Become an
Internet Solutions
Reseller with Netify

How do BT leased lines compare with Broadband?

While Broadband may now offer similar download speeds, BTnet leased lines provide a dedicated circuit that is installed directly to your business with symmetrical upload and download speeds. As the BTnet service is a dedicated connection, you are not sharing the service with other customers at the circuit level which helps improve latency and jitter at the same time as avoiding congestion. Broadband customers connect to an aggregated bandwidth point which is shared and engineered across their customer base. In comparison, BT leased lines do not shared connectivity between customers.

Comparison of BT Leased Lines vs BT Broadband

The Internet is an integral tool for all businesses as the enabler to collaboration and Cloud-based applications. With high speed FTTP (Fibre to the Premises) with bandwidth of up to 900Mbps is available, many businesses to wonder why they need to spend on a leased line service which is considerable

Netify's SD-WAN & SASE Network Security BlogRobert Sturt

As you will read in this article, BTnet offers the option of Meraki Cybersecurity which includes malware protection, breach detection, firewall capability, content filtering, web filtering and endpoint protection. And while BT Broadband does offer security, the features are not comparable to Meraki.

What is the BT leased line target SLA availability?

BTnet aims for 100% target availability with 24/7 support if general support is required for the leased line service. Their aim is to fix faults within five hours regardless of the time of day or night. If an outage occurs, BT provide a money-back credit as part of their commitment to maintaining their 100% target service level availability.

It is worth knowing that the maximum compensation in a quarter is capped at the equivalent of ten days rental charge. If you order resilient circuits and experience an outage, BT will adjust the rental charges for both your main and backup connections.

In terms of installation lead-time SLA, BT will confirm the CCD (Committed Delivery Date) once they have completed your initial site survey. The site survey is conducted by Openreach to understand the level of work required to deliver your BTnet circuit. In some instances, excess construction charges (ECC's) may apply depending on the engineering tasks needed to install your leased line. Any ECC's are disclosed at site survey stage - at this point, you can cancel the service without penalties if the costs are too high.

In the case of complex deliveries, BT may not be able to provide a CCD. Instead, they'll will provide you with an expected completion date (ECD) - note that these scenarios are not covered by the BT service level agreement (SLA).

BT consider the service delivered once they have provided the managed customer premises equipment (CPE) with configuration and service tests to ensure the circuit is connected. If BT fail to meet the CCD, they will provide on-time delivery service credits. This means you will receive a discount on the connection charge based on the delay in delivery. The reduction in connection charges will be as follows:

What support do BT leased lines offer? BTnet support is provided via their dedicated phone line on 0808 100 2440 which is available 24/7.

What Cybersecurity is offered with BT leased lines?

One of the options for BTnet leased lines is Meraki Cybersecurity which has fast become essential due to the rise of cyber threats and data breaches-robust security measures are crucial for any business.

BT with Meraki offers malware protection to protect your network from harmful software that could compromise your data or cause general disruption. The BTnet Meraki malware capability is constantly monitoring for potential threats at the same time as providing real-time protection and alerts so your business can take immediate action to mitigate any risks.

In addition to BTnet malware protection, Cisco Meraki Security also includes breach detection capabilities. This means that any breaches in your network security will be quickly detected which enables you to respond and take action as required. By identifying potential threats on an almost realtime basis, you can minimise the impact and prevent any further damage.

Another important feature of BTnet Cisco Meraki Security is its firewall capability. The Meraki firewall prevents unauthorised access to your network by blocking specific traffic based on type - e.g. port number or application type.

BTnet Meraki Security offers content filtering and web filtering features allowing you to control access to potentially harmful websites and content which ensures that your employees are only accessing safe and appropriate content during work hours.

With BYoD (Bring your own device), Cisco Meraki Security is necessary to secure endpoints which includes mobiles, tablets and laptops. The Meraki capability is designed to secure entry points so that all devices are protected against potential vulnerabilities.

With malware protection, breach detection, firewall capability, content filtering, web filtering and endpoint protection, Meraki offers a complete security solution in partnership with BTnet leased lines.

What SLA do BT Leased Lines offer?

BTnet offers a Service Level Agreement (SLA) that guarantees 100% availability of the service, subject to the terms of the agreement. If there is an outage, BTnet will reduce your rental charge for the service by one day's rental charge per hour of downtime. The maximum reduction applied per quarter will be capped at ten hours of outage which is equivalent to ten days' rental charge for your service.

BTnet also guarantees an average round-trip transmission time of 20 milliseconds or less between BT core PoPs (Point of Presence). For the transatlantic network connection, the latency guarantee is an average round-trip transmission time of 95 milliseconds or less between designated transit routers at each end of the transatlantic link.

If BTnet does not meet the latency guarantee for two consecutive months, they will provide a discount equivalent to one day's rental charge for your service.

Table of Key Points

How does Cloud Voice (VoIP) work with BT leased lines?

BT leased lines offer a dedicated and symmetrical connection, meaning that the upload and download speeds are the same (unlike Broadband). This ensures that even if upstream bandwidth is constrained, your Cloud Voice calls are not. impacted. In addition, the performance of leased lines offers the best possible latency and jitter with the BTnet 100% uptime guarantee.

One key enabler to Cloud Voice is the ability to prioritise voice traffic which also ensures optimal call quality. BTnet QoS positions businesses to allocate a specific percentage of bandwidth for voice traffic which translates to a consistent calling experience. This ensures that voice calls are given priority over other types of internet traffic, such as file downloads or video streaming.

What bandwidth options are available with BT leased lines?

BT provides scalable bandwidth options that allow businesses to easily adjust their connection speed as requirements evolve. BTnet leased lines offer lower bandwidth options starting from as low as 100 Mbps through to load balanced 10 Gbps circuits.

If your business demands more bandwidth due to larger team sizes, frequent use of cloud applications or the need for high-quality video conferencing, BTnet leased lines also provide higher bandwidth options with the flexibility to tailor their connection to their specific needs. This ensures that you are not paying for more bandwidth than you require or experiencing any performance issues due to insufficient capacity.

Is load-balancing available with BT leased lines?

BT leased lines offer load balancing options to help businesses optimise their network by distributing network traffic evenly across dual leased lines. If one leased line experiences an outage, the traffic can be automatically redirected to other available line which ensures uninterrupted connectivity.

We touched on this within the Cloud Voice section earlier, BTnet is also available with Meraki Intelligent single site SD WAN which enables your business to prioritise certain types of traffic, i.e. Voice vs Email. This ensures that critical applications receive the necessary bandwidth and quality of service to deliver a smooth and seamless user experience.

What BT leased line resilient and diverse options are available?

The first resilience option (RA01) offered by BT encompasses a service that includes a dual fibre connection with auto-changeover hardware. This service ensures uninterrupted customer service by automatically rerouting network traffic to an alternate fibre service via a distinct routing path within 50 milliseconds should there be a fibre failure.

The second resilience option (RA02) provided by BT comprises a resilience service that features two distinct connections commissioned using end-to-end path separation. This service guarantees continuous customer service by maintaining functionality even in the event of a fibre and/or hardware failure.

Robert Sturt

Managing Director

Robert Sturt is a leading expert in SD-WAN and enterprise network solutions with extensive experience in telecommunications and network infrastructure. As a Forbes Business Council member and contributor to TechTarget, he provides strategic insights on network transformation and digital connectivity solutions. His expertise spans SD-WAN implementation, network security, and enterprise digital transformation initiatives.

LinkedIn • Forbes • TechTarget

Fact-checked by: Harry Yelland - Cybersecurity Writer, Netify

A BTnet Leased Line offers unrivalled speed, bandwidth, and reliability, which makes the service a good choice for businesses that rely heavily on internet connectivity.

With one of the best Service Level Agreements (SLA) across all leased line providers, businesses experience high uptime with single circuits or even improved uptime with dual resilient, diverse circuits.

Why Choose BTnet?

BTnet is typically chosen by SMEs and large Global Enterprise businesses because of three main value-add areas:

1. The BTnet Service Level Agreement
2. Cybersecurity partnerships with Cisco Meraki and Fortinet
3. UK, European, and BT Global Services IP Backbone
4. No 1 rating by Netcraft
5. Brand recognition and trust

REASON	DETAIL	BUSINESS BENEFIT
BTnet Service Level Agreement	Guarantees across uptime, network performance, fix times, and delivery with money-back credits	Financial compensation if targets are missed; 5-hour fix time
Cybersecurity partnerships	Cisco Meraki and Fortinet – threat protection, virus scanning, firewall, web filtering, and WiFi	Integrated security managed via BT-provided web portal without third-party procurement
BT IP Backbone	UK, European, and BT Global Services network – traffic stays on a single network with fewer hops	Better Cloud, Voice, and Video application performance
Netcraft No 1 rating	Recognised as the No 1 leased line provider by Netcraft	Independent validation of network performance
Brand recognition and trust	BT brand with Gartner Magic Quadrant recognition for the Global IP network	Confidence for procurement and stakeholder sign-off

We’ll discuss the BT Leased Line SLA in more detail within this article, but in short, the SLA provides guarantees across uptime, network performance, fix times, and delivery.

