Last Verified 24/09/2026
At Netify we’ve compared 30 SASE partner programmes that UK resellers often consider joining, and evaluated their entry route, accreditation, joining fee, minimum commitment, deal registration, and who delivers and bills the customer, with this guide written for UK IT resellers, MSPs, MSSPs and telecoms resellers in the process of deciding which programme to add to their portfolio.
Reselling SASE: the short answer
Research qualification: The counts in this article describe the supplied September research. They are not counts of confirmed current UK SASE agreements. “Not published” means unknown. Accreditation, product entitlement and territory can differ by programme track; use the qualifications in the comparison alongside these findings.
What does reselling SASE involve?
Reselling SASE typically requires joining a vendor or carrier's partner programme and selling its platform on to your own customers under one of 4 commercial models, whether that's resale, referral, managed service or white label. Of the 30 programmes we've compared, 2 (BT via Netify and Virgin Media O2 Business) have the carrier deliver and bill the customer themselves, so the reseller carries no delivery responsibility at all, and Aryaka works the same way on referral deals.
How do you become a SASE reseller in the UK?
There are three ways UK resellers tend to join a SASE programme, either directly with the vendor (13 programmes), through a UK distributor (13 programmes, 4 of which also take direct partners) or through an authorised partner such as Netify for BT (1 programme). On top of that, 3 programmes require no accreditation at all before your first sale, those being BT via Netify, Forcepoint and SonicWall.
Which SASE partner programmes have no accreditation requirement?
Only 3 of the 30 programmes we've compared let you sell without any certification first, which are BT via Netify, Forcepoint (at its Authorized tier) and SonicWall. Fortinet, Versa Networks and Arista VeloCloud all want vendor certification or accreditation training in place beforehand, Cloudflare and Zscaler need you at a named tier with certified staff, and the other 22 don't publish their requirement at all.
Which SASE vendors sell through UK distributors?
Barracuda, Cato Networks, Check Point, Cisco, Ericsson Cradlepoint, Forcepoint, Fortinet, Netskope, Palo Alto Networks, SonicWall, VeloCloud (Arista), Versa Networks and Zscaler all sell to UK resellers through distribution, with the likes of Westcon-Comstor, Arrow, Ingram Micro, Exclusive Networks, Nextgen, Pax8 and Sherweb named across them. Aryaka, Cloudflare, Colt, Expereo, GTT, Open Systems, Verizon Business, Virgin Media O2 Business and Vodafone Business, on the other hand, only publish a direct route.
Can an MSP resell SASE as a managed service?
Yes, 16 programmes offer a managed service model, although only 7 of them publish multi-tenant management for MSPs (Barracuda, Cato Networks, Check Point, Ericsson Cradlepoint, Fortinet, Palo Alto Networks and Versa Networks). If you'd prefer to put your own brand on the service, 2 programmes offer white label, those being Aryaka and Colt.
SASE partner programme comparison table
Research qualification: This is the complete original research table. Commission, resale discount, delivery and billing must be assessed separately: a combined “Yes” or “Vendor / reseller” does not establish every commercial arrangement. The interactive comparison adds field-level qualifications without removing the original values.
Below are all 30 programmes, verified on 23 and 24 September 2026, which you can filter by whichever requirements matter most to your business.
