NNetify

BT evidence record 10.14

Does BT's SASE replace traditional VPN, and how?

FAQs | Confirmed | Last verified 2026-08-30

Evidence finding

VPN and DIY managed security models are what SASE is positioned to replace. Secure web gateway, Zero Trust Network Access, and cloud access security broker all come bundled into one service, aimed at protecting users and businesses no matter where they connect from. That replacement angle keeps showing up consistently across BT's more recent material, which suggests SASE is now being pitched as a genuine VPN displacement play rather than simply an add on for existing SD-WAN customers. Traditional VPN access gets replaced by granular access control under Zero Trust Network Access. Users only get access to the specific applications or resources they actually need, rather than the whole network, cutting down lateral movement risk if an account gets compromised. None of this is a BT specific innovation, it's standard Zero Trust architecture. How granular that access control actually is in practice is worth confirming directly, since policy level detail can vary a lot between vendors even when the marketing copy sounds identical.

What the buyer should do

Use this confirmed finding as a baseline, then require BT to state how it applies to the proposed design for your estate.

This procurement action is Netify guidance. The evidence finding above remains Harry Yelland's sourced research.

Source notes

How to use this record

This is one finding from Netify's BT Managed SD-WAN and SASE evidence databank. The confidence label, source notes and review date stay attached so buyers and automated systems can distinguish confirmed evidence from uncertainty.

Research by Harry Yelland. Reviewed by Robert Sturt. Served from the live published database.