The Best Product Portfolio for Multi-branch Network Solution

In today’s digital age, businesses are increasingly relying on reliable branch network solutions to ensure seamless connectivity across multiple locations. Whether you are managing a retail chain, a corporate enterprise, or a service provider with multiple branches, the right branch network can enhance operational efficiency, improve security, and provide superior customer experience. In this blog post, we will share with you the best product portfolio for FS multi-branch network solutions, guiding you through the selection process and highlighting key components to consider.

FS Multi-Branch Network Solution Overview

In large-scale networking scenarios involving branch chains or branch offices, branch networks need to connect to the Internet, headquarters, data centers (DC), or other branches. To ensure efficient, secure communication and data sharing between branches, as well as to meet current network trends and future demands, FS has introduced a comprehensive multi-branch network solution. This solution encompasses both headquarters and branch network segments.

Headquarters Network

For the headquarters, FS recommends a three-layer network architecture to improve scalability and performance, incorporating multi-chassis link aggregation (MLAG) for redundancy across different layers. The core layer utilizes high-performance S5860-48XMG core switches, while the aggregation layer consists of switches like the FS S5860-20SQ, seamlessly connected to the core using MLAG. At the access layer, FS S5810 series switches are deployed to connect terminal devices such as computers, APs, and surveillance cameras. These access switches are linked to the aggregation layer to ensure efficient data forwarding and minimize bottlenecks. To secure and reliably manage network egress at the headquarters, the NSG-5220 firewall is deployed to handle VPN and routing services, connecting downstream to the core switch.

Branch Network

At the branch office, a two-layer network structure is implemented to maintain simplicity and efficiency, with MLAG providing network redundancy. Depending on the branch scale and business needs, you can also use a three-layer network architecture or single-device networking. The access layer employs FS S5810 series switches to forward terminal device data to the S5860-20SQ aggregation layer switch. For the egress network, the NSG-3230 firewall is deployed to connect the branch network to the headquarters through multiple egress links.

This comprehensive network architecture ensures high redundancy, scalability, and security across both the headquarters and branch networks, effectively addressing current needs while being capable of accommodating future growth. And the solution uses PicOS® switches as a whole and is equipped with the AmpCon™ unified management platform that supports remote deployment and automated network management, which performs well in terms of capital expenditure and operating expenditure.

Key Components of Multi-Branch Network Solution

FS multi-branch network solution offers a comprehensive approach to managing and securing network operations across multiple locations. By integrating key components such as the PicOS® operating system, AmpCon™ automated management platform, next-generation firewalls, WiFi 6 access points, and security surveillance systems, this solution is designed to meet the challenges of the Mobile-Cloud and IoT era. The following sections will provide a detailed overview of the advantages of each component.

PicOS® Enterprise Switches

A cornerstone of the FS multi-branch network solution is the deployment of switches pre-installed with the PicOS® operating system. This strategic choice eliminates single-supplier dependency on critical networking infrastructure, allowing for a gradual and budget-friendly network upgrade. It also stands out by tightly integrated with Network Access Control Policy Manager to support comprehensive security mechanisms.

For the core layer of the headquarters network, S5860-48XMG switches with high port density are used, offering up to 760 Gbps switching capacity and 565 Mpps forwarding rate. Additionally, the S5860-20SQ switches, which have advanced routing capabilities and strong performance metrics, are selected as aggregation switches to aggregate traffic from the access layer and deliver it to the core. Both switches utilize Multi-Chassis Link Aggregation (MLAG) for redundancy, enhancing network resilience and uptime.

At the access layer, S5810-28TS and S5810-48TS-P switches are used, with the S5810-48TS-P model providing PoE+ support. This feature is particularly beneficial for powering devices such as IP phones, wireless access points, and security cameras directly through the network cable, simplifying infrastructure and reducing installation costs. These enterprise switches are equipped with Broadcom chips, delivering high-speed data transfer, low latency, and high throughput, making them ideal for branch network environments.

By integrating PicOS® switches into the branch network solution, FS delivers a scalable and high-performance network infrastructure that meets the evolving needs of modern enterprises. This approach not only enhances network efficiency and reliability but also ensures flexibility and cost-effectiveness in managing and upgrading network components.

AmpCon™ Management Platform

The AmpCon™ platform is specifically designed to manage PicOS® switches, providing a complete network management and operation solution with many unique advantages:

• Zero-Touch Provisioning: With its Push-Button Deployment capability, AmpCon™ radically simplifies the mass installation and configuration of PicOS® switches. Even non-technical employees can use Quick-Start Mode to deploy hundreds or thousands of switches at once using simple GUI-based English commands.