| Programme | Entry route | Accreditation | Joining fee | Minimum commitment | Deal registration | Models | Delivers and bills | Commission paid | Payment timing | UK | MSP multi-tenant | Verified | Source |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Aryaka: Aryaka Accelerate Global Partner Program | Direct | Not published | No | No | Yes | Resale, referral, managed service, white label | Vendor / reseller | Yes | Not published | Yes | Not published | 2026-09-23 | aryaka.com |
| AT&T Business: AT&T Alliance Channel and AT&T Partner Exchange | Not published | Not published | Not published | Not published | Not published | Referral, resale | Not published | Not published | Not published | Not published | Not published | 2026-09-24 | business.att.com |
| Barracuda SecureEdge: Barracuda Partner Success Program | Distributor | Not published | Not published | Not published | Yes | Resale, managed service | Reseller | Yes | Not published | Yes | Yes | 2026-09-24 | msspalert.com |
| BT (via Netify): Netify Reseller Programme (Authorised Reseller of BT) | Via partner | None | No | No | Not published | Resale | Vendor | Yes | Upfront on install | Yes | No | 2026-09-23 | netify.co.uk |
| Cato Networks: Cato Networks Channel First Partner Program | Direct / distributor | Not published | No | Not published | Not published | Resale, referral, managed service | Not published | Yes | Not published | Yes | Yes | 2026-09-23 | catonetworks.com |
| Check Point: Check Point Partner Program (incl. MSSP programme) | Distributor | Not published | Not published | Not published | Yes | Resale, managed service | Reseller | Yes | Not published | Yes | Yes | 2026-09-24 | blog.checkpoint.com |
| Cisco: Cisco 360 Partner Program | Distributor | Not published | Not published | Not published | Yes | Resale, managed service | Reseller | Yes | Not published | Yes | Not published | 2026-09-24 | blogs.cisco.com |
| Cloudflare One: Cloudflare Partner Network | Direct | Named tier required | Not published | Yes | Yes | Resale, referral, managed service | Reseller | Yes | Not published | Yes | Not published | 2026-09-24 | cf-assets.cloudflare.com |
| Colt Technology Services: Colt Channel Partner Programme | Direct | Not published | Not published | Not published | Not published | Resale, white label | Vendor / partner | Yes | Not published | Yes | Not published | 2026-09-24 | colt.net |
| Comcast Business: Comcast Business Partner Program (referral programmes and Comcast/Masergy channel) | Not published | Not published | Not published | Not published | Not published | Referral | Not published | Not published | Not published | Not published | Not published | 2026-09-24 | business.comcast.com |
| Ericsson Cradlepoint: Ericsson Enterprise Wireless Solutions Partner Program | Direct / distributor | Not published | Not published | Not published | Yes | Resale, managed service | Reseller | Yes | Not published | Yes | Yes | 2026-09-24 | ericsson.com |
| Expereo: Expereo Channel Partner Program | Direct | Not published | Not published | Not published | Yes | Resale, referral, managed service | Not published | Yes | Not published | Yes | Not published | 2026-09-24 | expereo.com |
| Forcepoint: Forcepoint Global Partner Program | Distributor | None | Not published | Yes | Yes | Resale, managed service | Reseller | Yes | Not published | Yes | Not published | 2026-09-24 | forcepoint.com |
| Fortinet FortiSASE: Fortinet Engage Partner Program | Distributor | Vendor certification | Not published | No | Yes | Resale, managed service | Reseller | Yes | Not published | Yes | Yes | 2026-09-24 | exclusive-networks.com |
| GTT: GTT Partner Program | Direct | Not published | Not published | Not published | Yes | Resale, referral | Not published | Yes | Not published | Not published | Not published | 2026-09-24 | gtt.net |
| HPE Aruba Networking EdgeConnect: HPE Partner Ready Vantage | Not published | Not published | Not published | Not published | Yes | Resale | Reseller | Yes | Not published | Yes | Not published | 2026-09-23 | hpe.com |
| Juniper Networks: Juniper Partner Advantage (moving to HPE Partner Ready Vantage) | Not published | Not published | Not published | Not published | Yes | Not published | Not published | Yes | Not published | Yes | Not published | 2026-09-23 | hpe.com |