BT’s partnership with Meraki and Fortinet offers much-needed threat protection, virus scanning, Firewall, and web filtering. In addition, choosing Meraki means your business is also provided with strong WiFi performance which is easily managed and monitored using the BT-provided web portal.

Perhaps one of the overlooked areas when customers consider BTnet is the backbone coverage (i.e., their IP network). The majority of your traffic will remain on the BT backbone, which results in better network performance because traffic does not need to traverse multiple hops (or rather, multiple networks). The result is simply better Cloud application performance, especially for Voice or Video and any application which requires fast responses.

Netcraft is recognised as the No 1 leased line provider, which provides further confidence across capability especially when combined with the overall BT brand recognition.

Bandwidth Comparison with Broadband

BTnet Leased Lines offer a speed advantage when compared to traditional broadband connections. Although FTTP (Fibre to the Premises) is capable of matching download speeds up to 900Mbps, the upload bandwidth is much lower. With BT Leased Lines, bandwidth is symmetrical so you’ll receive the same upload and download performance.

BTnet Leased Line vs FTTP Broadband – Bandwidth Comparison

ATTRIBUTE	FTTP BROADBAND	BTNET LEASED LINE
Maximum download speed	Up to 900Mbps	Up to 10Gbps
Maximum upload speed	Much lower than download	Symmetrical – same as download speed
Bandwidth type	Asymmetrical (download faster than upload)	Symmetrical (equal upload and download)
Infrastructure	Shared (contended with other users)	Dedicated (uncontended, single customer)
Circuit bearer sizes available	N/A	Up to 1Gbps and 10Gbps bearers
SLA-backed performance guarantees	Typically not included	Yes – uptime, latency, jitter, fix times guaranteed with service credits
Network performance (latency, jitter, packet loss)	Variable – affected by contention and shared infrastructure	Improved – dedicated circuit eliminates contention

The maximum upload/download speed achievable on a BTnet circuit depends on the circuit bearer. BTnet offers circuit sizes of up to 10Gbps, which in turn determine the service bandwidth (or port speed) and ultimately the service speed on offer.

Overall, BT’s BTnet Leased Line delivers an improved internet connection experience, with greater bandwidth flexibility and symmetrical upload and download speeds. These features make it an attractive option for businesses looking to upgrade from traditional broadband.

Cost and Pricing

When pricing BTnet, customers need to consider their options as follows:

• The BTnet edge device – you can choose from standard Cisco routers, Meraki, or Fortinet edge devices with Cybersecurity options.
• Bandwidth – all circuits are now delivered on 1Gbps circuits (10Gbps is available) with the initial tier starting at 100Mbps.
• Resilience and diversity – BTnet can be architected with no single point of failure by using 2 diversely routed Openreach circuits which are designed with complete separation (subject to survey).

BTnet Leased Line Pricing Examples (via Network Union BT Partnership)

CONTRACT TERM	BANDWIDTH	ROUTER	MONTHLY COST
3 years	100Mbps	Cisco 800Mb router	£325
5 years	1Gbps	Cisco up to 1Gb router	£495
3 years	500Mbps	Cisco Meraki 1Gb router	£535
5 years	500Mbps	Cisco Meraki 1Gb router	£470

BTnet Leased Line Pricing Factors

COST FACTOR	DETAIL
Edge device choice	Standard Cisco routers, Cisco Meraki, or Fortinet – each with different cybersecurity capabilities and price points
Bandwidth tier	Circuits delivered on 1Gbps bearers (10Gbps available), starting from 100Mbps
Resilience and diversity	Optional dual diversely routed Openreach circuits for no single point of failure (subject to survey)
Excess construction charges (ECC)	Openreach currently covers the first £2,800 of excess charges; additional costs depend on site survey results
Contract term impact	Longer terms (e.g. 5 years vs 3 years) typically reduce the monthly cost
Installation costs	Vary depending on site survey; must be factored into total cost of ownership

For standard pricing examples, The Network Union BT Partnership is able to provide a 3-year contract term with a bandwidth of 100Mbps using a Cisco 800Mb router; the monthly cost is £325.

Similarly, for a 5-year contract term with a bandwidth of 1Gbps using a Cisco up to 1Gb router, the monthly cost is £495.

In addition to the Cisco routers, BTnet Leased Line also provides options for Cisco Meraki routers. For example, a 3-year contract with 500 Mbps bandwidth using a Cisco Meraki 1Gb router is priced at £535 per month. As a comparison, the same bandwidth and router option for a 5-year contract is priced slightly lower at £470 per month.

It is essential to factor in any potential installation costs when considering the leased line total cost of ownership. These costs may vary depending on whether the site survey results require additional excess construction charges. Openreach currently covers the first £2800 of excess charges.

BTnet Leased Line Failover Options: Protection against unforeseen circuit breaks with a second circuit option

Where maximum uptime is a must-have feature, BT offers a number of options to create an architecture which includes no single point of failure.

Failover: This feature activates if the main circuit fails, providing continuous connectivity. Openreach delivers a second circuit that takes over when the primary circuit fails, which allows businesses to maintain connectivity in the event of an issue with the primary circuit.

Load Balancing: With this option, both circuits are active and traffic is load balanced evenly across both circuits. If one circuit fails, the other takes the full load, which ensures that businesses can maintain their connectivity without disruption.

BTnet Failover Modes

FAILOVER MODE	HOW IT WORKS	BOTH CIRCUITS ACTIVE?	WHAT HAPPENS ON FAILURE
Failover (active/standby)	Second Openreach circuit activates automatically if the primary circuit fails	No – standby circuit activates on failure only	Standby takes over; continuous connectivity maintained
Load Balancing (active/active)	Traffic is distributed evenly across both circuits at all times	Yes – both circuits carry traffic simultaneously	Surviving circuit takes the full load without disruption

BT’s BTnet Leased Line also provides Five Ways to Strengthen Connection for added resilience:

1. Backup Equipment: BT sets up two devices for each circuit with two connection points providing redundancy in case one device fails or is accidentally disconnected.
2. Diverse Routing: The two circuits enter the building via different routes which offers added protection against potential breaks in the line.
3. Exchange Resilience: Circuits originate in different exchanges to protect against rare exchange failures that could affect connectivity.
4. Site Diversity: Circuits can be taken into different office buildings sharing a local network, offering added resilience in case a single building experiences an issue.
5. Core Networking Routing Diversity: Circuits are kept separate within BT’s core network to ensure optimal resilience and protection.

BTnet Five Ways to Strengthen Connection – Resilience Layers

#	RESILIENCE LAYER	WHAT BT PROVIDES	WHAT IT PROTECTS AGAINST
1	Backup Equipment	Two devices per circuit with two connection points	Device failure or accidental disconnection
2	Diverse Routing	Two circuits enter the building via different physical routes	Cable breaks or damage to a single entry path
3	Exchange Resilience	Circuits originate from different BT exchanges	Rare exchange failure affecting connectivity
4	Site Diversity	Circuits taken into different office buildings sharing a local network	Single building outage (fire, flood, power loss)
5	Core Networking Routing Diversity	Circuits kept separate within BT’s core network	Core network path failure

By offering a range of failover options, BT’s BTnet Leased Line ensures that businesses can maintain a reliable and resilient internet connection even when the primary circuit suffers a complete outage.

BT RO2 (Resilience Option 2), formerly known as RAO2 (Resilient Access Option 2), is BT’s solution for providing BTnet leased line circuit diversity.

Where possible, Openreach will utilise dual building entry points, but many structures, especially listed ones, offer only one entry.

Tail circuits, extending from the building to the BT Exchange, benefit from the use of dual Exchanges for enhanced resilience. However, shared cable ducts can pose challenges, sometimes necessitating innovative solutions which include overhead fibre options from Openreach.

The primary objective of BT RO2 is to eliminate any single point of failure from the customer’s premises to the edge of BT’s network. True 100% uptime cannot be assured without an initial site survey.

BT RO2 (Resilience Option 2) – Key Facts

ATTRIBUTE	DETAIL
Full name	BT RO2 (Resilience Option 2), formerly RAO2 (Resilient Access Option 2)
Purpose	Eliminate any single point of failure from customer premises to the edge of BT’s network
Building entry	Dual building entry points used where possible; some structures (especially listed buildings) offer only one entry
Exchange diversity	Tail circuits benefit from dual BT Exchanges for enhanced resilience
Known challenges	Shared cable ducts may require innovative solutions including overhead fibre from Openreach
100% uptime guarantee caveat	True 100% uptime cannot be assured without an initial site survey

Choosing BTnet Leased Line Cybersecurity options

BTnet Leased Line offers enhanced security with their Cisco Meraki solutions.

BTnet Meraki Firewall capability

The BTnet Meraki cloud-based management capabilities enable automation features, real-time monitoring, and scheduled updates to ensure company-wide security policies are upheld.

