SD-WAN for Retail Chains: Keeping Every Store Online, From Flagship to Pop-Up

Written by DigitalWell | Oct 15, 2026, 10:19:52 AM

A retail estate is rarely one kind of site. A chain might run a three-floor flagship, 40 high-street shops, a dozen concessions inside other retailers, a warehouse, and a pop-up that exists for six weeks before Christmas. Each one needs card payments, phones and cloud systems to work. Each one has a different connection, a different landlord and a different tolerance for downtime.

 

The right SD-WAN provider for a retail chain gives every store format one central policy, the best available circuit at each address, automatic failover to a second line or 4G/5G, and a repeatable template so a new store opens connected on day one.

TL;DR

  • SD-WAN puts every store on one managed policy, whatever the underlying circuit.
  • Different store formats need different connection designs. A concession inside another retailer can't use the host's network for card payments.
  • Look for sub-second failover, carrier choice per site, central management and a documented new-store template.

What does SD-WAN do for a retail chain?

SD-WAN (software-defined wide area network) is a managed layer that sits above each site's internet or MPLS circuits and controls how traffic is routed across them, from a central console. For a retailer, it means every store follows the same security and routing rules, and the network team changes them once rather than store by store.

 

DigitalWell's SD-WAN service uses centrally managed FortiGate appliances at each site. Application-aware routing sends cloud apps via the fastest path and sensitive traffic via the most secure path. With dual internet circuits and optional 4G/5G, a failing link hands over to the backup in under a second, handled locally by the appliance.

How should each store format be connected?

The store's format determines the design. The table below sets out a starting point for the most common retail formats.

 

Store format

Typical connection challenge

Recommended design

Failover

What matters most

Flagship or large store

High traffic: tills, signage, staff devices, customer WiFi, events

Dedicated internet access plus a second circuit on a different carrier

Automatic, second circuit

Capacity and segmentation

Standard high-street store

One broadband line, limited upload

Business broadband plus 4G/5G backup

Automatic, cellular

Card payments and phones staying up

Shopping centre unit

Landlord controls ducting and access

Circuit ordered early, with cellular as interim and backup

Automatic, cellular

Lead time and access

Concession inside another retailer

Host's network can't be used for your payments

Own circuit or dedicated cellular, fully separate from host

Cellular or second line

Separation from the host network

Pop-up or seasonal site

Open for weeks, not years

4G/5G primary with the standard SD-WAN policy

Second SIM or carrier

Speed to open and close

Warehouse or distribution centre

Stock systems, scanners, large data transfers

Dedicated line, possibly with MPLS for critical systems

Second circuit

Uptime of stock and order systems

 

Concessions deserve special attention. A coffee counter inside a supermarket, or a brand counter in a department store, is on someone else's premises. Running card payments over the host's WiFi mixes two companies' traffic and complicates PCI DSS scope for both. A separate circuit or a dedicated cellular connection keeps the concession on its own network, with the same policy as the rest of the estate.

 

Insomnia is a useful reference. Its estate of over 170 shops includes partnerships inside retailers such as SPAR, EUROSPAR, Londis, Mace and Eason. DigitalWell rolled out high-speed WiFi, DSL, and new routers across more than 76 locations, with automated backup in place if a fixed line fails, as the Insomnia case study describes.

Why is failover the feature that matters most in stores?

Because a store with no connection can't trade normally. Card terminals time out, loyalty points don't apply, and the phone stops ringing.

 

Brendan Power at DigitalWell describes the retail reality:

 

"With a lot of the retail shops, if something goes wrong, your tills don't work... you can't have any transactions." Brendan Power, DigitalWell

 

Failover on its own isn't enough if it takes minutes. Sub-second failover means a card payment in progress completes on the backup line. It also needs testing. Ask the provider to pull the primary circuit at a live store, out of hours, and show you what happens.

What should a retailer look for in an SD-WAN provider?

Six things separate a provider that can run a retail estate from one that can connect a head office.

 

Carrier choice per site. No single carrier has the best line at every address. DigitalWell sources circuits from over 20 last-mile operators across Ireland and picks the best one for each site.

 

One console for every store. Firmware, fault resolution, policy changes and monitoring should all happen centrally, with your IT team able to see everything.

 

A new-store template. Opening a store should be a repeatable deployment: same policy, same appliance configuration, same console.

