Business fiber in Morocco: choosing your link and never being cut off again

Internet connectivity has become a company’s first critical service: IP telephony, Microsoft 365, hosted ERP, video calls, everything rides on it. Yet many Moroccan SMBs still run on a consumer plan with no repair commitment, and discover its true cost on the day of the outage.

Consumer fiber or business fiber

Residential FTTH offers from Maroc Telecom, Orange and inwi show attractive speeds for a modest price. They have three limits for a business: bandwidth is shared, not guaranteed; repair time is not contractual; and the IP address is dynamic, which complicates VPN and telephony.

A business offer, FTTO or dedicated fiber, brings guaranteed symmetric bandwidth, a repair-time guarantee of usually four hours, a fixed IP and a technical contact. It costs more, but the comparison is with one day of lost revenue.

Questions to ask the carrier

• Is bandwidth guaranteed or “up to”? For what percentage of the time?
• What is the repair-time guarantee, and what penalties apply if missed?
• How many fixed IP addresses are included?
• Is the link delivered on dedicated or shared fiber?
• What are the building connection lead times and costs?

Written answers in the contract are worth more than the speed on the brochure.

One link is never enough

Even the best fiber gets cut: roadworks, carrier incidents, equipment failure. Best practice is a second link of a different nature, most often a business 4G or 5G router, or a second carrier’s fiber for critical sites.

Failover is useless if someone must plug a cable by hand. A FortiGate or WatchGuard firewall switches to the second link in seconds and returns to fiber as soon as it recovers. With SD-WAN it goes further: voice stays on the most stable link, Windows updates on the cheapest, in real time. We explain this in our article on FortiGate SD-WAN for multi-site companies.

Sizing bandwidth

A simple rule for an office SMB: 2 to 3 Mbit/s per active user for cloud productivity and video, plus a reservation for telephony of about 100 kbit/s per simultaneous call. A 40-person company runs comfortably on 100 Mbit/s symmetric guaranteed, as long as the firewall prioritises voice.

Securing the link itself

The carrier’s router is not a firewall. It belongs in bridge mode behind equipment you control, with application filtering, sensible SSL inspection and VPN for remote access. That device is also what monitors link quality and alerts before the failure.

What we put in place

For clients under a managed services contract, we handle the carrier relationship, dual connectivity, the firewall and its monitoring. A fiber cut becomes an event we see in the console and the user never notices.