The BTnet and Meraki solution provides Layer 7 traffic classification and control, analysing network traffic through advanced fingerprinting and categorising each flow for enforcement based on access control policies. BTnet with Meraki firewalls includes both wired and wireless firewalls and is renowned for exceptional security features and capabilities.

BTnet Meraki firewalls are 100% cloud-managed with Layer 7 application visibility, advanced traffic shaping, identity-based policies, web caching, and auto VPN self-configuration. Technical specifications include a stateful firewall throughput ranging from 250Mbps to 6Gbps VPN throughput suitable for a wide range of clients and advanced security throughput up to 4Gbps.

The Meraki MX series also supports dual-band channels, 1G/10G fiber and copper interfaces with geo-based IP firewalls. BTnet customers are able to buy BT SD-WAN which enables the Meraki MX to manage multiple hub locations with distributed branches and campuses, allowing for cloud security management from a singular location.

The zero-touch management feature ensures that all Meraki firewall models can be remotely installed, configured, and managed, which reduces the need for physical interventions to further protect against security risks.

BTnet Meraki Firewall – Technical Specifications

SPECIFICATION	DETAIL
Management model	100% cloud-managed
Traffic classification	Layer 7 application visibility with advanced fingerprinting
Stateful firewall throughput	250Mbps to 6Gbps
VPN throughput	Up to 6Gbps
Advanced security throughput	Up to 4Gbps
Firewall types	Both wired and wireless firewalls
Interfaces	1G/10G fibre and copper with dual-band channels
Key features	Advanced traffic shaping, identity-based policies, web caching, auto VPN self-configuration, geo-based IP firewalls
SD-WAN integration	BT SD-WAN enables Meraki MX to manage multiple hub locations with distributed branches and campuses from a single location
Deployment model	Zero-touch management – remotely installed, configured, and managed with no physical intervention required

BTnet Meraki Threat Protection

BTnet leased lines with CISCO Meraki include advanced threat protection features which include the Sourcefire SNORT intrusion detection engine and AMP anti-malware technology depending on the licence (these features require Advanced).

The Advanced Malware Prevention (AMP) inspects HTTP file downloads, blocking or allowing based on threat intelligence from the AMP cloud. The system also provides options to deal with false positives, allowing administrators to whitelist specific URLs or files. Intrusion Detection and Prevention are key components which inspect all traffic between LAN and the internet and between VLANs.

There are three detection rulesets:

• Connectivity
• Balanced
• Security

BTnet Meraki Threat Protection Features

FEATURE	TECHNOLOGY	WHAT IT DOES	LICENCE REQUIRED
Intrusion Detection	Sourcefire SNORT engine	Inspects all traffic between LAN and the internet and between VLANs	Advanced
Anti-malware	AMP (Advanced Malware Prevention)	Inspects HTTP file downloads; blocks or allows based on AMP cloud threat intelligence	Advanced
Intrusion Prevention	SNORT signatures	Automatically protects the network; administrators can specify protected networks and whitelist specific SNORT signatures	Advanced
False positive handling	AMP whitelist	Administrators can whitelist specific URLs or files to deal with false positives	Advanced
Security Reporting	BTnet Meraki portal	Visual representation of intrusion detection events categorised by signatures, networks, and clients	Advanced

BTnet Meraki SNORT Detection Rulesets

RULESET	DETECTION LEVEL	THREATS DETECTED
Connectivity	Baseline – minimal false positives, prioritises network availability	Known high-confidence threats
Balanced	Moderate – balances security coverage and network performance	Broader threat coverage including common malware
Security	Maximum – most comprehensive detection	Malware, SQL injections, exploit kit activities, and advanced threats

These rulesets are designed to detect various threats, including malware, SQL injections, and exploit kit activities. For more on this, the NCSC provides excellent guidelines on malware protection.

BTnet Meraki supports intrusion prevention which automatically protects the network—administrators can also specify protected networks and whitelist specific SNORT signatures. A comprehensive Security Report is available via the BTnet Meraki portal which offers a visual representation of intrusion detection events, categorised by signatures, networks, and clients.

BTnet Meraki Web filtering

Meraki also offers Web Filtering – this feature enables organisations to block specific website categories based on their policies and also offers the flexibility to block or allow individual websites.

For example, while blocking the “Internet Communications” category, exceptions can be made for specific sites – gmail.com or facebook.com. Configurations for content filtering are accessible under Security & SD-WAN > Configure > Content filtering enabling you to block website categories, URL category list size, web search filtering, and restricted YouTube content.

Specific URL patterns can be blocked or allowed and the system supports IP addresses in these fields – BTnet Meraki also supports HTTPS filtering. Additionally, group policies can be applied based on Active Directory user groups which means you can configure tailored network experiences. The content filtering prioritises blocked and allowed URL patterns followed by group policy rules and then global content filtering rules.

This hierarchical structure ensures that specific URL exceptions override broader category-based rules, ensuring precise content control. This advanced content filtering is available exclusively with the Advanced Security Edition licensing.

BTnet Meraki Web Filtering Capabilities

CAPABILITY	DETAIL	LICENCE REQUIRED
Category blocking	Block entire website categories with per-site exceptions (e.g. allow gmail.com within blocked “Internet Communications” category)	Advanced Security Edition
URL pattern filtering	Block or allow specific URL patterns; supports IP addresses	Advanced Security Edition
HTTPS filtering	Supported – filters encrypted web traffic	Advanced Security Edition
YouTube restriction	Restricted YouTube content filtering available	Advanced Security Edition
Web search filtering	Available via content filtering configuration	Advanced Security Edition
Active Directory integration	Group policies applied based on AD user groups for tailored network experiences	Advanced Security Edition
Configuration path	Security & SD-WAN > Configure > Content filtering	Advanced Security Edition

BTnet Meraki Content Filtering – Priority Order (Highest to Lowest)

PRIORITY	RULE TYPE	DESCRIPTION
1 (highest)	Blocked and allowed URL patterns	Specific URLs or IP addresses explicitly blocked or allowed – overrides all other rules
2	Group policy rules	Policies applied based on Active Directory user groups
3 (lowest)	Global content filtering rules	Broad category-based blocking with site-level exceptions

The BTnet SLA (Service Level Agreement)

The BTnet Leased Line SLA includes guarantees around service delivery and network performance with money-back credits provided as compensation if BT doesn’t meet these standards.

During the installation process, BT commits to delivering the service on or before the customer committed date (CCD) which is confirmed after a survey. In cases involving excess construction charges (ECC) or complex deliveries, a CCD might not be provided and an expected completion date (ECD) is given instead.

It’s important to note that these scenarios aren’t covered by the SLA. Service delivery is considered complete once the managed customer premises equipment (CPE) and the dedicated circuit connecting the site to BT’s network are provided.

If BT fails to meet the CCD, on-time delivery service credits are provided which reduces the connection charge based on the delay. The reductions are as follows:

• 1-10 working days: 5%
• 11-15 working days: 10%
• 16-20 working days: 15%
• More than 20 working days: 20%

BTnet SLA – Late Delivery Service Credits

DELAY BEYOND CUSTOMER COMMITTED DATE (CCD)	CONNECTION CHARGE REDUCTION
1–10 working days late	5%
11–15 working days late	10%
16–20 working days late	15%
More than 20 working days late	20%

BT aims for a 100% service availability target. In case of an outage, rental charge reductions are provided based on the outage duration:

• Up to 10 hours of outage: Equivalent to one day’s rental charge per hour of downtime.
• Maximum reduction per quarter is capped at ten hours of outage.

BTnet SLA – Outage Compensation

SLA METRIC	TARGET	COMPENSATION	CAP
Service availability	100%	One day’s rental charge per hour of downtime	Maximum 10 hours of outage compensation per quarter

BT also provides a latency guarantee which is calculated as the average of round-trip transmission measurements taken in ten-minute intervals during a month. Results are available on www.bt.net. The latency guarantees vary based on the network:

• UK core network: Average round-trip transmission time of 20 milliseconds or less.
• Transatlantic network: Average round-trip transmission time of 95 milliseconds or less.