| Lumen | Not available in UK | Not published | Not published | Not published | Not published | Not published | Not published | Not published | Not published | No | Not published | 2026-09-23 | netify.co.uk |
| Netskope: Netskope Evolve Partner Program | Distributor | Not published | Not published | Not published | Yes | Resale, managed service | Reseller | Yes | Not published | Yes | Not published | 2026-09-23 | exclusive-networks.com |
| NTT DATA: NTT DATA Global IP Network Channel Partner Program (IP transit, Ethernet and DDoS only) | Not published | Not published | Not published | Not published | Not published | Not published | Not published | Not published | Not published | Not published | Not published | 2026-09-24 | gin.ntt.net |
| Open Systems: Open Systems Partner Program | Direct | Not published | Not published | Not published | Yes | Resale, referral | Not published | Yes | Not published | Yes | Not published | 2026-09-23 | open-systems.com |
| Orange Business | Not published | Not published | Not published | Not published | Not published | Not published | Not published | Not published | Not published | Not published | Not published | 2026-09-24 | orange-business.com |
| Palo Alto Networks Prisma SASE: NextWave Partner Program (incl. NextWave Managed Services Program) | Distributor | Not published | Not published | Not published | Yes | Resale, referral, managed service | Reseller | Yes | Not published | Yes | Yes | 2026-09-24 | paloaltonetworks.com |
| SonicWall Cloud Secure Edge: SonicWall SecureFirst Partner Program | Distributor | None | Not published | No | Yes | Resale, managed service | Reseller | Yes | Not published | Yes | Not published | 2026-09-24 | sonicwall.com |
| VeloCloud (Arista): Arista Channels NOW! Partner Program (VeloCloud MSP) | Distributor | Vendor certification | Not published | No | Yes | Resale, managed service | Reseller | Yes | Not published | Yes | Not published | 2026-09-24 | arista.com |
| Verizon Business: Verizon Partner Network | Direct | Not published | Not published | Not published | Yes | Not published | Not published | Not published | Not published | Yes | Not published | 2026-09-24 | verizon.com |
| Versa Networks: Versa ACE Partner Program | Direct / distributor | Vendor certification | Not published | Yes | Yes | Resale, managed service | Reseller | Yes | Not published | Yes | Yes | 2026-09-24 | versa-networks.com |
| Virgin Media O2 Business: Virgin Media Business Partner Programme | Direct | Not published | Not published | Not published | Not published | Referral, resale | Vendor | Yes | Not published | Yes | Not published | 2026-09-23 | netify.co.uk |
| Vodafone Business: Vodafone Business Indirect Partner programme | Direct | Not published | Not published | Not published | Not published | Resale | Not published | Yes | Not published | Yes | Not published | 2026-09-24 | vodafone.co.uk |
| Zscaler: Zscaler Summit Partner Program | Direct / distributor | Named tier required | Not published | Yes | Yes | Resale, managed service | Reseller | Yes | Not published | Yes | Not published | 2026-09-24 | tdsynnex.com |
SASE reseller programmes by entry requirement
Research qualification: These groupings preserve the findings from the research dates. Older Cloudflare and Zscaler guides, entry-tier accreditation findings and specific MSP terms should be reconfirmed for the exact UK product and track. A white-label SD-WAN offer does not by itself establish white-label full SASE.
SASE partner programmes with no accreditation requirement
3 programmes have no accreditation requirement before your first sale, which are BT via Netify, Forcepoint at its Authorized tier and SonicWall. What rules most of the others out is either mandatory vendor certification or training (Fortinet, Versa Networks and Arista VeloCloud) or a named tier with certified staff (Cloudflare and Zscaler), and a further 22 programmes don't publish a requirement at all.
SASE partner programmes with no joining fee
Aryaka, BT via Netify and Cato Networks are the 3 programmes that state there's no fee or upfront financial commitment to join. None of the other 27 publish whether a fee applies, so we'd recommend asking the vendor directly before you apply.
