Question

A retail company with 40 branch sites uses Google Workspace (Gmail, Drive, Meet) as its primary SaaS productivity suite. Users at branches report slow file uploads and choppy video calls when all SaaS traffic is backhauled over MPLS to a central data center before reaching the internet. The network team wants an architecture that improves the user experience for this Google SaaS traffic while keeping security policy enforcement. Which approach best meets the requirement?

Accepted Answer

Enable Direct Internet Access (DIA) with application-aware routing on the branch SD-WAN edge to break out Google Workspace traffic locally toward the nearest Google front-end

Answer

Provision a dedicated Google Cloud Interconnect circuit from each branch to a Google colocation facility for all Workspace traffic

Answer

Continue backhauling all traffic to the data center but increase the MPLS bandwidth to eliminate congestion

Answer

Establish an IPsec site-to-site VPN from each branch directly into a Google Cloud VPC hosting the Workspace tenant