BTnet SLA – Latency Guarantees

NETWORK	LATENCY GUARANTEE (AVERAGE ROUND-TRIP)	MEASUREMENT METHOD	COMPENSATION IF MISSED
UK core network	20 milliseconds or less	Average of round-trip measurements taken in 10-minute intervals over a calendar month	One day’s rental charge discount if missed for two consecutive months
Transatlantic network	95 milliseconds or less	Average of round-trip measurements taken in 10-minute intervals over a calendar month	One day’s rental charge discount if missed for two consecutive months

BTnet SLA – Complete Summary of All Guarantees

SLA AREA	GUARANTEE	CREDIT / COMPENSATION	KEY CONDITIONS
On-time delivery	Delivery on or before customer committed date (CCD)	5%–20% reduction in connection charge depending on length of delay	CCD confirmed after survey; ECC or complex deliveries may receive an ECD instead (ECD not covered by SLA)
Service availability	100% target	One day’s rental charge per hour of downtime	Maximum compensation capped at 10 hours of outage per quarter
UK core latency	≤20ms average round-trip	One day’s rental charge discount if missed for two consecutive months	Measured in 10-minute intervals; results published on www.bt.net
Transatlantic latency	≤95ms average round-trip	One day’s rental charge discount if missed for two consecutive months	Measured in 10-minute intervals; results published on www.bt.net
Fix time	5-hour fix time target	Covered under availability SLA compensation	Support available via live chat, phone, or email
Service delivery completion	Managed CPE and dedicated circuit provided	N/A – defines when SLA begins	Service considered live once CPE and circuit connecting site to BT’s network are in place
Credit payment method	N/A	Applied as reduction in rental charges within next two billing cycles	Disputes must be notified in writing within two months of invoice date

Understanding network latency is critical for evaluating these figures.

If the latency guarantee isn’t met for two consecutive months, a discount equivalent to one day’s rental charge for the service is provided.

Agreed reductions in charges due to the SLA will be paid as a reduction in rental charges, typically within the next two billing cycles. Any disputes concerning the application of the SLA to charges must be notified in writing within two months of the invoice date.

Flexibility and Scalability

BTnet Leased Line provides options for Managed SD-WAN capability which transforms the Meraki solution into a VPN between branch-office, HQ sites, and remote users. The BT SD-WAN service is delivered as a co-managed or fully managed service depending on requirements.

Scalability is also a significant advantage offered by the BTnet Leased Line. The service provides access to speeds ranging from 10Mb to 10Gb, catering to various bandwidth requirements of different business needs. As a company expands and its internet demands increase, upgrading the service is straightforward with a simple change required to increase bandwidth.

BTnet Flexibility and Scalability Features

FEATURE	DETAIL	BENEFIT
Managed SD-WAN	Transforms Meraki into a VPN between branch offices, HQ sites, and remote users	Secure connectivity across multiple locations from a single management platform
SD-WAN management options	Co-managed or fully managed service depending on requirements	Flexibility to retain control or fully delegate to BT
Speed range	10Mb to 10Gb	Caters to businesses of all sizes from SME to large enterprise
Bandwidth upgrade process	Simple change required – no new circuit installation needed	Straightforward scaling as business demands increase

Internet Access and Applications

Cloud Applications

With the consumption of Google Workspace, Microsoft Azure, Amazon Web Services (AWS) or multi-cloud (combination of Cloud services) providers, BTnet is an important enabler to application performance.

The global reach of the BTnet backbone means your Internet traffic will remain on a single network (i.e., the BT network) when destined to one of the Cloud vendor data centre locations.

With BTnet’s latency and jitter SLAs, users are able to work via Cloud applications without network delay.

VoIP Technology

In addition to supporting cloud applications, BTnet is optimised for voice traffic which includes BT’s Cloud Voice and SIP services. Again, low latency network and local QoS (Quality of Service) results in excellent voice and video performance. For a deeper understanding of voice protocols, you can read about SIP Trunking.

Cloud and Voice Applications Supported by BTnet

APPLICATION TYPE	EXAMPLES	HOW BTNET HELPS
Cloud platforms	Google Workspace, Microsoft Azure, Amazon Web Services (AWS), multi-cloud	Traffic stays on BT backbone to cloud vendor data centres – fewer network hops, lower latency
Voice (VoIP)	BT Cloud Voice, SIP services	Low latency network and local QoS prioritisation for voice and video traffic
Video conferencing	Any real-time video application	SLA-backed latency and jitter guarantees ensure consistent, delay-free performance

BTnet Leased Line – VoIP and Network Performance Attributes

ATTRIBUTE	HOW BTNET LEASED LINES HELP
Bandwidth	Stable, high-speed dedicated connection with a 100% uptime guarantee
Latency	Dedicated connectivity ensures low latency (≤20ms UK core, ≤95ms transatlantic)
Jitter	Stable connection guarantees low jitter (consistent spacing between data packets)
Packet Loss	Superior reliability significantly reduces the chances of packet loss
Encryption	Robust encryption techniques to secure call data (requires correct Meraki capability purchase)
Authentication	Verification of call participants for enhanced security
Quality of Service (QoS)	BTnet prioritises voice and video traffic over other data
Server Locations	Wide network infrastructure ensures optimal server locations to reduce latency

BTnet Leased Line vs Competitors

BT’s BTnet leased line service offers several advantages over competing ISPs which include Virgin Media, Colt, and TalkTalk as primary competitors. It is always wise to consult the regulator, Ofcom, for the latest market reports.

BTnet Leased Line vs Competitors – Provider Comparison

PROVIDER	CYBERSECURITY	SLA	UNIQUE FEATURES	AWARDS
BT (BTnet)	Advanced threat intelligence, cloud security, and managed firewall services via Cisco Meraki and Fortinet	Up to 100% availability with compensation for any downtime	Direct cloud connectivity, 5G-ready, BTnet resilience options (RO2), SD-WAN	Recognised by Netcraft as the No 1 leased line service in the UK
Virgin Media	Built-in Cisco cybersecurity	99.85% service availability with 24/7 monitoring	Symmetrical speeds, dedicated internet access, future-proof and flexibility with add-ons	Described as having an award-winning global network
Colt	Emphasis on the security and reliability of their leased line connections	Guaranteed 99.99% SLA	High-speed connectivity, global network coverage, 24/7 customer support, cloud prioritisation	Described as having an award-winning global network
TalkTalk	Advanced firewall and DDoS protection	100% availability SLA with compensation for any downtime	Direct peering with major cloud providers, full-fibre Ethernet and dedicated internet access	Multiple industry awards for their Ethernet products

UK Leased Line Provider SLA Comparison

PROVIDER	AVAILABILITY SLA	DOWNTIME COMPENSATION
BT (BTnet)	100% target	One day’s rental per hour of downtime (capped at 10 hours per quarter)
Virgin Media	99.85%	Not specified in this comparison
Colt	99.99%	Not specified in this comparison
TalkTalk	100%	Compensation for any downtime

It is essential to note that the best leased line provider for one business may not necessarily be the most suitable choice for another. In this regard, factors such as pricing, customer service, and additional features should also be taken into account when comparing ISPs like TalkTalk, Virgin Media, and Colt.

Conclusion

There are a number of reasons to choose a BTnet leased line. The first and primary reason is to avoid the shared infrastructure of the Broadband network which essentially means your network performance is improved across latency, jitter, and packet loss due to the dedicated nature of leased lines. The second reason is symmetrical bandwidth; you’ll receive the same upload bandwidth vs download which is a marked difference from Broadband. The third is the BTnet SLA which offers 5-hour fix times and service credits if an outage occurs. The fourth is the capability to architect a service which is built with no single point of failure, subject to survey. The fifth and final reason is the recognition by Netcraft which has awarded BTnet as the number 1 performing leased line service in the UK.

Summary – Five Reasons to Choose a BTnet Leased Line

#	REASON	DETAIL
1	Dedicated infrastructure	Avoids shared broadband network – improved latency, jitter, and packet loss performance
2	Symmetrical bandwidth	Same upload and download speeds – a marked difference from broadband
3	BTnet SLA	5-hour fix times and service credits if an outage occurs
4	No single point of failure	Architecture with complete circuit separation available (subject to survey)
5	Netcraft No 1 rating	Awarded as the number 1 performing leased line service in the UK

Robert Sturt

Managing Director

Robert Sturt is a leading expert in SD-WAN and enterprise network solutions with extensive experience in telecommunications and network infrastructure. As a Forbes Business Council member and contributor to TechTarget, he provides strategic insights on network transformation and digital connectivity solutions. His expertise spans SD-WAN implementation, network security, and enterprise digital transformation initiatives.

LinkedIn • Forbes • TechTarget

Fact checked by: Harry Yelland - Cybersecurity Writer, Netify

Frequently Asked Questions

BTnet Leased Line – Frequently Asked Questions

QUESTION	ANSWER
How does BTnet pricing compare to other providers?	BTnet is a premium service and not the lowest cost option. Pricing depends on business location vs nearest PoP (Point of Presence). The SLA, cybersecurity features, and brand justify the additional cost.
What level of support does BT provide for leased lines?	5-hour fix time with support available via live chat, phone, or email.
How reliable is BTnet Leased Line?	BT Global IP network recognised by Gartner as a Magic Quadrant leader. 100% uptime guarantee with failover circuits and complete separation available (subject to survey).
Is BTnet suitable for residential homes?	Designed for businesses only. Installation at a home address is technically possible but will incur considerable excess construction charges.

Understanding the end-to-end delivery workflow of a BTnet leased line helps IT decision-makers manage project timelines.

The installation process involves a coordinated effort between BT and Openreach, moving through distinct phases: site feasibility, legal permissions, civil engineering, and final network configuration.