SASE partner programmes with no minimum commitment
5 programmes have no minimum commitment at entry level, those being Aryaka, BT via Netify, Fortinet (Advocate), SonicWall and VeloCloud (Arista, at Authorized level). Versa Networks, Forcepoint and Zscaler set a revenue or bookings requirement at every published tier, while Cloudflare and Fortinet both add one from their Select tiers upwards, and this is usually what excludes a smaller UK reseller (21 programmes don't publish the point either way).
SASE programmes available through UK distributors
13 programmes are available through distributors, which are Barracuda, Cato Networks, Check Point, Cisco, Ericsson Cradlepoint, Forcepoint, Fortinet, Netskope, Palo Alto Networks, SonicWall, VeloCloud (Arista), Versa Networks and Zscaler. Of the rest, 9 publish a direct route only, 1 runs through an authorised partner (BT via Netify) and 7 have no published UK route at all.
SASE programmes for MSPs with multi-tenant management
7 programmes publish multi-tenant management for MSPs, those being Barracuda, Cato Networks, Check Point, Ericsson Cradlepoint, Fortinet, Palo Alto Networks and Versa Networks. The other 9 managed service programmes don't publish any multi-tenant tooling, and BT via Netify doesn't offer it as BT runs every service itself.
White label SASE programmes
Aryaka and Colt are the only 2 programmes offering white label. BT via Netify isn't white label (BT's name stays on both the contract and the bill), and the other 27 don't publish a white label option.
Resell BT SASE with Netify
Research qualification: The BT products below are a wider security and connectivity portfolio, not interchangeable complete SASE bundles. Product availability, joining terms, commission triggers and onboarding times must be confirmed for the applicant and opportunity. A firewall, endpoint product or BTnet circuit alone is not a complete SASE service.
What you can resell
- BT Managed Next Generation Firewall on Fortinet FortiGate
- BTnet Security on Cisco Meraki MX
- BT Managed Fortinet SD-WAN
- BT Managed Meraki SD-WAN
- BT Managed EDR with CrowdStrike
- BT Complete Cloud Secure
- BT Managed DDoS Protection
- BT Security Awareness Training
- BT endpoint antivirus
SD-WAN comes as a component of the BT SASE portfolio, delivered on either the Cisco Meraki or the Fortinet platform.
How the Netify route works
You join through Netify, who've been an Authorised Partner of BT since 2012, and there's no certification, joining fee or minimum sales target to worry about. BT designs, delivers, supports and bills every service, while you're paid commission upfront on install on 36 and 60 month contracts (at the rate confirmed in writing when you apply), and onboarding usually takes two to three weeks from an accepted application to a live reseller code.
Who it suits
The Netify Reseller Programme is best suited to IT companies, MSPs, cybersecurity resellers, and telecoms and connectivity partners that are already selling to UK businesses.
How to apply
Apply to become an Authorised Reseller of BT at https://netify.co.uk/go/bt-reseller-application/.
SASE vendor partner programmes, one by one
Reselling Aryaka
Research qualification: Programme terms vary by territory, tier and product. Confirm the SASE products available through your selected route.
Aryaka sells SASE to resellers through its Aryaka Accelerate Global Partner Program, which UK resellers join directly with Aryaka (whether any accreditation is needed before your first sale isn't published). Resale, referral, managed service (co-managed) and white label are all on offer, with Aryaka delivering the service and either Aryaka or the reseller billing the customer, depending on the model you choose. Aryaka also states there's no upfront investment and no revenue commitment, as well as deal registration that protects an opportunity for as long as you're actively working it.
Entry: Direct
Accreditation: Not published
Joining fee: No
Minimum commitment: No
Deal registration: Yes
Models: Resale, referral, managed service, white label
Delivers and bills: Vendor / reseller
UK: Yes
Verified: 2026-09-23
Source: https://www.aryaka.com/partners/accelerate-program/
Reselling AT&T Business
Research qualification: UK SASE partner eligibility is unconfirmed. Excluded from the default UK comparison.
