloudflare’s SASE platform
  • “Light branch, heavy cloud” approach to augment or eventually replace MPLS or SD-WAN
ANALYST RECOGNITION

Cloudflare named a "Leader" in 2023 KuppingerCole SASE Leadership Compass

KuppingerCole Analysts logo

Through its 2023 SASE market analysis, KuppingerCole Analysts AG cited several Cloudflare strengths such as our large globally distributed presence and sophisticated traffic acceleration, massive backbone capacity, 100% uptime guarantee, and innovative Remote Browser Isolation.

Read the report
KuppingerCole Analysts logo
ANY-TO-ANY CONNECTIVITY

Top use cases

Simplify branch connectivity — Facilitate site-to-site connectivity across network locations like branch offices, retail locations, or factory floors, with Anycast-enabled WAN connectors.

Simplify hybrid and multi-cloud connectivity — Use centralized controls to route and secure traffic across varied public cloud environments and on-prem datacenters.

Secure WAN connectivity — Secure connections by applying filters and inspections for traffic between network locations and in/out of the broader Internet.

Scale WAN performance — Augment or eventually replace legacy MPLS or SD-WAN for more agile, cost-effective deployments and faster connections.

ON-RAMP TRAFFIC TO CLOUDFLARE

How it works

  • Purchase the branch connector software pre-installed and configured on a Cloudflare-certified hardware appliance for the lowest-friction deployment.
  • Or, install the software on physical or virtual Linux appliances within your environment.
  • Zero-touch configuration provides automatic connectivity to the closest Cloudflare network location via Anycast-enabled routes and tunnels, leveraging your existing last mile Internet connectivity.
Read more about how Magic WAN works
RETIRE LEGACY HARDWARE

Built-in security

Magic WAN comes with Magic Firewall, a built-in software-defined network firewall part of Cloudflare’s SASE platform that applies packet filters and intrusion detection signatures for ingress and egress traffic. You can also layer in additional security capabilities like DNS filtering, Secure Web Gateway inspection, Remote Browser Isolation, DDoS protection, and more — all converged in Cloudflare’s connectivity cloud.

Ready to discuss your network connectivity needs?