While the standard lead time is often quoted as 60-90 working days, the reality depends heavily on the specific hurdles identified during the initial survey. This guide breaks down the technical and logistical steps of the BT leased line installation process, detailing how diversity options, wayleave agreements, and CPE selection impact your go-live date.

BT Leased Line Installation Phases Overview

Phase	Responsible Party	Key Activities	Common Delay Factors
Site Survey	Openreach	Feasibility assessment, diversity checks, circuit path planning	Complex site geography, waterways, motorways
Planning Permissions & Wayleaves	Openreach / Landlord	Wayleave agreements, listed building permissions, environmental checks	Landlord negotiations, legal term adjustments, incomplete paperwork
Civil Engineering	Openreach	Trench digging, duct work, fibre pulling/blowing, splicing	Street works licence delays, road closures, burst water mains
CPE Installation	BT	Router selection, device configuration, IP addressing	Equipment availability, complexity of configuration
Circuit Configuration & Testing	BT	Bit error rate testing, latency measurement, routing protocol setup	Internal network configuration issues
Security & Firewall Setup	BT / Customer	IPS configuration, firewall rules, malware scanning setup	Custom security policy requirements

Once you have ordered your leased line service, Openreach will be requested to complete an initial site survey to understand the work required to connect your site through to the local BT PoP. At this point in the order journey, you are able to cancel the order if the site survey shows significant work is required that might delay your order and subsequently add costs to your leased line.

The site survey will also determine whether or not any requested diversity options are deliverable. For example, if you have ordered Secure Plus (which provides dual tail circuits and diverse PoP locations), Openreach will need to check the feasibility of delivering the required solution. In some instances, road closures may be required, or it may actually be impossible to deliver the separation mandated. Depending on where you are located, there could even be waterways or motorways that stop your circuit from progressing quickly. You may also need a street works licence before certain civil works can commence. Whatever the results of your survey, BT will work to plan your circuit path and routing to ensure the quickest possible installation of the service. In conclusion, the initial site survey is an essential component of the BT leased line installation process. It aims to ascertain the project’s feasibility, pinpoint potential hurdles, and gather vital information for planning and carrying out the installation.

BT Leased Line Site Survey – Key Checks

Survey Check	Purpose	Potential Outcome
Circuit path feasibility	Determine physical route from customer premises to local BT PoP	Route confirmed or alternative path required
Diversity option assessment (e.g. Secure Plus)	Verify dual tail circuits and diverse PoP locations are deliverable	Diversity confirmed, modified, or deemed undeliverable
Geographical obstacles	Identify waterways, motorways, or terrain issues affecting routing	May require road closures or extended civil works
Street works licence requirement	Determine if public highway excavation permits are needed	Licence application may extend lead time
Excess construction charges	Estimate additional costs for non-standard installation work	Customer may cancel order if costs are prohibitive

Planning Permissions and Wayleave Agreements

Planning and wayleave requirements typically arise when cables must be laid across any area that demands a structural alteration. For example, permission is required for the installation of poles, masts, or other structural alterations to listed buildings. There are numerous guidelines here, including ensuring there is no negative impact on the environment.

The biggest delays typically occur when a landlord is required to sign wayleave agreements to begin work – there is often a need to adjust legal terms and conditions, and the landlord will want to consider the implications.

Importance of obtaining planning permissions and wayleave agreements, if needed, before installation can proceed.

Openreach will apply for the relevant planning permission before any work to physically install the leased line can take place. This planning process is critical for moving forward as soon as possible to avoid significant delays caused by planning compliance disputes, or simply by incomplete paperwork. Although the process is not controlled by the customer, speaking to your landlord will help to alleviate any concerns. Further guidance on wayleaves is available from Openreach’s official wayleave guidance.

Planning Permissions and Wayleave Scenarios

Scenario	Permission Required	Typical Delay Risk
Cable laid across third-party land	Wayleave agreement signed by landlord	High – legal terms often require negotiation
Installation of poles or masts	Planning permission	Medium – depends on local authority processing times
Structural alteration to listed buildings	Listed building consent	High – heritage regulations apply
Environmental impact areas	Environmental compliance checks	Medium – must demonstrate no negative environmental impact

Civil Engineering Work

Civil works can include digging trenches to contain cabling and fibre-optic lines. Applying for the relevant permissions to excavate pavements, roads, and even private land can be problematic and time-consuming, particularly where public highway works require a formal permit or licence such as a street works licence. Once permission is granted, civil work can also take time to organise and plan, with delays often caused by other issues that may occur, such as burst water mains.

Fibre-optic cables are pulled or blown through existing ducts connecting the BT exchange to the customer premises. Adding a second circuit for diversity and resilience can be time-consuming; to ensure diversity, cabling may be required across poles, or additional routes may need to be created, depending on whether or not the customer is willing to pay excess construction charges. The splicing of existing fibre to new fibre is also required, but the extent of this work will be outlined within the site survey process.

The end goal is to connect an ONT (Optical Network Terminal) within the customer’s premises, which is the final point in the process.

Civil Engineering Work – Activities and Requirements

Activity	Description	Permission Required
Trench digging	Excavation to lay cabling and fibre-optic lines beneath pavements, roads, or private land	Street works licence (public highways), landowner consent (private land)
Fibre pulling/blowing	Fibre-optic cables pulled or blown through existing ducts from BT exchange to customer premises	Duct access (typically existing Openreach infrastructure)
Diversity circuit installation	Second circuit routed via separate path using poles or alternative routes for resilience	May incur excess construction charges payable by customer
Fibre splicing	Joining existing fibre to new fibre along the circuit path	None (engineering task defined during site survey)
ONT installation	Optical Network Terminal fitted at customer premises as the circuit termination point	Customer premises access

Customer Premises Equipment (CPE) Installation

The decision on which router to use depends on bandwidth (throughput) and features (security and Wi-Fi). BT offers standard Cisco small business routers alongside the more feature-rich Cisco networking solutions including secure SD-WAN and Meraki appliances. Configuration of the devices is undertaken by the BT installation team based on the initial required setup. Customers choose Meraki because of the built-in Wi-Fi together with endpoint threat protection, malware scanning, and web content filtering. The initial setup will also include any IP addressing and any other configuration options.

BT Leased Line CPE Options Comparison

Feature	Cisco Small Business Router	Cisco Meraki Appliance
Built-in Wi-Fi	No	Yes
Endpoint threat protection	No	Yes
Malware scanning	No	Yes
Web content filtering	No	Yes
SD-WAN capability	No	Yes
IP addressing and configuration	Yes	Yes
Configured by	BT installation team	BT installation team

Circuit Configuration and Testing

Prior to handing over customer leased lines (including IP address assignment), BT support engineers will conduct handover tests that include bit error rate testing, latency measurements, and throughput of IP packets. Internal work will also need to be completed, including configuration of routing protocols to propagate your network through to the Internet.

BT Leased Line Handover Tests

Test	What It Measures	Purpose
Bit error rate testing	Rate of errors in the data transmitted across the circuit	Confirms fibre and circuit integrity
Latency measurement	Round-trip delay of data packets across the network	Validates performance meets SLA thresholds
IP packet throughput	Volume of data successfully delivered per second	Confirms bandwidth matches ordered capacity
Routing protocol configuration	Correct propagation of customer network to the Internet	Ensures full end-to-end connectivity

Security and Firewall Implementation

Intrusion Prevention Systems (IPS) are another critical security option that identifies and prevents malicious activities that may exploit vulnerabilities in your network. BTnet and Meraki offer built-in firewall and IPS options to detect and block threats, including malware and viruses.

Both BTnet and Meraki offer easy installation and configuration of these options via user-friendly interfaces, allowing even those with limited technical knowledge to set up their security system efficiently.

BTnet Security Features

Security Feature	Function	Available On
Intrusion Prevention System (IPS)	Identifies and prevents malicious activities exploiting network vulnerabilities	BTnet and Meraki
Built-in firewall	Detects and blocks threats including malware and viruses	BTnet and Meraki
User-friendly management interface	Allows configuration with limited technical knowledge	BTnet and Meraki

Ongoing Support and Maintenance

The ongoing support and maintenance of BT leased lines involve the following tasks:

BT Leased Line Ongoing Support and Maintenance Tasks

Task	Description	Key Detail
Monitoring	Bandwidth, latency, and packet loss tracking	Basic monitoring on Cisco Managed CPE; granular reporting available with Meraki Dashboard upgrade
Troubleshooting	Diagnosing and resolving hardware failures, software bugs, and connectivity problems	Covered under the BTnet Service Level Agreement (SLA)
Upgrading	Increasing or modifying bandwidth via a modify order	BTnet provisioned by Openreach using dedicated fibre infrastructure
Capacity planning	Regular assessment of bandwidth requirements to right-size the service	Prevents overspending on unnecessary resources
Backup and disaster recovery	Establishing backup systems and disaster recovery plans	Minimises data loss and downtime during system failure or natural disaster
Performance optimisation	Fine-tuning settings, upgrading hardware and software components	Continuous activity by maintenance teams to maintain optimal performance

Monitoring

BTnet offers some basic bandwidth monitoring tools when using the standard Cisco Managed CPE. For enhanced reporting options, the customer should upgrade to Meraki, which offers granular bandwidth measurements in addition to latency and packet loss through the Meraki Dashboard documentation.