AT&T Business runs two programmes, AT&T Alliance Channel (referral and co-sell) and AT&T Partner Exchange (resale), however neither of them publishes a route for UK companies, with both aimed squarely at the US market and no UK entry route or accreditation requirement published. Alliance Channel partners sell independently or co-sell on upfront and residual compensation, whereas Partner Exchange partners control the customer lifecycle through to billing, although the Alliance Channel portfolio lists SD-WAN rather than managed SASE. If you're a UK reseller interested in AT&T, we'd recommend confirming directly with them whether any indirect route exists for their managed SASE outside the US.
Entry: Not published
Accreditation: Not published
Joining fee: Not published
Minimum commitment: Not published
Deal registration: Not published
Models: Referral, resale
Delivers and bills: Not published
UK: Not published
Verified: 2026-09-24
Source: https://www.business.att.com/industries/partner-solutions.html
Reselling Barracuda SecureEdge
Research qualification: Programme terms vary by territory, tier and product. Confirm the SASE products available through your selected route.
Barracuda sell SecureEdge through the Barracuda Partner Success Program, which brings MSPs and resellers together under one model, and UK resellers transact through a distributor (accreditation before the first sale isn't published). The programme covers resale and managed service, with the reseller or MSP delivering and billing the customer from Barracuda's purpose-built MSP management platforms. Benefits step up across four tiers (Affiliate, Authorized, Preferred and Premier), although Barracuda don't publish the entry requirements for each.
Entry: Distributor
Accreditation: Not published
Joining fee: Not published
Minimum commitment: Not published
Deal registration: Yes
Models: Resale, managed service
Delivers and bills: Reseller
UK: Yes
Verified: 2026-09-24
Source: https://www.msspalert.com/news/barracuda-networks-updates-partner-program (source unavailable at the latest link check)
Reselling BT (via Netify)
Research qualification: Netify earns commission on this route. BT suitability, products and terms require human review; this comparison is not approval.
BT SASE is sold to resellers through the Netify Reseller Programme, which makes UK companies an Authorised Reseller of BT, and you join through Netify (an Authorised Partner of BT since 2012) with no certification needed before your first sale. It runs as a dealer model, meaning BT designs, delivers, supports and bills every service while the reseller is paid upfront on install. To apply you'll need to be a UK-registered limited company and clear seven published eligibility gates, and onboarding typically takes two to three weeks.
Entry: Via partner
Accreditation: None
Joining fee: No
Minimum commitment: No
Deal registration: Not published
Models: Resale
Delivers and bills: Vendor
UK: Yes
Verified: 2026-09-23
Source: https://netify.co.uk/resell/bt-sase/
Reselling Cato Networks
Research qualification: Programme terms vary by territory, tier and product. Confirm the SASE products available through your selected route.
Cato Networks, who sell SASE through their Channel First Partner Program, take UK resellers either directly or through distributors including Westcon-Comstor and Arrow, although accreditation before the first sale isn't published. There are tracks for VARs, MSPs, service providers and agents, and every partner gets the multi-tenant Cato Managed SASE Partner Platform free of charge to run customers from, though who bills the customer isn't published. Cato also state there's zero upfront financial commitment to join either of their two tiers (Starter and Advanced).
Entry: Direct / distributor
Accreditation: Not published
Joining fee: No
Minimum commitment: Not published
Deal registration: Not published
Models: Resale, referral, managed service
Delivers and bills: Not published
UK: Yes
Verified: 2026-09-23
Source: https://www.catonetworks.com/partners/
Reselling Check Point
Research qualification: Programme terms vary by territory, tier and product. Confirm the SASE products available through your selected route.
Check Point sells Harmony SASE through the Check Point Partner Program alongside a dedicated MSSP programme, and UK MSPs can buy it through cloud marketplaces such as Pax8 and Sherweb (accreditation before the first sale isn't published). Resale is available, and on the managed service side the MSP provisions customers from Check Point's Infinity Portal and delivers and bills the service itself. The MSSP model is consumption-based, so on Pax8 the MSP is billed on usage.
