No more typing reviews! Try our Samantha, our new voice AI agent.

Cisco Catalyst SD-WAN vs Juniper Contrail Networking comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cisco Catalyst SD-WAN
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
100
Ranking in other categories
Network Management Applications (5th), Software Defined WAN (SD-WAN) Solutions (2nd), WAN Edge (2nd)
Juniper Contrail Networking
Average Rating
7.4
Reviews Sentiment
5.6
Number of Reviews
4
Ranking in other categories
Software Defined Networking (SDN) (6th)
 

Mindshare comparison

While both are Enterprise Networking solutions, they serve different purposes. Cisco Catalyst SD-WAN is designed for Network Management Applications and holds a mindshare of 2.4%, up 2.0% compared to last year.
Juniper Contrail Networking, on the other hand, focuses on Software Defined Networking (SDN), holds 7.6% mindshare, up 6.3% since last year.
Network Management Applications Mindshare Distribution
ProductMindshare (%)
Cisco Catalyst SD-WAN2.4%
Cisco DNA Center8.7%
OpenText Network Node Manager5.4%
Other83.5%
Network Management Applications
Software Defined Networking (SDN) Mindshare Distribution
ProductMindshare (%)
Juniper Contrail Networking7.6%
Meraki SD-WAN11.7%
Cisco ACI9.1%
Other71.6%
Software Defined Networking (SDN)
 

Featured Reviews

ND
Network Manager at HPCL
Faced complex visibility and policy challenges but have improved basic traffic routing control
I have found some other solutions more insightful and user-friendly as compared to Cisco Catalyst SD-WAN, but the basic SD-WAN functionality is good enough. I am using it only because it was done as a pilot project, specifically for my 60 to 70 sites. For the majority of the sites, I am using Fortinet's Secure SD-WAN solution and I found that more viable and more in alignment with my requirements. For example, there is not any Internet Service Database available in Cisco Catalyst SD-WAN intrinsically. If I want to write a policy based on applications, I am not able to write it, at least in Cisco Catalyst SD-WAN Viptela deployment that we have done, and that is fairly easy to do in Fortinet. The second issue is the logging capability. I think the visibility that Fortinet Secure SD-WAN has is not even comparable. Cisco Catalyst SD-WAN does not provide that sort of insight or control as far as traffic steering is concerned. With respect to the SLAs, I barely know which sort of SLAs are violated in Cisco Catalyst SD-WAN, so I do not have clear visibility on where the traffic is moving from at my spoke or hub locations. I believe Fortinet gives me a very clear picture of where the traffic is going. Overall visibility, whether it is data traffic or logs, is much better in Fortinet compared to Cisco Catalyst SD-WAN. The complexity of Cisco Catalyst SD-WAN Viptela is noticeable and quite complicated to configure. If something breaks, you have to involve TAC and others to fix it. On the contrary, you can work with underlays. Even if your IPsec overlay tunnel is down, it does not impact your production. Thus, we find Fortinet's solution significantly better than Cisco Catalyst SD-WAN solution. I have used Application-aware Routing in Cisco Catalyst SD-WAN. However, I found it to be very complicated, especially regarding policy writing. For my breakout of VC traffic, we had to write a bunch of IP addresses for Zoom, Webex, and others. Presently, it can only identify Webex as an application, and I highly doubt whether there is any application identification for Zoom and other platforms, as we were not able to find it during our implementation. It is done through static whitelisting of the IPs, which is not a scalable solution since IPs can change at any time. Overall, the application-aware routing policies are not as flexible and scalable as the Internet Service Database feature of Fortinet provides. The struggles encompass policy writing, logging capabilities, traffic visibility, and complex configuration. There is also the issue of load balancing. We have faced considerable challenges with traffic load balancing between the links. Although the SLA targets are configurable, understanding how traffic flows is challenging, making troubleshooting exceedingly difficult. Overall, I find it a quite complicated solution with not that much operational usability.
TA
Solution Architect at ConnX Inc.
Smart configuration management eliminates the need to worry about managing the network's configurations
Based on my experience in the Indian market, there are four to five areas that need improvement. First, there is a lack of marketing and awareness about Juniper, making it difficult to reach end-users and deliver solutions. Second, Juniper's education and awareness centers are costly and not easily accessible like Cisco's resources and their understanding of users' requirements. The information is not easily available on online channels like Youtube. Third, Juniper needs to promote its Mist integration better, and pricing is also a significant factor. Finally, Juniper needs to address the market's specific requirements, such as the SME sector, and offer more lower-priced products like a lower-end segment switch. In summary, improving marketing and sales, education and awareness, Mist integration, pricing, and catering to specific market requirements are areas that need improvement. I just want a good feature in the SD-WAN. Juniper should consider integrating its firewall experience with its SD-WAN devices to create a complete package. With everything moving to the cloud, companies require intelligence and security solutions for their on-prem infrastructure. Moreover, Juniper should integrate its SOC solution into its Mist portal and SD-WAN devices, including IPs, IDS, web and content filters, and messaging. This would provide a complete product and give Juniper an advantage over competitors such as Cisco. I believe that with a bundle that includes SOC and UTM flavors in their Mist portal, Juniper can make a significant impact in the market.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Overall, I rate Cisco SD-WAN as nine out of ten."
"It is really easy to deploy and use. It is also easy to use for failovers and designing solutions. The rollout is really quick. It is easy to adjust and roll out."
"The integration of Layer 3 and application routing is great."
"The features that I like the most about Cisco Catalyst SD-WAN are that it is secure, cheaper, and once you know it, it's easy to deploy."
"So far, the feature that I like best is the policy configuration manager."
"I have been working with Cisco Catalyst SD-WAN for close to two and a half years now."
"Cisco SD-WAN is a good product."
"Configuration interfaces are quite easy and intuitive. Being a part of the Cisco environment, Cisco SD-WAN is quite straightforward."
"Juniper Contrail Networking is a stable solution."
"It provides proactive alerting in a single dashboard solution."
"After we finished setting Contrail up, it seemed stable enough."
"After we finished setting Contrail up, it seemed stable enough. Still, we never tested it in a real environment, so we don't have enough information to say whether it's stable with a given number of users and appliances. We have tested it in a lab environment, but we haven't tested enough to say that the platform is stable."
"Contrail automates the excellent communication between virtual appliances."
"Juniper Contrail Networking is low-cost for small and medium-sized businesses, and Cisco and Palo Alto solutions are more expensive."
 