Troubleshooting

Whenever an issue arises, BT engineers are responsible for diagnosing and resolving it as quickly as possible. This might include addressing hardware failures, software bugs, or connectivity problems, which are all defined within the BTnet Service Level Agreement (SLA).

Upgrading

As businesses use more bandwidth over time, upgrading BTnet is completed by submitting a modify order. BTnet is provisioned by Openreach using dedicated fibre infrastructure to deliver guaranteed speeds and reliability.

Capacity planning

Regularly assessing the bandwidth requirements of a business helps to determine if the leased line’s capacity needs to be increased or decreased. This ensures that the business has sufficient bandwidth to support its operations without overspending on unnecessary resources.

Backup and disaster recovery

Establishing backup systems and disaster recovery plans is a vital task to minimise data loss and downtime in the event of a system failure or natural disaster.

Performance optimisation

Maintenance teams work continuously to optimise the performance of BT leased lines, which may include fine-tuning settings or upgrading hardware and software components to maintain optimal performance and ensure customer satisfaction.

Robert Sturt

Managing Director

Robert Sturt is a leading expert in SD-WAN and enterprise network solutions with extensive experience in telecommunications and network infrastructure. As a Forbes Business Council member and contributor to TechTarget, he provides strategic insights on network transformation and digital connectivity solutions. His expertise spans SD-WAN implementation, network security, and enterprise digital transformation initiatives.

LinkedIn • Forbes • TechTarget

Fact checked by: Harry Yelland - Cybersecurity Writer, Netify

The education sector has witnessed significant technological advancements over the past decade due to a shift from traditional classrooms to more blended learning environments. This transition has been facilitated by the growth of e-learning platforms, online courses and interactive technologies that have transformed the way students and educators approach education.

Key Takeaways

• Reliable internet connectivity is essential for the growing adoption of e-learning platforms and online courses.
• BT Leased Lines provide dedicated Internet connections for schools and universities.
• Enhanced cybersecurity, customised installation and scalability make BT Leased Lines a strong choice for educational institutions of all sizes.
• Cybersecurity is critically important for the education sector to support BYoD (Bring your own device) across home-working and the campus.

Why Choose BT Leased Lines in Education

Leased line services are used to power online platforms which includes platforms such as the Learning Management Systems (LMS), e.g. Moodle and Blackboard. These platforms have become central to delivering educational content efficiently and effectively. When students engage with academic Cloud applications, there needs to be consistent and reliable performance to avoid disruptions during live sessions.

Reporting across bandwidth usage together with an interface into the Meraki or Fortnet management portal all ensure that the school or university is always receiving the best possible network performance and security.

Another advantage of BTnet leased lines (and leased lines in general) is the absence of slowdowns during peak usage times. This ensures students and staff have uninterrupted access to educational resources and platforms whenever they are required. BT operates one of the most expansive UK and Global backbones with over 70% of ISP's peering with BT's network ensuring excellent network coverage and performance.

Customer support is important to education with base level needs requiring 24/7 technical assistance and dedicated account management which are provided by the BTnet product.

Why the BT Leased Line SLA is Important for schools and Universities

One key aspect of the BTnet SLA is the 100% target service availability mentioned earlier, which guarantees uninterrupted access to online educational resources. This level of availability is essential for smooth virtual classrooms and online exams. If BT fail to meet their 100% uptime SLA, educational institutions will receive money-back credits which adds further value to their budgets. Detailed conditions of the SLA can be found at bt.com/terms.

BTnet is committed to delivering their service on or before the customer committed date (CCD) which ensures the School or University is aware of their go-live date. If the CCD isn't met, discounts are offered to educational institutions for the inconvenience. However, the on-time delivery SLA doesn't apply to service upgrades or changes.

Another essential aspect of reliability is network latency, which needs to be low to ensure smooth communication in real-time during online classes, video conferences, and research data transfers. BTnet offers a service latency guarantee that meets the needs of education institutions. Regular latency checks and transparent reporting keep them informed, and discounts are provided if latency guarantees are not met.

Transparent billing is important for budgeting in educational institutions. BTnet's SLA ensures that approved reductions and discounts are promptly applied, helping institutions allocate funds efficiently. The BTnet billing team provide clear definitions of terms, examples of which are: Customer committed date (CCD), Managed customer premises equipment (CPE) and Point of Presence (PoP).

The comprehensive SLA offered by BTnet ensures a dependable internet connection, suitable for online learning, research and administrative tasks while offering value for their investment.

BT Leased Lines - Cybersecurity for schools and Universities

The growing importance of cybersecurity in education is directly connected to the increasing reliance on digital platforms and tools. As educational institutions integrate more digital tools, a stable and secure digital environment becomes crucial for uninterrupted learning. The rise of cyber threats targeting schools and universities puts vast amounts of sensitive data at risk which means robust cybersecurity is essential to protect students and faculty.

BTnet offers Meraki and Fortinet SASE Security products to provide comprehensive protection which offers advanced firewall protection to safeguard online class sessions and digital exams. Real-time monitoring of network traffic enables quick detection and neutralisation of threats ensures that educational processes remain uninterrupted. With granular control over inbound and outbound traffic, academic institutions can manage what content is accessible to students while virus scanning keeps malware in check.

The ultimate guide to BT Meraki Managed SD WAN Services

BT Managed SD WAN Services with Cisco Meraki offers UK and Global capability to secure applications, remote users and branch-office locations across intelligent path selection, enhanced visibility and control with granular application-level policies. The solution also integrates with cloud vendors, including AWS & Azure, and is available with BT UK & Global

Netify's SD-WAN & SASE Network Security BlogRobert Sturt

Web filtering allows institutions to control the type of educational content accessed and prevent harmful content from reaching students. Customisable filters can be tailored to specific the School or University policies which ensures the right balance between freedom and security.

Integrating SASE (Secure Access Service Edge) Security aspects into BTnet Leased Lines creates an all encompassing Cybersecurity capability which offers everything an academic facility requires. The convergence of network and security services into one comprehensive BTnet leased line package ensures a smooth user experience without compromising on security. Meraki and Fortinet products are cloud-based security solutions so management and updates are simplified.

What is the BT Fortinet Managed SD WAN solution?

BT’s latest Managed SD WAN service offering leverages the power of Fortinet’s Secure SD WAN technology. This solution is built on the foundation of the FortiGate Next-Generation Firewall (NGFW) which integrates SD WAN networking capabilities with SASE security features. This integration is further enhanced by the use of BT’s UK

Netify's SD-WAN & SASE Network Security BlogRobert Sturt

As education continues to evolve digitally, BTnet Leased Lines with Meraki and Fortinet SASE Security will continue to evolve.

BT Leased Line School and University Installation Process

Initial Site Survey

After an educational institution places an order for a BT Leased Line, Openreach conducts a survey to assess the overall leased line build. If the survey indicates extensive work is needed, the institution has the option to cancel the order without any penalties.

The Openreach site survey will outline potential challenges which includes road closures, way leave or construction requirements such as digs. Based on the survey, BT plans the best route for the circuit - if there's a secondary circuit, Openreach will plan for diversity. Early identification of potential challenges ensures smooth online classes, examinations and research activities.

Planning Permissions and Wayleave Agreements

Permissions are essential when infrastructural changes are needed on campus, examples include laying cables or setting up poles. Delays might arise due to administrative processes or legal contractual requirements which could impact the academic calendar. Openreach ensures all permissions are in place before starting the installation to ensure no interruptions to the academic schedule. Timely permissions mean seamless online education which is vital for lectures, exams and research projects.

Civil Engineering Work

The process involves groundwork like trenching for cables needed to connect the leased line. Permissions are sought for any excavations on campus grounds or nearby areas. Fibre-optic cables connect the School or University to the BT exchange.

Customer Premises Equipment (CPE) Installation

The choice of router is based on the institution's bandwidth needs and desired features. As previously mentioned, BT provides Meraki and Fortinet but also standard Cisco routers. With all options, the edge devices are configured and tested before handing over to the School or university IT team.

Circuit Configuration and Testing

Before finalising the connection, BT conducts thorough tests to ensure optimal performance for the institution. These tests ensures that online classes, exams and research activities experience minimal disruptions.

BT Leased Lines for Large University Campus Locations vs Smaller schools

Large University Campuses

with BTnet Leased Lines and Cisco Meraki Wi-Fi can benefit from an adaptive network infrastructure. Meraki's cloud-managed wireless is designed to adapt to the diverse needs of a large campus from lecture halls to research labs. This is combined with proactive network health insights, where Meraki Health - powered by machine-learning engines - provides proactive insights and automatic remediation to ensure maximum uptime.

