Understanding Citrix SD-WAN editions

Citrix SD-WAN is available in several editions, allowing you to deploy just the features your organization needs at each location, while allowing for easy upgrades as those needs change.

Standard Edition appliances  
Appliance 5100   4100
Model 5100-4000-SE 5100-5000-SE 5100-6000 SE 4100-2000-SE 4100-3000-SE
Total throughput3 8 Gbps 10 Gbps 12 Gbps 4 Gbps 6 Gbps
Max virtual paths (static/dynamic)
550/32
550/32
Appliance 2100 1100
Model 2100-0300-SE 2100-0500-SE 2100-01000-SE 2100-2000-SE 1100-200-SE 1100-300-SE
1100-500-SE
Total throughput3 600 Mbps 1 Gbps 2 Gbps
4 Gbps 400 Mbps 600 Mbps
1 Gbps
Max virtual paths (static/dynamic) 256/32
64/32
Appliance 410
210/210 LTE SE ( R1/R2/RC)
Model 410-050-SE 410-100-SE 410-200-SE 410-300-SE 210-020-SE 210-050-SE 210-100-SE 210-200-SE
Total throughput3 100 Mbps 200 Mbps 400 Mbps 600 Mbps 40 Mbps 100 Mbps 200 Mbps 400 Mbps
Max virtual paths (static/dynamic)  24/8 16/4
Standard Edition virtual appliances
Appliance VPX
Model VPX-020-SE VPX-050-SE VPX-100-SE VPX-200-SE VPX-500-SE VPX-1000-SE
Total throughput3 40 Mbps 100 Mbps 200 Mbps 400 Mbps 1 Gbps 2 Gbps
Maximum virtual paths 8 16 16 16 16 16
Hypervisor Citrix Hypervisor, VMWare, HyperV, KVM
Clouds1 AWS, Azure
Appliance VPX
Model VPX-L-020-SE VPX-L-050-SE VPX-L-100-SE VPX-L-200-SE VPX-L-500-SE VPX-L-1000-SE
Total throughput3 40 Mbps 100 Mbps 200 Mbps 400 Mbps 1 Gbps 2 Gbps
Maximum virtual paths 128 128 128 128 256 256
Hypervisor Citrix Hypervisor, VMWare, HyperV, KVM
Clouds1 AWS, Azure
Software Features
Application Performance Per Packet/App Steering, Packet Duplication, Packet Retransmissions, Dual-ended QoS, Application QoE, Per App Business Policies for over 4000 apps, Citrix HDX/ICA Integration
Authentication Local Database, RADIUS, TACACS+
Cloud WAN Azure Virtual WAN, Teridion
Configuration Zero Touch Deployment Service, GUI, Customizable Dashboards and Templates, REST API
Deployment In-line Overlay, One-armed Overlay, Edge Gateway, Cloud
High Availability Parallel Inline HA, Fail-to-Wire HA, One-Arm HA, VRRP, Geo-Redundant HA
Layer 2 VLAN (802.1Q), Bridging, SVI, PPPoE
Link Management Transport Agnostic, Bi-Directional Link Monitoring, Link Bonding, Metered Links, StandBy Links, Link of Last-Resort
Manageability SD-WAN Cloud Orchestrator, On-Prem SD-WAN Center, SD-WAN Center in AWS and Azure, CLI, SNMP V3, DHCP Server/Relay/Client, DNS Forwarder, Syslog, NetFlow, IPFIX, REST API
Mobile Broadband 3G/4G/LTE, Zero Touch Deployment over LTE, Authentication Types – PAP/ CHAP/ PAPCHAP, SIM lock/unlock,  Support for Antenna Extenders
Network Encryption

128 bit AES, 256 bit AES, IPsec

QoS Scheduling, Shaping, Classification, Remarking, HDX AutoQoS
Routing eBGP, iBGP, OSPF, Static, Multicast
SaaS/IaaS Optimized O365 Breakout, AWS, Azure
Security – Cloud Zscaler, Palo Alto Global Protect Cloud Service (GPCS)
Security – On-premises L4-7 Application Firewall, NAT, Secure Web Gateway Connectivity, FIPS Compliant
Tunnel Interfaces GRE, IPSec, Citrix Virtual Path

1 Cloud server types are the minimum recommended server size to support the listed performance numbers for each model.

3 Total throughput refers to total amount of bandwidth that the appliance model is licensed for, both upstream and downstream, and is based on AES-128 encryption.