• Life-Cycle Automated Configuration Management: This feature allows updates to be pushed to a single switch or an entire group of switches. It eliminates the need to pull up and edit configurations one by one, reducing the potential for errors and streamlining the process with a single, centralized tool.

• Backups & Compliance: Automate configuration backups, operation logs, and compliance checks against a “golden config” with intelligent rollback to minimize errors.

• Switch Visibility: Provides comprehensive device status visualization, including port statistics and health checks, detailed inventories, network map views, and port-level details for individual switches.

• Agentless Automation: Write Ansible Playbooks to create and schedule customized workflows with easy-to-read reports, achieve automated configuration.

• PicOS-V Pre-configuration: AmpCon™ can be pre-configured with PicOS-V in virtualization scenario and then moved to the data center, ensuring smooth and efficient deployment.

  

By incorporating AmpCon™ into the FS branch network solution, businesses can achieve streamlined, error-free configurations, enhance network visibility, and ensure robust compliance, all while reducing the need for extensive technical expertise.

Next-Generation Firewalls

Look for next-generation firewalls (NGFWs) with integrated VPN and routing services to ensure secure and efficient data transfer between branches and headquarters.

To meet their respective security needs and operating environments, the headquarters deploys the high-performance NSG-5220 next-generation firewall, while the branch network utilizes the more cost-effective NSG-3230 next-generation firewall. The NSG-5220 is designed to handle a large amount of traffic, boasting a 20 Gbps firewall throughput and supporting up to 3 million concurrent sessions. This makes it ideal for network scenarios involving approximately 1,000 users. On the other hand, the NSG-3230 offers a 10 Gbps firewall throughput and supports up to 1.5 million concurrent sessions, making it suitable for environments with about 500 users.

Both NGFWs are equipped with advanced security features, such as advanced threat detection and prevention, and deep packet inspection (DPI). They provide comprehensive L2-L7 network security protection through IPS, AV, URL filtering, antivirus, and other cutting-edge technologies. These capabilities ensure that both the headquarters and branch networks are safeguarded against a wide range of security threats, maintaining the integrity and performance of the organization's network infrastructure.

Wireless Network

To support the growing demand for high-speed wireless connectivity, FS incorporates the AP-N515 WiFi 6 access points into its branch network solution. These APs feature 4x4 MU-MIMO, operating on both 2.4 GHz and 5 GHz bands with speeds up to 5375 Mbps. Built-in smart antennas enhance coverage and reliability, while the latest security protocols (WPA3, WIDS, RF interference tracking) ensure a secure network. The AP-N515 is versatile in mounting options, suitable for wall or ceiling installations, making it perfect for indoor environments like large campuses, conference centers, or other densely populated areas.

At headquarters, where high-density users and devices are common, deploying an access controller (AC) is crucial for centralized management and control of APs, as well as for connecting to the core network. The AC-7072 can manage up to 128 Wi-Fi 5/6 APs without requiring changes to the network architecture. This setup allows seamless wireless user roaming across different areas, maintaining security and session integrity. Features like fair bandwidth allocation and load balancing ensure a smooth network experience, meeting data interaction and voice communication needs efficiently.

Security Surveillance System

Surveillance systems play a crucial role in enhancing security for small and medium-sized enterprises as well as the retail and service industries. FS branch network solutions offers the IPC301-8M-T ultra-high-definition cameras, which come with impressive features such as 8MP resolution, 120dB WDR technology, 98-foot infrared night vision, and an IP67 rating. These capabilities allow the cameras to perform exceptionally well in challenging lighting conditions and environments, making them a versatile choice for a wide range of applications.

Additionally, with a network video recorder (NVR), you can record video from up to 8 cameras and expand storage capacity to as much as 20TB. The system offers multiple monitoring methods, including through web browsers, monitoring software, and mobile apps, ensuring management and monitoring are both straightforward and efficient.

By installing security cameras and NVRs, headquarters and branches can not only improve overall security, but also help improve work efficiency and service quality, and ensure the sustainable development of the enterprise.

Conclusion

Investing in the right network products not only meets current needs but also scales with future growth, providing a robust foundation for business operations. FS provides professional one-stop solutions, tailored to your unique business needs. If you’re in the market for a branch office solution, check out FS Multi-Branch Network Solution and contact our experts today to learn more. Not only will you benefit from robust, consolidated devices, you’ll discover effortless network management that puts you in control no matter where you are.

You may be interested in:

FS Multi-Branch Network Solution: How It Gets You to Ultra Unified Network Experience?

4 Challenges Multi-Branch Retail Networks Face and How FS Resolves Them

Ensuring Branch Office Security: A Deep Dive into FS Multi-Branch Network Solution