Connectivity designed around healthcare continuity rather than a single internet link
A FortiGate-based hybrid WAN model combines primary business connectivity with 5G failover and health-aware path selection to reduce single-link dependency.
Infrastructure & Networking
Healthcare WAN Resilience & Hybrid Failover
Connectivity resilience design using primary and backup links to improve availability of clinical and operational services.
EnvironmentExperts Care Medical Group
Period2024-Present
RoleInfrastructure design, implementation coordination and operational continuity planning
LifecycleActive / ongoingPublic architecture shows the resilience model without disclosing circuit identifiers, addresses or detailed security policy.
The operating need
Clinical and operational services rely on stable connectivity, making a single external path an avoidable continuity risk.
Ahmed's contribution
Ahmed led infrastructure design, implementation coordination, failover planning and the operational continuity model around the available connectivity services.
How the work was approached
Environment: Healthcare network services using FortiGate with DIA, 5G backup, VPN and externally dependent clinical and business services.
FortiGate SD-WAN health checks and path selection coordinate primary and backup connectivity while keeping failover behavior aligned with service-continuity needs.
Execution highlights
- Defined primary and backup connectivity roles instead of treating both links as unmanaged alternatives.
- Used health-aware SD-WAN behavior to support automatic path decisions during degradation or loss.
- Kept VPN and operational-service dependencies in scope when planning failover behavior.
Designed for responsible operation
- Public diagrams omit IP addresses, circuit IDs, credentials and firewall policy detail.
- Resilience changes are designed around controlled routing and security policy rather than bypassing existing protections.
- Failover is treated as an operational capability that must be observable and testable.
Choices that supported the outcome
- Use a hybrid wired and cellular design to avoid common-mode dependence on one access path.
- Centralize path health and failover decisions in the firewall and SD-WAN layer.
- Publish the resilience concept without exposing exploitable network detail.
What the work reinforced
- Redundancy adds value only when failover behavior is understood and tested.
- Healthcare connectivity planning must include the applications and remote services that depend on the link.
- A simple secondary path can materially improve continuity when health checks and ownership are explicit.
Technology
Technology used in this work
The stack and platforms associated with this project.
FortiGatecurrent production
SD-WANproject specific
DIAproject specific
5Gproject specific
VPNcurrent production
About the project visuals
High-level architecture view of the WAN resilience design.
Production IPs, circuit identifiers, credentials and security-sensitive policy detail are intentionally omitted.
Solution architecture
How the solution is structured.
The major functional layers and how they work together.
Primary connectivity
Dedicated business internet provides the normal path for healthcare and administrative services.
FortiGate SD-WAN
Health checks and policy-controlled path selection determine which available link should carry traffic.
5G failover
Cellular backup provides an alternate internet path when the primary service becomes unavailable or unhealthy.
Operational services
Clinical, business, remote-access and cloud services consume the resilient connectivity layer.
Operational footprint
Scale and operating impact.
Selected metrics and characteristics that show the practical scope of the implementation.
WAN resilience
Primary connectivity with cellular failover
continuity focus
Designed around healthcare service availability
Core capabilities
What the solution enables.
The capabilities that make the project useful in day-to-day operations.
Multi-link resilience
Primary business connectivity and cellular backup are combined into a controlled failover model.
SD-WAN health decisions
FortiGate health checks and path selection support automatic response to link degradation or loss.
VPN & service continuity
Connectivity planning considers remote access and the services that depend on stable external reachability.
Operational observability
Link state and failover behavior are treated as operating signals that can be tested and reviewed.
Professional connections
Connected experience, capabilities and work
Explore related experience, capabilities and projects that provide additional context.
Related insight
Read the reasoning behind the implementation.
These field notes explain the operational principles behind related project decisions.
Healthcare IT & Resilience
Designing Resilient Internet Connectivity for Healthcare Operations
A practical framework for building multi-link WAN resilience around clinical continuity, predictable failover, observability and controlled change.
Read insight IT Governance & Service ContinuityIT Service Continuity: Billing, Ownership and Escalation Are Technical Dependencies Too
Service continuity can fail even when the technology is healthy. A practical operating model should include account ownership, billing status, renewal dates, provider escalation and recovery authority alongside technical redundancy.
Read insightKnowledge map
Part of this topic.
Explore related projects, field notes and practical resources around the same technology area.