Back to Standard Edition

Premium Edition appliances          
Appliance 5100 PE  
Model 5100-3000-PE  
Total  encrypted throughput3 6 Gbs  
Maximum virtual paths (static/dynamic)
550/32
 
Optimized WAN capacity4.5
500 Mbps
 
Maximum HDX CCUs6
750  
Maximum Accelerated TCP sessions7
60,000
 
Premium Edition appliances        
Appliance 2100-PE 1100-PE
Model 2100-300-PE 2100-500-PE 2100-1000-PE 1100-200-PE 1100-300-PE
1100-500-PE
Total  encrypted throughput3 600 Mbps 1 Gbps
2 Gbps 400 Mbps 600 Mbps 1 Gbps
Maximum virtual paths (static/dynamic)
256/32
64/32
Optimized WAN capacity4.5
50 Mbps
100 Mbps 100 Mbps 10 Mbps 20 Mbps 50 Mbps
Maximum HDX CCUs6
300 300 300 100 300 300
Maximum Accelerated TCP sessions7
20,000
10,000
Appliance 1000
Model 1000-010-EE 1000-020-EE 1000-050-EE 1000-100-EE
Total encrypted throughput3 20 Mbps
40 Mbps
100 Mbps
200 Mbps
Maximum virtual paths
16/8
Optimized WAN capacity4.5
4 Mbps 6 Mbps
10 Mbps 20 Mbps
Maximum HDX CCUs6
40 60 100 200
Maximum Accelerated TCP sessions7
10,000
Software Features
Application Performance Per Packet/App Steering, Packet Duplication, Packet Retransmissions, Dual-ended QoS, Application QoE, Per App Business Policies for over 4000 apps, Citrix HDX/ICA Integration
Authentication Local Database, RADIUS, TACACS+
Cloud WAN Azure Virtual WAN, Teridion
Configuration Zero Touch Deployment Service, GUI, Customizable Dashboards and Templates, REST API
Deployment In-line Overlay, One-armed Overlay, Edge Gateway, Cloud
High Availability Parallel Inline HA, Fail-to-Wire HA, One-Arm HA, VRRP, Geo-Redundant HA
Layer 2 VLAN (802.1Q), Bridging, SVI, PPPoE
Link Management Transport Agnostic, Bi-Directional Link Monitoring, Link Bonding, Metered Links, StandBy Links, Link of Last-Resort
Manageability SD-WAN Cloud Orchestrator, On-Prem SD-WAN Center, SD-WAN Center in AWS and Azure, CLI, SNMP V3, DHCP Server/Relay/Client, DNS Forwarder, Syslog, NetFlow, IPFIX, REST API
Mobile Broadband 3G/4G/LTE, Zero Touch Deployment over LTE, Authentication Types – PAP/ CHAP/ PAPCHAP, SIM lock/unlock,  Support for Antenna Extenders
Network Encryption

128 bit AES, 256 bit AES, IPsec

QoS Scheduling, Shaping, Classification, Remarking, HDX AutoQoS
Routing eBGP, iBGP, OSPF, Static, Multicast
SaaS/IaaS Optimized O365 Breakout, AWS, Azure
Security – Cloud Zscaler, Palo Alto Global Protect Cloud Service (GPCS)
Security – On-premises L4-7 Application Firewall, NAT, Secure Web Gateway Connectivity, FIPS Compliant
Tunnel Interfaces GRE, IPSec, Citrix Virtual Path

3 Total throughput refers to total amount of bandwidth that the appliance model is licensed for, both upstream and downstream, and is based on AES-128 encryption.

