Private healthcare group evolves towards a secure and scalable SD-WAN network, optimizing availability across more than 30 clinical sites.

SUCCESS STORY

Leading diagnostic imaging provider

A private healthcare group with more than 30 comprehensive diagnostic centers across different regions of the country has carried out a network infrastructure transformation project.

With more than four decades in the sector, the company stands out for its commitment to technological innovation, medical excellence, and improving the patient experience.

It offers advanced imaging services, digital pathology, and artificial intelligence integration to accelerate workflows and improve diagnostic accuracy.

Thanks to this technological evolution, the organization is now prepared to manage the growth of clinical data, address inter-site connectivity challenges, and ensure seamless operational continuity.

The challenge

Ensuring 24/7 clinical availability in a highly distributed environment

The healthcare organization faced the challenge of consolidating a network infrastructure capable of supporting its territorial growth across 34 medical sites and two interconnected data centers.

In this highly digitalized clinical environment, each center depends on secure, fast, and stable connectivity to operate critical healthcare information systems, transmit high-resolution diagnostic studies (CT, MRI, ultrasounds), and collaborate in real time with professionals located in other sites.

The context required a network architecture that:

  • Guaranteed 24/7 availability across all locations, with zero tolerance for failure due to the critical nature of clinical services.
  • Ensured the reliability of the communications system, eliminating the network as a potential point of failure in the event of an incident.
  • Provided minimal latency and optimal performance for transferring large medical images, accelerating diagnostic reporting.
  • Enabled the agile integration of new sites through a scalable, secure, and centrally managed architecture.

The objective was clear: to unify, secure, and scale the network in order to maintain operational excellence and quality of care, ensuring service continuity in the face of any incident without compromising clinical response times.

The solution

Multi-site SD-WAN deployment with cloud management and integrated security

Instel designed and implemented a comprehensive solution based on HPE Aruba Networking SD-WAN technology, featuring centralized cloud management and advanced automation, security, and resilience capabilities.

Strategic design and deployment of multi-site SD-WAN network

A software-defined network was deployed to prioritize clinical traffic and ensure stable, continuous connectivity between all sites and data centers:

  • Deployment of Aruba EdgeConnect gateways across 34 sites and two data centers (primary DC + DR).
  • Automatic prioritization of clinical traffic to optimize service performance and speed.
  • Dynamic load balancing and immediate failover across multiple WAN links for maximum availability and continuity.
  • Zero Trust WAN architecture with encryption, authentication, and segmentation by application, user, and location.
Centralized management and intelligent orchestration

The solution is managed from the cloud through specialized platforms that provide visibility, control, and automation:

  • Aruba Central. A cloud platform for unified management and real-time monitoring of devices across the 34 sites and data centers. It enables the application of consistent network policies and the automation of quality of service.
  • Aruba Orchestrator. An advanced SD-WAN orchestration platform that manages performance and security, with automatic prioritization of critical traffic, dynamic load balancing across WAN links, and traffic segmentation to enhance both security and performance.
Integrated security and end-to-end encryption

The solution ensures secure communications between all clinical sites and data centers without the need for additional layers:

  • Robust traffic encryption using standard and advanced protocols, ensuring confidentiality and protection of data in transit.
  • Effective segmentation of clinical, administrative, and guest traffic.
  • Use of secure protocols and mechanisms compliant with healthcare sector regulations and standards.
  • Secure and audited management of ports and consoles, enabling controlled device administration.
Physical infrastructure optimized for clinical environments

The network infrastructure at the sites was upgraded with managed switches and Wi-Fi 6 access points, optimized for clinical environments with high connectivity demands.

  • HPE Aruba switches deployed across the sites based on their size and role within the network.
  • HPE Aruba access points installed in areas requiring mobility and reliable wireless connectivity.
  • High-performance transceivers and cabling (up to 100 Gbps) to support the transmission of large medical imaging files.

Benefits

Corporation
  • 24/7 care continuity guaranteed. The fault-tolerant architecture removes the network as a critical point of failure, ensuring continuous clinical availability.
  • Connectivity cost optimization. Reduced reliance on infrastructures such as MPLS without compromising performance or security, optimizing network investment in the medium and long term.
Clinical operations
  • Faster diagnostics. Medical images are transferred between sites in real time, accelerating report generation and improving patient care.
  • Uninterrupted service. The network ensures stable and predictable communications, eliminating incidents that could impact clinical operations.
IT Department
  • Rapid deployment of new sites. The SD-WAN infrastructure enables new locations to be integrated quickly and in a standardized way, without the need for complex physical deployments or manual reconfiguration.
  • Centralized visibility and control. The entire network is managed from a single cloud console, improving operational efficiency and reducing the risk of human error.
  • Security without added complexity. End-to-end encryption, traffic segmentation, and regulatory compliance are built into the infrastructure, with no need for additional solutions.
  • Reduced operational workload. Deployment automation and configuration replicability free up the IT team to focus on higher-value strategic tasks.

Technology Partners

Posted in Success stories