Network Infrastructure for Hybrid Work

Hybrid work is now standard: 60% of management-level employees work remotely 2-3 days/week (Malakoff 2024 study). The corporate network must provide stable, secure, high-performance connectivity from home. A 2026 guide to hybrid work infrastructure.

Work models

• Fully remote: 100% remote, uncommon in France
• 3/2 hybrid: 3 days in the office + 2 days at home (the most common model)
• 2/3 hybrid: the reverse arrangement
• Office hot-desking: no assigned desk
• Result: the infrastructure must scale to support 50% to 100% of the workforce remotely, depending on the day

Connectivity options

IPsec/SSL VPN (legacy)

• FortiClient, Cisco AnyConnect, GlobalProtect
• Single tunnel to the corporate network
• Drawbacks: hairpinning (SaaS traffic routed through the corporate network), complex split tunneling

ZTNA (recommended in 2026)

• Per-application access (not full network access)
• No lateral movement if a device is compromised
• Better UX (direct SaaS access)
• See the dedicated ZTNA article

Full SASE

• ZTNA + SWG + CASB + DLP
• Prisma Access, Zscaler, Netskope, Cato
• TCO: €15-25/user/month

Endpoint security

• EDR is mandatory: CrowdStrike Falcon, SentinelOne, Microsoft Defender for Business
• MDM: Intune, Jamf (Mac), Kandji
• Disk encryption: BitLocker, FileVault
• Patch management: Intune, WSUS, Automox
• Endpoint backup: Veeam, Druva, OneDrive Backup

Home networks: employee guidance

• ISP router: generally WiFi 5, sufficient for 1-2 people
• Upgrade to WiFi 6 for a large home or household (Eero, ASUS, Ubiquiti)
• Use wired Ethernet if WiFi is unstable (TP-Link 8-port switch, €30)
• Symmetrical 1 Gbps FTTH recommended (upload capacity is critical for video conferencing)
• Video conferencing kit: 1080p webcam, USB headset, front-facing lighting

Company-provided equipment

• Business laptop (ThinkPad, Dell Latitude, MacBook Pro)
• 2× external monitors (for sustainable remote work)
• USB-C docking station
• Phone: Teams/3CX softphone or Yealink IP phone
• External webcam (for a better camera angle)

Head-office connectivity

• Office: 1:1 setup with laptop + docking station
• Hot-desking: booking system (Robin, Skedda)
• Video meeting rooms: Zoom Rooms, MTR (Microsoft Teams Room)
• Office WiFi: capacity sized appropriately for 50% fewer users than at full occupancy

Corporate bandwidth

The head office must support large-scale video conferencing + VPN/ZTNA for remote workers:

• Per office user: 5 Mbps
• Per remote user (through the corporate network): 2-10 Mbps depending on ZTNA/VPN
• Head office with 500 hybrid users: minimum 2× symmetrical 1 Gbps FTTH + multi-provider BGP
• DSCP QoS for Teams/Zoom

Device fleet management

• Intune + Azure AD: €5/user/month (Business Basic)
• JAMF Pro for Mac: €8/device/month
• Asset inventory: Lansweeper, SnipeIT
• Remote assistance: TeamViewer, AnyDesk, Quick Assist

Budget per remote user

• Laptop: €1,200 excluding tax (depreciated over 3 years)
• Monitors + peripherals: €400 excluding tax
• ZTNA/VPN license: €5 excluding tax/user/month = €180/3 years
• EDR: €5-10/user/month = €180-360/3 years
• Intune/Jamf: €60-300/3 years
• Total per user over 3 years: ~€2,200 excluding tax

Order from OPTINOC

Hybrid work infrastructure: FortiGate/Palo Alto ZTNA, EDR suite, Intune/Jamf management, and laptops. Quote for SMEs and mid-sized companies within 48h.