Back to Premium Edition appliances

WANOP Edition appliances
Appliance 5100 4100
3000
Model 5100-1500-WO 5200-2000-WO 4100-310-WO 4100-500-WO 4100-1000-WO 3000-050-WO 3000-100-WO 3000-155-WO
Optimized WAN capacity8,9 1.5 Gbps 2 Gbps
310 Mbps
500 Mbps
1 Gbps 50 Mbps
100 Mbps
155 Mbps
QoS/unaccelerated bandwidth limit 2 Gbps 4 Gbps 500 Mbps 1 Gbps 2 Gbps 500 Mbps
Maximum Accelerated TCP sessions11
120,000 160,000 40,000 60,000 120,000 50,000
Concurrent Citrix SD-WAN client plug-ins
3,600 4,800 1,100 1,800 3,600 750 1,000 1200
Video caching            
WCCP clustering  
Networking Cloud Connector      
Appliance 2000 1000
Model 2000-010 2000-020
2000-050
1000-006 1000-010 1000-020
Optimized WAN capacity8,9 10 Mbps
20 Mbps
50 Mbps 6 Mbps
10 Mbps
20 Mbps
QoS/unaccelerated bandwidth limit 200 Mbps
50 Mbps
Maximum HDX CCus10 100 200 300 60 100 200
Maximum Accelerated TCP sessions11 20,000 10,000
Concurrent Citrix SD-WAN client plug-ins 100
200 750  
Video caching
WCCP clustering
Networking Cloud Connector  
Group mode
Appliance 800
Model 800-002 800-006 800-010
Optimized WAN capacity8,9 2 Mbps
6 Mbps
10 Mbps
QoS/unaccelerated bandwidth limit 50 Mbps
Maximum HDX CCus10 20 60 100
Maximum Accelerated TCP sessions11 10,000
Concurrent Citrix SD-WAN client plug-ins  
Video caching
WCCP clustering
Networking Cloud Connector  
Group mode
WANOP Edition virtual appliances
Appliance VPX
Model VPX 2-WO VPX 6-WO
VPX 10-WO
VPX 20-WO
VPX 50-WO
VPX 100-WO
VPX 200-WO
Optimized WAN capacity16,17
2 Mbps 6 Mbps 10 Mbps 20 Mbps
50 Mbps 100 Mbps 200 Mbps
QoS/unaccelerated bandwidth limit 15 Mbps 50 Mbps 75 Mbps 150 Mbps 250 Mbps 250 Mbps 300 Mbps
Maximum HDX CCUs18
20 60 100 200 300 400 500
Total TCP sessions19 5,000 5,000 5,000 10,000 10,000 20,000 30,000
Concurrent Citrix SD-WAN client plug-ins
20 60 100 200 300 400 500
Video caching    
WCCP clustering        
Networking Cloud Connector20
Group mode
Hypervisor XenServer 5.5 - 6.2 , Hyper-V 2008R2SP1 - 2012 , ESX/ESXi 4.1-6.0
Processor Dual core (quad core recommended) Intel VTx or AMD-V 64-bit x86
Memory 6 GB 8 GB 16 GB
Virtual CPU 1 x Citrix Hypervisor
& 2 x Vmware
vSphere
(>2.33GHz)
2-4 x Citrix Hypervisor,Hyper-V & VMware vSphere (>2.33GHz) 2-4 x Citrix Hypervisor,
Hyper-V &
VMWare vSphere
(~3.0GHz)
Hard drive22
100
GB
100 GB 250 GB
250
GB
250
GB
500
GB
500
GB
Network interface 2 virtual NIC's
Component Name
Version/Model Language NSC EOS EOM EOL
Receiver for Blackberry** All Multiple 24-Sept-15 29-Feb-16 29-Feb-16 29-Feb-16

4, 8, 16 Only outbound WAN traffic is counted against the licensed bandwidth (Mbps or Gbps purchased). QoS and / or unaccelerated traffic do not count against the licensed bandwidth. Unaccelerated and QoS traffic can, however, impact the total amount of outbound accelerated traffic.

5, 9, 17 Some protocols (for example ICA) can limit the processing capacity of the appliance before the licensed bandwidth is reached.

14 User count is based upon a medium level workload as defined by Login VSI and Citrix Virtual Apps and Desktops / Citrix Virtual Apps advanced encryption security. User count is limited by link bandwidth and TCP session counts. No user count is enforced. Published numbers are for guidance purposes only.

15 TCP session count will be reduced by active HDX sessions. No session count is enforced. Published numbers are for guidance purposes.

16 Only outbound WAN traffic is counted against the licensed bandwidth (Mbps or Gbps purchased). QoS and / or unaccelerated traffic do not count against the licensed bandwidth. Unaccelerated and QoS traffic can, however, impact the total amount of outbound accelerated traffic.