Entry: Distributor
Accreditation: Not published
Joining fee: Not published
Minimum commitment: Not published
Deal registration: Yes
Models: Resale, managed service
Delivers and bills: Reseller
UK: Yes
Verified: 2026-09-24
Source: https://blog.checkpoint.com/securing-user-and-access/check-point-and-pax8-partnership-provides-powerful-new-security-offerings-for-msps/ (source unavailable at the latest link check)
Reselling Cisco
Research qualification: Programme terms vary by territory, tier and product. Confirm the SASE products available through your selected route.
Cisco sells Catalyst SD-WAN, Secure Access and Meraki to resellers through the Cisco 360 Partner Program, which replaced the old Gold, Premier and Select levels on 1 February 2026. UK resellers buy through distributors such as Ingram Micro, and while the accreditation needed before your first sale isn't published, Cisco career certifications do count towards the Partner Value Index behind every designation. Sell and managed motions sit within one structure, with the reseller delivering and billing the customer, and as each portfolio is scored separately a partner can hold Cisco Preferred Partner status in one area but not another (Meraki is also resold as a managed service in the BT row).
Entry: Distributor
Accreditation: Not published
Joining fee: Not published
Minimum commitment: Not published
Deal registration: Yes
Models: Resale, managed service
Delivers and bills: Reseller
UK: Yes
Verified: 2026-09-24
Source: https://blogs.cisco.com/partner/celebrating-connections-and-launching-the-new-cisco-360-partner-program (source unavailable at the latest link check)
Reselling Cloudflare One
Research qualification: Historical programme guide: current tier requirements and commitments need confirmation.
Cloudflare One is sold through the Cloudflare Partner Network, which UK partners apply to directly. Referral and pay-as-you-go resale are both open routes, however Enterprise resale starts at the Select tier, which requires certified sales and technical staff as well as a monthly recurring revenue commitment (as does every tier above it). The programme covers referral, resale and managed service (through the Authorized Managed Service Provider track), and on Enterprise deals it's the reseller who bills the customer.
Entry: Direct
Accreditation: Named tier required
Joining fee: Not published
Minimum commitment: Yes
Deal registration: Yes
Models: Resale, referral, managed service
Delivers and bills: Reseller
UK: Yes
Verified: 2026-09-24
Reselling Colt Technology Services
Research qualification: Programme terms vary by territory, tier and product. Confirm the SASE products available through your selected route.
Colt sells managed SD-WAN and SASE to channel partners through the Colt Channel Partner Programme, which UK partners join directly (accreditation before the first sale isn't published). Resellers, systems integrators and wholesale partners are all covered, with Colt delivering the service and the partner billing for it if they take Colt's SD WAN white label option. As Colt's direct sales team handles most global enterprise accounts, we'd say the partner route is strongest for wholesale and white label deals.
Entry: Direct
Accreditation: Not published
Joining fee: Not published
Minimum commitment: Not published
Deal registration: Not published
Models: Resale, white label
Delivers and bills: Vendor / partner
UK: Yes
Verified: 2026-09-24
Source: https://www.colt.net/product/sd-wan-white-label/
Reselling Comcast Business
Research qualification: UK SASE partner eligibility is unconfirmed. Excluded from the default UK comparison.
Comcast Business sells through its Comcast Business Partner Program, made up of referral programmes and a combined Comcast Business and Masergy channel programme, although none of it publishes a route for UK companies. The referral programmes are built around US customers, Chamber of Commerce members and trade associations, and there's no UK entry route or accreditation requirement published either. Partners refer SD-WAN and security services which Comcast then delivers, with the Masergy channel reached through technology solution distributors (such as Telarus), so our suggestion would be to confirm directly with Comcast Business whether its Masergy channel accepts UK partners before assuming either way.