These larger educational institutions can also count on optimised performance. Meraki continually optimises network performance as capacity, traffic and utilisation change to ensure that large numbers of users get consistent speeds. The combination of advanced threat detection and automated security is especially crucial for universities with vast amounts of sensitive data. Meraki identifies threats and anomalies in real-time which provides  immediate detection and neutralisation. And when combined with BTnet's dedicated and private connections, Meraki's automatic policy enforcement and built-in DNS protection can ensure a secure digital environment for the university.

Lastly, large campuses require scalable solutions. As universities expand, Meraki Wi-Fi access points, combined with BTnet Leased Lines can be scaled to meet growing demands without compromising on security or speed.

In comparison, smaller school sites such as primary schools and secondary schools can also benefit from BTnet Leased Lines and Cisco Meraki Wi-Fi. These smaller campus locations benefit from simplified network management as Meraki's cloud-managed approach allows smaller schools to have a robust network without the complexities of traditional setups.

Smaller schools also need robust security features. Meraki offers built-in security features which includes identity-based access control, built-in DNS protection and automated network firmware updates to protect their students and staff without needing advanced IT expertise.

Budget and Funding Considerations

When considering BT Leased Lines for educational institutions, schools and universities need to take into account budget and funding options. With a variety of speed options and contract lengths available, institutions can choose the most suitable plan to match their budgetary constraints and capital expenditure requirements.

For example, BT offers contract terms of 3 years and 5 years that provide a range of speed and router options. A 3-year contract with a 100Mbps connection and a Cisco 800Mb router costs £325/month, while a 5-year contract for the same speed and router is priced at £275/month. Opting for a longer contract can result in significant savings on the monthly cost.

To provide a broader perspective, here are some examples of pricing options:

• 3-Year Contract for 500 Mbps: £395/month with a Cisco 800Mb router or £535/month with a Cisco Meraki 1Gb router
• 5-Year Contract for 1000 Mbps: £495/month with a Cisco up to 1Gb router or £495/month with a Cisco Meraki 1Gb router

Educational institutions can also benefit from discounts provided by The Network Union, an Authorised Partner of BT Business and the largest distributor of BT Business services in the UK. This partnership allows The Network Union to offer tailored services to various sectors including education. Discounts are specifically available for UK schools and universities on BTnet, Meraki and Fortinet services.

Robert Sturt

Managing Director

Robert Sturt is a leading expert in SD-WAN and enterprise network solutions with extensive experience in telecommunications and network infrastructure. As a Forbes Business Council member and contributor to TechTarget, he provides strategic insights on network transformation and digital connectivity solutions. His expertise spans SD-WAN implementation, network security, and enterprise digital transformation initiatives.

LinkedIn • Forbes • TechTarget

Fact-checked by: Harry Yelland - Cybersecurity Writer, Netify

Frequently Asked Questions

When it comes to needing more robust and comprehensive security, BT also offers Fortinet's NGFW (Next Generation Firewall) solution as a co-managed service. BT's Fortinet solution surpasses the capabilities of the BT Meraki option but is similar in respect of configurability.

In simple terms, the BT Fortinet Firewall product is designed to protect your internal network by controlling what data is passed through into the business based on predefined policies by using NGFW (Next Generation Firewall) capabilities.

BT Fortinet NGFW service is part of the Fortinet Security Fabric which offers integrated and automated protection across the entire digital attack surface. The Security Fabric enables multi-security solutions to work together to coordinate threat detection and response.

Before we discuss the features offered by BT's implementation of Fortinet in more detail, here is a high level top 10 feature table.

The BT Fortinet NGFW service is built on Fortinet's purpose-built Security Processing Units (SPUs) which deliver scalable performance and low latency. SPUs allow the firewall to handle demanding network security needs without sacrificing speed or performance.

One of the key features of the BT Fortinet NGFW service is the built-in Secure SD WAN. Fortinet SD WAN includes advanced routing, application steering and resiliency with a full stack of integrated security solutions to protect the WAN edge.

The BT Fortinet NGFW service also has the ability to inspect encrypted traffic (including TLS 1.3) to identify threats that may be hiding in encrypted communications. This is done without significantly impacting network performance - even if a threat tries to hide in encrypted traffic, BT's Fortinet NGFW service can locate and remove the threat.

Fortinet uses AI (Artificial Intelligence) to automate security operations which includes threat detection, response and remediation. The AI-driven security operations help to reduce the complexity of managing network security which in turn makes day to day operations easier for your IT team to keep your network secure.

How AI is changing cybersecurity for IT decision makers?

AI is being increasingly used for threat detection, malware analysis, insider threat identification and analyst support. However, on the flip side, AI is also being used for attack-driven purposes like advanced password cracking and defender-aware malware. Artificial intelligence is the new technological frontier. The more you look at new technologies

Netify's SD-WAN & SASE Network Security BlogRobert Sturt

Granular visibility and control of applications, users and devices is built into Fortinet's core technology to enable views of user and device identification. Your IT team is able to apply security policies and protect against threats. The result is complete control over who and what can access your network.

Finally, BT's Fortinet NGFW service also includes advanced threat protection features which includes intrusion prevention, web filtering, antivirus, application control and more. These features work together to detect and prevent sophisticated attacks so the network is protected from a wide array of threats from common malware to advanced persistent threats.

Finally, the BT Fortinet NGFW service includes powerful management and analytics tools. These tools provide detailed insights into network traffic and security events and they allow for centralised management of security policies / configurations.

BT's Fortinet NGFW service can be deployed in a variety of environments including:

• On-premises
• Cloud
• Hybrid environments

The above includes a wide range of deployment modes including high availability, clustering and load balancing. Fortinet NGFW service can provide robust security.

Conclusion

BT's Fortinet NGFW service is equipped with proactive monitoring capabilities providing the data direct to the BT SOC which in turn notifies you and your team of any threats with swift fault resolution.

The BT Fortinet NGFW solution offers the ability to manage and monitor activities across all of your sites in one centralised dashboard. The service seamlessly integrates with Eagle Eye which is a BT-specific add-on that provides valuable security insights not available with other products.

Regular updates ensure that the BT Fortinet NGFW service is equipped to handle emerging threats. With over 4,000 threats identified daily, the firewall is constantly updated to protect against various severities of threats.

Fortinet is recognised as an industry-leading vendor as one of the leaders within the Gartner Magic Quadrant. Key features of the service include highly scalable project management, managed service policy design and deployment and the ability to tailor setups based on customer requirements. The service also includes patching upgrades, access to a self-serve portal and service management with regular reviews.

What is the BT Fortinet Managed SD WAN solution?

BT’s latest Managed SD WAN service offering leverages the power of Fortinet’s Secure SD WAN technology. This solution is built on the foundation of the FortiGate Next-Generation Firewall (NGFW) which integrates SD WAN networking capabilities with SASE security features. This integration is further enhanced by the use of BT’s UK

Netify's SD-WAN & SASE Network Security BlogRobert Sturt

Robert Sturt

Managing Director

Robert Sturt is a leading expert in SD-WAN and enterprise network solutions with extensive experience in telecommunications and network infrastructure. As a Forbes Business Council member and contributor to TechTarget, he provides strategic insights on network transformation and digital connectivity solutions. His expertise spans SD-WAN implementation, network security, and enterprise digital transformation initiatives.

LinkedIn • Forbes • TechTarget

Fact-checked by: Harry Yelland - Cybersecurity Writer, Netify

SHDS (Short Haul Data Services) are distance dependent. On the flip side, a Virtual Leased Line is available as point to point, multipoint or any to any on a Global basis.

Short Haul Data Service

If you have sites that are within a relatively close geographic range (up to 25 – 35 kilometres) and you have higher bandwidth or privacy requirements, SHDS should be a primary consideration. SHDS typically uses dedicated fibre to reach each of your attached sites and the bandwidth is designated solely to you.

When you subscribe to a SHDS, the carrier’s network provides either point-to-point or multipoint bridging services to your company. Unlike VLLs and optical services, SHDS is commonly delivered as a purely bridged service. Whereas a multipoint VLL uses the concept of virtual bridges across an MPLS core, SHDS typically uses IEEE 802.1-compliant bridging end-to-end using “QinQ” tagging (sometimes referred to as VLAN stacking) where your company is assigned its own 802.1Q tag to deliver your Ethernet frames transparently through the service provider network (known as an S-tag). You are then free to use your own VLAN tags (known as C-tags) to keep your own Layer 2 traffic separate and isolated from each other.

SHDS is ideal for connecting multiple regional campus networks together. From the customer perspective, SHDS is operationally no different than having all of your campuses directly connected to each other with physical cables. Since the bandwidth is dedicated to you and the geographic proximity is close, you will not have latency considerations that are present with technologies like VLLs that can connect sites across far-reaching distances. Likewise, since SHDS is normally a bridged service, failover times are quicker and your service provider may even offer options like link bonding which both increases bandwidth and redundancy for your network.