Cons

"Compression deduplication should be added."
"The user interface needs improvement. Users should be able to find various features faster without much tweaking."
"The user interface needs to be more friendly."
"Its license model needs to be improved. They always make the license model too complex."
"The bandwidth limitations would be good to remove, but it is a policy and license situation for Cisco because the cost is very high. It would be good to have OTP implemented with VRF. It can have support for EIGRP Over the Top (OTP) VRF. I saw some limitations in regards to the VRF protocol and the advertisement between VRF configuration. EIGRP Over the Top basically was quite limited with the VRF configuration. If you wanted to do rollback in VRF by using the EIGRP OTP protocol, the formation was not populated across. Cisco got back and confirmed that it is a configuration that I need to wait for until the next release, which is going to happen in one year. Cisco documentation is not the way it used to be before. It just gives an easy way to configure, but it doesn't go into the details of the configuration. The information that you need is there, but sometimes you want to go further and get more information, but the information is quite limited. It would be good to cover a few business cases or configuration cases. They used to be there in the past."
"Cisco should focus more on making products that are convenient for users. Sadly, I think they are more interested in making money rather than making reliable products."
"An area for improvement lies in enhancing the integration with the security functions of the SD-WAN."
"Overall, I find it a quite complicated solution with not that much operational usability."
"Concerns were raised about the complexity of involving networking components like MX routers, which often required expertise beyond the scope of software engineers. As a result, users encountered challenges in achieving comprehensive understanding and troubleshooting of networking issues within the Contrail environment."
"Visibility, especially for the top of the platform, is a nightmare. The top was documented incorrectly and really complex to complete. In the end, it worked but only after several weeks of work with the support of a Juniper solution engineer in Holland."
"Juniper Contrail Networking is difficult if you do not have a certificate for Juniper. Juniper is a different type of configuration or operation than Cisco."
"Juniper needs to address the market's specific requirements, such as the SME sector, and offer more lower-priced products like a lower-end segment switch."
 

Pricing and Cost Advice

"For 600 links, the license for Cisco SD-WAN costs us US$250k a year."
"It is expensive. The license limitation is there in terms of bandwidth. Basically, Cisco is always good in terms of performance and related things. However, if you want to have a license, for example, for 100 Mbps, they charge you because of their 100 Mbps. If you want to go without the license of 300 Mbps, it is a bandwidth license as well. This is not happening with other vendors. That is the reason why we moved away from Cisco. The bill gets a little bit high. I do remember that one time we were trying to increase the bandwidth for at least five devices, and the license got as high as 20-grand for five devices, only for the license. It was expensive for us at the time. Our company is not a big company, but it is a solid company. The price was very high, and we moved away from Cisco because of the price."
"You can get subscriptions for three or five years."
"It is expensive."
"This is not a cheap option but if you move from Capex to Opex, I expect you should have lower costs."
"The costs are a bit on the high side."
"There is a monthly subscription to use this solution."
"The license model is too complex with too many flavors and options. You might not be able to see it from an end user's point of view, but from a telco point of view, their license model is too complex. They should have a flexible license model. If you want to have good pricing, you need to buy it for a two-year, four-year, or five-year license immediately. Some other vendors have much more flexible license models."
"Juniper Contrail Networking is low-cost for small and medium-sized businesses. Cisco and Palo Alto solutions are more expensive."
"There are many vendors in the wireless market that offer better pricing, solutions, and management skills compared to Juniper."
report
Use our free recommendation engine to learn which Network Management Applications solutions are best for your needs.
900,747 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
12%
Computer Software Company
7%
Construction Company
7%
Manufacturing Company
7%
Manufacturing Company
16%
Construction Company
10%
Computer Software Company
10%
Financial Services Firm
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business44
Midsize Enterprise15
Large Enterprise48
No data available
 

Questions from the Community

What is your experience regarding pricing and costs for Cisco SD-WAN?
My experience with pricing, setup cost, and licensing is that it is very tedious.
What needs improvement with Cisco SD-WAN?
For our environment, there are some bugs with how we interpret data in terms of circuit usage, for example. This has been on our to-do list for a while because it has been broken. We have not been ...
What is your primary use case for Cisco SD-WAN?
Cisco Catalyst SD-WAN has been in use for a year and a half, which is when we first started deploying it. We are now finalizing that deployment in our environment and are almost exclusively switchi...
Ask a question
Earn 20 points
 

Also Known As

Cisco SD-WAN
Contrail Networking
 

Overview

 

Sample Customers

Doyle Research, Ashton Metzler & Associates
Lithium Technologies, Orange Business Services, Cloudwatt, Symantec, Cloud Dynamics, CloudSeeds
Find out what your peers are saying about Cisco, Fortinet, Hewlett Packard Enterprise and others in Network Management Applications. Updated: June 2026.
900,747 professionals have used our research since 2012.