 

Security at the edge. Encryption, network segmentation and firewall policy should be part of the managed service, with documented SLAs you can show a PCI DSS assessor or cyber insurer.

 

A route off MPLS, if you have it. DigitalWell can overlay SD-WAN on existing MPLS without changing the contract, then move traffic to internet circuits when the MPLS term ends. DigitalWell states that SD-WAN over dual internet circuits typically costs 40 to 60% less than equivalent MPLS bandwidth.

 

One contract with voice. If the same provider runs the store phones and SIP trunks, a call quality fault has one owner. DigitalWell's Intelligent Network puts managed WAN, carrier voice and numbering in one relationship.

How does an SD-WAN rollout across a store estate work?

A rollout usually runs in waves. This sequence keeps the risk low and the learning early.

 

  1. Survey the estate. List every site, its format, its current circuit, contract end dates and who controls access.
  2. Group stores by format. Use the table above to assign a design to each group.
  3. Pilot two or three stores. Pick different formats, including one with a known connection problem.
  4. Test failover live. Pull the primary circuit and watch payments and calls.
  5. Fix the template. Adjust policy and appliance configuration based on the pilot.
  6. Roll out in waves. Group stores by region or format, avoiding peak trading weeks.
  7. Hand over monitoring. Agree alert thresholds and response times per store type.
  8. Use the template for every new site, including pop-ups.

Does SD-WAN help with PCI DSS?

It helps with the network side. The PCI Data Security Standard applies to every system that handles cardholder data and anything connected to it. SD-WAN appliances can segment card terminals from customer WiFi, signage and staff devices, which shrinks the part of the network in scope. Segmentation is also what makes concessions workable without touching the host's network.

 

It doesn't replace the rest of PCI DSS. Terminals, payment providers and processes still need their own controls.

What happens when stores open, move or close?

Retail estates change every year, and the network has to keep up without a project each time.

 

Opening a store is the case SD-WAN handles best. The appliance ships with the estate's standard configuration, the circuit is ordered for that address, and cellular covers the gap if the fixed line is late. On DigitalWell's platform, a new site is a repeatable deployment: same policy, same console, from the first trading day.

 

Moving a store is mostly a circuit problem. Order the new line as early as the lease allows, because landlord access and ducting set the lead time. The appliance and its policy move with the store.

 

Closing a store needs a clean exit: circuit cancellation in line with the contract, the appliance returned or redeployed, and the site removed from monitoring so it doesn't generate false alerts. A provider managing the whole estate should handle all three as one request.

 

Seasonal sites sit between the two. A pop-up that opens in November and closes in January can run on cellular for its whole life, with the same security and routing rules as a permanent store.

How does the store network affect AI and cloud tools?

Every cloud tool a store uses depends on the connection: cloud POS, stock lookups, staff scheduling apps, video briefings and AI Voice Agents answering customer calls. If the link is slow or drops, all of them degrade together.

 

That's why the network belongs in any conversation about store technology. DigitalWell's AI Voice Network and store phones run over the same managed network as the tills, and the Retail page shows how connectivity, contact centre and AI fit together across a store estate.

Frequently Asked Questions

How many stores do we need before SD-WAN makes sense?

DigitalWell deploys it for estates from 3 sites to 50 and beyond. The benefit grows with the number of sites, because every change is made once.

Can a pop-up store run on 4G or 5G alone?

Yes, for many pop-ups. A cellular primary with the standard SD-WAN policy gets the site trading quickly, and a second SIM or carrier covers failover.

Do we have to leave our MPLS contract?

No. SD-WAN can be overlaid on existing MPLS with no contract change, and traffic moved to internet circuits later.

Who manages the appliances?

With DigitalWell's managed service, DigitalWell handles design, provisioning, firmware, monitoring, fault resolution and change requests. Your IT team keeps full visibility.

What contract terms are typical?

DigitalWell's standard SD-WAN term is three years on an opex model, with hardware, support and management included. A capex option is available.

Key Takeaways

  • A retail estate mixes formats, and each format needs its own connection design under one central policy.
  • Concessions need their own connection, separate from the host retailer's network.
  • Sub-second, tested failover is what keeps tills and phones working when a line drops.
  • Carrier choice per site, one console, a new-store template and voice under the same contract separate retail-ready providers.
  • Roll out in waves, starting with a pilot across different formats.

 

Planning a network refresh across your stores? Book a site-by-site assessment with DigitalWell and get a design for each store format in your estate.