Entry: Not published
Accreditation: Not published
Joining fee: Not published
Minimum commitment: Not published
Deal registration: Not published
Models: Referral
Delivers and bills: Not published
UK: Not published
Verified: 2026-09-24
Source: https://business.comcast.com/partner (source unavailable at the latest link check)
Reselling Ericsson Cradlepoint
Research qualification: Programme terms vary by territory, tier and product. Confirm the SASE products available through your selected route.
Ericsson sells Cradlepoint 5G SD-WAN and SASE through the Ericsson Enterprise Wireless Solutions Partner Program, having replaced its tiers with a simpler structure in 2025. UK resellers can join directly as Solution Partners (which means investing in sales and technical certifications) or as distribution-managed partners supported by a distributor. Alongside resale there's an ecosystem route for MSPs and carriers building managed services, with the reseller delivering and billing the customer. Ericsson is also 100 per cent channel, and registering a deal earns you a higher discount than leaving it unregistered.
Entry: Direct / distributor
Accreditation: Not published
Joining fee: Not published
Minimum commitment: Not published
Deal registration: Yes
Models: Resale, managed service
Delivers and bills: Reseller
UK: Yes
Verified: 2026-09-24
Source: https://www.ericsson.com/en/news/2025/6/ericsson-enterprise-wireless-launches-new-solutions-partner-program (source unavailable at the latest link check)
Reselling Expereo
Research qualification: Programme terms vary by territory, tier and product. Confirm the SASE products available through your selected route.
Expereo sells managed SD-WAN and SASE through the Expereo Channel Partner Program, and UK partners join directly under one global agreement covering more than 190 countries (accreditation before the first sale isn't published). MSPs, VARs, systems integrators and trusted advisors are all covered, with Expereo delivering the managed service and advisors earning commission on recurring contracts, although who bills the customer on resale isn't published. Bear in mind that Expereo's SASE runs on Cato Networks and Zscaler, so what you're actually selling is an Expereo-managed service and not a vendor licence.
Entry: Direct
Accreditation: Not published
Joining fee: Not published
Minimum commitment: Not published
Deal registration: Yes
Models: Resale, referral, managed service
Delivers and bills: Not published
UK: Yes
Verified: 2026-09-24
Source: https://expereo.com/channel-partner
Reselling Forcepoint
Research qualification: Programme terms vary by territory, tier and product. Confirm the SASE products available through your selected route.
Forcepoint's SSE and SASE is sold through the Forcepoint Global Partner Program, where UK resellers transact through an authorised Forcepoint distributor and the entry Authorized tier carries no enablement requirement before the first sale. Both resale and an MSSP route are available, with the reseller delivering and billing the customer. Registered deals are only honoured through the distributor named on the registration, and each tier carries a minimum annual net new bookings requirement set by country band (with the UK sitting in the top band).
Entry: Distributor
Accreditation: None
Joining fee: Not published
Minimum commitment: Yes
Deal registration: Yes
Models: Resale, managed service
Delivers and bills: Reseller
UK: Yes
Verified: 2026-09-24
Source: https://www.forcepoint.com/resources/brochures/partner-program-overview (source unavailable at the latest link check)
Reselling Fortinet FortiSASE
Research qualification: Programme terms vary by territory, tier and product. Confirm the SASE products available through your selected route.
Fortinet sells FortiSASE through its Fortinet Engage Partner Program, which also has a separate MSSP business model. UK resellers buy through distributors such as Exclusive Networks, and even at the entry Advocate level you'll need one Fortinet Certified Fundamentals certification in place before the first sale. Resale and managed service are both offered, with the partner delivering and billing the customer, and while Advocate has no sales volume requirement, Select, Advanced and Expert all do (FortiSASE is also resold as a managed service in the BT row).