Optical Services

Optical services generally have a longer available geographic reach as compared to SHDS, though they are still normally delivered within geopolitical boundaries such as a single country or continent. Optical services provide the customer with dedicated point-to-point bandwidth, though not in an end-to-end dedicated fibre as is the case with SHDS. Optical services are normally transmitted through the carrier network as a single wavelength among many in Dense Wavelength Division Multiplexing (DWDM) circuits.

DWDM is a different kind of multiplexing than what is used for MPLS-based VLLs. With MPLS, all customer traffic is divided into packets with each individual packet getting the full bandwidth of the carrier backbone links as they are transmitted. First, one customer’s packet is transmitted, then another and so on. With DWDM, multiple customers’ traffic traverses the backbone links simultaneously as separate dedicated wavelengths. This means your traffic is always given the full bandwidth of the individual wavelength, which is typically 10 Gbps or more and cannot be usurped by another customer’s traffic.

When you subscribe to an Ethernet optical service, the service provider gives you a regular Ethernet handoff which is then multiplexed with other customers on the carrier-side. The Ethernet handoff expects normal Layer 2 Ethernet frames which the service provider transmits unmodified to the other end of the link. Optical services can also be offered as Layer 1 and in various other Layer 2 formats such as Fibre Channel for SAN extension.

In the previous few decades, before Ethernet services became ubiquitous, leased lines using serial-based technologies were the most popular because they were based on and interoperated with the global Public-Switched Telephone Network (PSTN) which used circuit-switching technologies. When you purchased a serial leased line, your traffic would have inevitably been aggregated with other customers into larger, faster backbone connections at some point, but the amount of bandwidth you leased from the carrier was still completely dedicated to you end-to-end.

VLLs are named as such because the bandwidth is no longer dedicated just to you as the end customer. That doesn’t mean you won’t get the full bandwidth that is leased to you from the carrier, it just means that in the carrier backbone, they are using packet switching with statistical multiplexing to serve more customers with the same amount of aggregate bandwidth. If all customers used all of their leased bandwidth at the same time, this model would not work. In reality, this model works well for carriers because while backbone links are typically oversubscribed, they are also closely monitored for bandwidth utilisation so that customer traffic is not impacted. In addition, VLLs are almost always backed with a Service Level Agreement (SLA) which guarantees a particular level of performance and uptime. If the carrier does not meet the SLA, financial restitution may be sought.

To provide Ethernet services using VLLs, carriers typically use Multi-Protocol Label Switching (MPLS) in their core network. This enables the previously-mentioned statistical multiplexing ability where multiple customers can have their traffic carried simultaneously over the same shared carrier backbone network. A carrier’s core network also has other service-enhancing capabilities such as link and node protection with fast reroute, which means if a link or even an entire router fails, the fault is detected and traffic is routed around the failure extremely quick, typically faster than 50 milliseconds.

One of the biggest advantages of VLLs is that they have a global reach. Since the Ethernet traffic is ultimately encapsulated into label-switched packets, interoperability between different carriers can be achieved very easily through various inter-provider agreements. VLLs provide a performance level that is adequate for most user applications and use cases and can cost-effectively provide globe-spanning connectivity for your business.

Virtual Leased Lines: Point-to-Point

One of the simplest services a carrier can provide is a point-to-point VLL (also known as a pseudowire). With this type of connection, you are given what amounts to a virtual extended Ethernet cable where the devices on each end of the connection appear to be directly connected to each other. Whatever Ethernet-framed data goes in one side of the link comes out of the other side, depending on the exact features the service provider enables in the pseudowire.

Within the Ethernet point-to-point framework, a service provider can control what types of Ethernet frames are allowed to traverse the VLLs. Some providers dictate that the Ethernet frames it receives from your Customer Premises Equipment (CPE) must not carry any VLAN tags while others dictate that frames must be received with a particular tag. Different carriers may or may not additionally place additional restrictions on Layer 2 control frames, such as Spanning Tree Protocol (STP) Bridge Protocol Data Units (BPDUs) or device recognition protocols like Cisco Discovery Protocol (CDP) and Link-Layer Discovery Protocol (LLDP). Still others provide a “raw” service where any properly-formatted Ethernet frame is carried as long as it is under the specified Maximum Transmission Unit (MTU). These different kinds of restrictions allow carriers to produce various revenue-generating feature sets.

One of the most common use cases for point-to-point virtual leased lines is for a lower-cost Datacentre Interconnect (DCI) where multiple datacentre VLANs reside in two separate physical locations. Since the same IP subnets can be used in both places and the two datacentres appear as a single logical entity to the rest of your network, you can do things like Virtual Machine (VM) mobility and use both datacentres simultaneously in an active/active fashion.

However, like all point-to-point Layer 2 connections, you must take into consideration possible failures that could occur and the latency that is incurred, especially when your two sites are very distant. Many applications that connect at Layer 2 are expecting a certain maximum latency threshold and start misbehaving if that threshold is crossed, particularly control plane traffic like routing and bridging protocols. If you do not take these constraints into serious consideration, you run the risk of a single failure bringing down both datacentres.

Virtual Leased Lines: Multipoint

When you have more than two geographically separated sites requiring direct connectivity at Layer 2, you need a multipoint solution. With a multipoint Layer 2 solution that uses Ethernet, the carrier’s network appears to your CPE devices as a single switch in the middle of your devices. That is, each of your CPE devices will see each other at Layer 2 and can reach each other directly through the carrier’s backbone.

Like with point-to-point VLLs, the service provider can offer different services by dictating VLAN tags, allowing raw Ethernet frames and permitting or denying Layer 2 control plane traffic like BPDUs across their network. Also like with point-to-point VLLs, multipoint VLLs typically use MPLS across the carrier backbone. Multipoint Ethernet VLLs are usually delivered using one of two different underlying technologies: Virtual Private LAN Service (VPLS) or Ethernet Virtual Private Network (EVPN).

VPLS was developed first and is implemented as a full mesh of point-to-point pseudowires in the service provider’s network. This is transparent to you, as the customer, but it means that the multipoint Ethernet service is delivered in the data plane, which has a couple of implications and restrictions. With VPLS, each Provider Edge (PE) router implements a “virtual bridge” whereby broadcast, unknown unicast, and multicast frames (so-called “BUM” traffic) must be flooded to all other sites whenever the local bridge does not know where the destination endpoint resides. VPLS further has a limitation where dual-homed CPEs must use active/standby links and cannot use both together simultaneously.

EVPN is newer and is the replacement for VPLS. Whereas VPLS maintains Layer 2 reachability through the data plane, EVPN does this through the control plane by using BGP to enable “MAC routing”. That is, the MAC addresses residing at each site are carried in BGP which enables new service-enhancing features such as the ability to have active/active links for dual-homed CPEs, true MAC mobility and Integrated Routing and Bridging (IRB). IRB allows the service provider network to act as the default gateway for the VLAN.

EVPN has “gateway synchronisation” capability whereby each nearest PE router acts as the local gateway so that traffic from each site does not have to be backhauled to a single location when IP routing is performed. In the DCI scenario, if all of your connected sites have multiple IP subnets present at each of the sites, you no longer have to designate a router at one of the sites to serve as the gateway. The service provider’s PE router can perform this function for each connected site, and traffic is routed locally instead of requiring a double transit across the carrier’s core and back in order to reach the gateway.

VPLS is still the most common multipoint Ethernet L2VPN solution due to the heavy investment in existing networking equipment, but over time EVPN will replace it due to the new features it offers as well as the dramatic improvement in scalability. With VPLS, every PE router must know about every MAC address in every attached site. This is why some VPLS providers limit the number of MAC addresses they will learn from the customer. With EVPN, no longer does each PE require maintaining a complete list of MAC addresses, which enhances scalability.

Comparing your Ethernet options?

As you consider different kinds of Ethernet services, each have their own strengths, weaknesses and applicability to particular use cases. While you can make the majority of use cases work across nearly all of the different kinds of available Ethernet services, some use cases are better suited for particular kinds of Ethernet services. We dedicated the largest portion of this article to VLLs because they are both the most common and most cost-effective. However, when you have both shorter physical distances to cover, stricter latency requirements and higher bandwidth needs, SHDS and optical services might suit your business needs more effectively.

SHDS offers multipoint capabilities and dedicated bandwidth, while subscribing to an optical service may provide even higher levels of dedicated bandwidth, though is typically offered as a point-to-point service exclusively. SHDS is better suited for connecting multiple campus networks together in relatively close-proximity, whereas an optical service may serve better for DCI needs. VLLs effectively cover both use cases, though with lower bandwidth and higher latency considerations.

Robert Sturt

Managing Director

Robert Sturt is a leading expert in SD-WAN and enterprise network solutions with extensive experience in telecommunications and network infrastructure. As a Forbes Business Council member and contributor to TechTarget, he provides strategic insights on network transformation and digital connectivity solutions. His expertise spans SD-WAN implementation, network security, and enterprise digital transformation initiatives.

LinkedIn • Forbes • TechTarget

Fact-checked by: Harry Yelland - Cybersecurity Writer, Netify