CIOPages
All RFP packages

RFP Package · Foundational IT & Infrastructure

Cloud Networking & SD-WAN RFP questions and template

122 questions, 9 demo scenarios and a five-vendor scorecard for choosing Cloud Networking & SD-WAN software, in one Excel workbook.

Buy the workbook, from $499Read sample questions

What this package is for

Use it to run a Cloud Networking & SD-WAN software selection, from the first long list to the final scorecard.

What the category covers. 122 questions for buyers replacing MPLS and VPN with SD-WAN and cloud-delivered security, in 12 areas from path selection and points of presence to ZTNA, one policy model, automation and MPLS migration. Most deep-dive questions are tests on the buyer's own sites with full inspection turned on, with every target left for the buyer to set.

A selection usually runs in three rounds. The package has questions for each:

  • RFI, to the long list. 24 questions screen out products that lack something you need.
  • RFP, to the shortlist. 63 questions ask how each product does the work.
  • Deep dive, to the finalists. 35 questions ask for proof on your own data.

9 demo scenarios tell each vendor what to load and what to show, so every product does the same work in front of you. 90 due-diligence questions cover security, integration, implementation and exit. The scorecard weights the answers and ranks up to five vendors.

Each question comes with why it matters, what a good answer looks like and the red flags, so the people scoring the replies know what to look for.

3 questions from the package

From the RFI round. The first shows part of the guide each question carries; the workbook adds follow-ups, how to verify the answer, a priority and a weight.

1. Which path-steering modes does your edge support for a single application flow across MPLS, broadband, and LTE/5G links (for example per-session selection, per-packet load sharing, packet duplication)?

Why it matters. If the product steers only per session, a degraded path keeps carrying a live call until the session ends or a failover triggers. The buyer then cannot protect voice and video on poor links.

Good answer
  • Names each supported mode and the conditions under which it applies
  • Shows that the mode is assigned per application or application class in policy
  • States which modes work on each underlay type (MPLS, broadband, LTE/5G)
Red flags
  • Describes "intelligent steering" without naming the modes
  • Per-packet modes require a separate appliance or add-on that is not stated up front
  • The mode can only be set for the whole site, not per application

2. List the dynamic routing protocols your edge can run with our LAN-side routers and core switches (for example BGP, OSPFv2, OSPFv3), giving the address families supported for each.

Why it matters. If the edge cannot exchange routes dynamically with the buyer's existing routers, every site needs static routes. Those routes must be maintained by hand and drift out of step with the network as subnets change.

3. List the branch edge form factors you offer, including physical appliance models and virtual edge images, naming the hypervisors each virtual image supports.

Why it matters. If the form factors do not match the buyer's site types, such as small kiosks, large branches and sites with existing server hosts, the buyer buys extra hardware or runs a second edge product at some sites.

Capability areas

Application-Aware Path Selection & WAN Performance (12)

Application identification, per-packet and per-session steering across MPLS, broadband, and LTE/5G underlays, failover timing, forward error correction, and loss, latency, and jitter remediation for voice and video. Excludes PoP backbone routing, which is covered under Points of Presence & Backbone.

Routing, Segmentation & Network Interoperability (9)

Dynamic routing interoperability with existing networks, overlay topologies, and segmentation for IoT, guest, and regulated traffic, including how segments map to security zones. Excludes cloud-specific connectivity and MPLS cutover sequencing.

Branch Edge, Underlay & Zero-Touch Provisioning (11)

Branch appliance and virtual edge form factors, site high availability, integrated cellular underlay, and zero-touch provisioning from templates at branch scale. Excludes orchestrator APIs and infrastructure-as-code coverage.

Points of Presence & Backbone (10)

PoP locations relative to our sites and clouds, private backbone versus public internet transport, PoP failover behavior, in-country egress for residency, and measured latency from our geography. Excludes data-layer residency of logs and stored data, which is covered by the data-protection module.

Multicloud & SaaS Connectivity (9)

Extending the fabric into public cloud networks, cloud and SaaS on-ramps, virtual edges in IaaS, and steering to priority SaaS applications. Excludes private-application access for remote users, which is covered under Zero Trust Network Access.

Firewall-as-a-Service, TLS Inspection & Threat Prevention (10)

FWaaS and branch firewall rules, TLS decryption and exception handling, IPS and malware prevention, and measured throughput and latency with full inspection enabled. Excludes web, SaaS, and data-loss controls.

Secure Web Gateway, CASB & Data Loss Prevention (11)

URL and content filtering, inline and API-based SaaS controls, shadow IT discovery, and DLP detection and enforcement across branch and remote traffic. Excludes the vendor's own handling of our data.

Zero Trust Network Access & Remote Access (12)

Agent-based and clientless ZTNA, per-application least-privilege access, identity and device-posture conditions, unmanaged-device access, and private-application access across data centers and clouds without backhaul. Excludes generic SSO and SCIM connectivity, which the integration module covers.

Unified Policy Model & Management Console (9)

Whether networking and security share one policy model, one data pipeline, and one console, plus role-based administration, policy versioning, and how cleanly a best-of-breed SD-WAN integrates with a third-party SSE. Excludes API and infrastructure-as-code automation.

Orchestration, API & Infrastructure-as-Code Automation (9)

API and infrastructure-as-code coverage of network and security policy, configuration templating, change validation and rollback, and audit of automated changes. Excludes zero-touch device onboarding.

Visibility, Digital Experience Monitoring & AIOps (10)

Path, application, and security telemetry, digital experience monitoring for branch and remote users, root-cause analysis across network and security layers, and log export to our monitoring tools. Excludes AI governance topics, which the AI modules cover.

Brownfield Coexistence & MPLS Migration (10)

Running SD-WAN in parallel with existing MPLS and legacy routers, route exchange and traffic steering between fabrics, per-site cutover and rollback, unified visibility during hybrid operation, and site validation against a baseline. Excludes professional-services scope and project methodology.

Demo scenarios

Each scenario lists the data to load before the demo, then the steps to show, and the questions it scores.

  1. Full inspection at a branch through the nearest PoP
  2. Primary broadband loss during a live voice call
  3. New branch on cellular from an unconfigured edge
  4. Contractor clientless access and a failed posture check
  5. One security policy change for branches and remote users
  6. Nearest PoP outage for branch and remote users
  7. MPLS site cutover with route exchange and rollback
  8. Root cause of a slow SaaS video call
  9. Fabric extension into a public cloud network

Due diligence

The workbook carries the screening questions from these modules. Each module is also sold on its own.

Questions about this package

How many Cloud Networking & SD-WAN RFP questions are there?

122 solution questions in 12 capability areas: 24 for the RFI, 63 for the RFP and 35 deep-dive questions for the finalists. The workbook adds 90 due-diligence questions on security, integration, implementation and exit.

What comes with each question?

Why it matters, good-answer signals, red flags, follow-up questions, how to verify the answer (a demo step, a test or a document), and a suggested priority and weight for scoring.

Can I edit the questions?

Yes. The workbook is an ordinary Excel file. Change, add or remove questions, and change the weights; the scorecard recalculates.

Which license do I need?

The Enterprise License covers any number of evaluations inside one organization. The Consultancy License covers use with any number of clients. Neither allows reselling or republishing the questions.

Before you shortlist

The buyer guide compares the products in this category and what decides between them.

Buyer Guide
Cloud Networking & SD-WAN