17 Some protocols (for example ICA) can limit the processing capacity of the appliance before the licensed bandwidth is reached.

18 User count is based upon a medium level workload as defined by Login VSI and Citrix Virtual Apps and Desktops / Citrix Virtual Apps advanced encryption security. User count is limited by link bandwidth and TCP session counts. No user count is enforced. Published numbers are for guidance purposes only.

19 TCP session count will be reduced by active HDX sessions. No session count is enforced. Published numbers are for guidance purposes.

20 For Citrix SD-WAN appliances, the Networking Cloud Connector is delivered as a separate software appliance.

21 The VPX images are qualified to run on Intel processors only.

22 For best performance, use solid state drives or high IOPs storage devices.

26210-LTE-RC: EMC Certifications include CCC, NAL, SRRC – FCC (Part 15 Class A), CE, CITC, EAC, ENACOM, IFT 210-LTE-R2: EMC certifications include – FCC (Part 15 Class A), CE, Anatel, BIS, BSMI, CITC, EAC, ICASA, MIC, NTC, RAA, RCM

Back to WANOP Edition

Citrix SD-WAN on Azure

Citrix SD-WAN for Azure enables organizations to have a direct, secure, and high quality connection from each branch to the applications hosted in Azure, eliminating the need to backhaul cloud bound traffic through a data center.

benefits include

  • Create direct connections from every location to Azure
  • Ensure an ongoing reliable connection to Azure
  • Simplify your network without the need to provision VPNs
  • Extend your secure perimeter to the cloud with a single click

Model

Server

Total Licensed throughput

Virtual Paths

VPX, Standard Edition

D3_v2

40 Mbps

8

VPX, Standard Edition D3_v2

100 Mbps

16

VPX, Standard Edition D3_v2

200 Mbps

16

VPX, Standard Edition F8 400 Mbps
128

Citrix SD-WAN on AWS

The full suite of Citrix SD-WAN capabilities is available in a cloud environment to optimize and secure access to SaaS applications and IaaS instances.

Specs

  • Requires AWS EC2
  • Requires AWS Elastic Block Storage (EBS)
  • Available via AWS Marketplace or with Bring Your Own License

Benefits include

  • Create direct connections from every location to AWS
  • Ensure an ongoing reliable connection to AWS
  • Simplify your network without the need to provision VPNs
  • Extend your secure perimeter to the cloud with a single click

 

Model

EC2 instance type

Virtual WAN Total Throughput

Virtual paths 

Optimized bandwidth (Mbps)

Total TCP sessions

HDX CCUs

VPX, Standard Edition - BYOL
m4.2xlarge 40 Mbps up to 128 (depending on provisioned resources)
     
VPX, Standard Edition - BYOL
m4.2xlarge
100 Mbps
up to 128 (depending on provisioned resources)
     
VPX, Standard Edition - BYOL m4.2xlarge
200 Mbps
up to 128 (depending on provisioned resources)
     
VPX, Standard Edition - BYOL
m4.2xlarge
1 Gbps
up to 128 (depending on provisioned resources)
     
VPX, Standard Edition - BYOL
c4.2xlarge
2 Gbps up to 128 (depending on provisioned resources)
     
VPX, Standard Edition - BYOL
c4.4xlarge
2 Gbps up to 128 (depending on provisioned resources)
     

VPX, WANOP Edition

 m3.large

-

up to 128 (depending on provisioned resources)

2

5,000

20

VPX, WANOP Edition

 m3.large

-

up to 128 (depending on provisioned resources)

10

5,000

100

VPX, WANOP Edition

c3.xlarge / m3.large

-

up to 128 (depending on provisioned resources)

20

10,000

200

VPX, WANOP Edition

 c3.xlarge

-

up to 128 (depending on provisioned resources)

45

10,000

300

VPX, WANOP Edition - BYOL

-

-

up to 128 (depending on provisioned resources)

varies

Varies

varies

New in the latest release

  • Regional network control allows grouping of locations for scale and ease of management
  • New 210 appliance ideal for SO/HO
  • Multicast support added
  • Full set of APIs allows integration with orchestration
  • Contextual SaaS steering allows choice in where to direct SaaS traffic, including support for popular SWGs