Entry: Distributor
Accreditation: Vendor certification
Joining fee: Not published
Minimum commitment: No
Deal registration: Yes
Models: Resale, managed service
Delivers and bills: Reseller
UK: Yes
Verified: 2026-09-24
Source: https://www.exclusive-networks.com/se/wp-content/uploads/sites/25/2025/03/Engage-Partner-Program-Brochure-9-1-24.pdf (source unavailable at the latest link check)
Reselling GTT
Research qualification: UK SASE partner eligibility is unconfirmed. Excluded from the default UK comparison.
GTT sells managed SASE to channel partners through the GTT Partner Program, which partners join either directly or through technology solution distributors. GTT provides onboarding, technical certifications and sales training, though whether any of it is required before your first sale isn't published, and partners can sell to, sell with or sell through GTT, with GTT delivering the managed service and paying commission on both new and renewal business. GTT state there's no channel conflict and no blocked accounts, however a UK-specific partner route isn't published.
Entry: Direct
Accreditation: Not published
Joining fee: Not published
Minimum commitment: Not published
Deal registration: Yes
Models: Resale, referral
Delivers and bills: Not published
UK: Not published
Verified: 2026-09-24
Source: https://www.gtt.net/channel-partners/
Reselling HPE Aruba Networking EdgeConnect
Research qualification: Programme terms vary by territory, tier and product. Confirm the SASE products available through your selected route.
HPE sells EdgeConnect SD-WAN and SASE through HPE Partner Ready Vantage, which UK resellers join through HPE, although neither the entry route nor any accreditation needed before the first sale is published. The programme covers resale and services, with the reseller delivering and billing the customer under one deal registration framework. From 1 November 2026, Juniper partners will also move into the same programme, with one set of tiers, competencies and compensation across both.
Entry: Not published
Accreditation: Not published
Joining fee: Not published
Minimum commitment: Not published
Deal registration: Yes
Models: Resale
Delivers and bills: Reseller
UK: Yes
Verified: 2026-09-23
Source: https://www.hpe.com/us/en/newsroom/press-release/2026/06/hpe-fuels-partner-growth-with-new-incentives-partner-led-offers-and-unified-program.html (source unavailable at the latest link check)
Reselling Juniper Networks
Research qualification: Programme terms vary by territory, tier and product. Confirm the SASE products available through your selected route.
Juniper sells SD-WAN and Secure Edge through Juniper Partner Advantage, at least until it merges into HPE Partner Ready Vantage on 1 November 2026. UK resellers can still join the Juniper programme today (the accreditation needed before the first sale isn't published), with commercial models and billing then moving onto HPE's single compensation structure and deal registration framework from November. HPE have said that existing Juniper partner investments and certifications are protected through the transition.
Entry: Not published
Accreditation: Not published
Joining fee: Not published
Minimum commitment: Not published
Deal registration: Yes
Models: Not published
Delivers and bills: Not published
UK: Yes
Verified: 2026-09-23
Source: https://www.hpe.com/us/en/newsroom/press-release/2026/06/hpe-fuels-partner-growth-with-new-incentives-partner-led-offers-and-unified-program.html (source unavailable at the latest link check)
Reselling Lumen
Research qualification: Historical EMEA route: investigate Colt and confirm current UK eligibility.
Lumen doesn't run a UK partner programme for SASE, as its EMEA business now belongs to Colt, meaning there's no UK entry route. Commercial models and billing for UK resellers aren't published either, so if you're after the former Lumen EMEA estate, we'd recommend looking at the Colt row instead.
Entry: Not available in UK
Accreditation: Not published
Joining fee: Not published
Minimum commitment: Not published
Deal registration: Not published
Models: Not published
Delivers and bills: Not published
UK: No
Verified: 2026-09-23
Source: https://netify.co.uk/sase/vendors/colt-technology-services/
Reselling Netskope
Research qualification: Programme terms vary by territory, tier and product. Confirm the SASE products available through your selected route.
Netskope sells SASE through the Netskope Evolve Partner Program, which added a dedicated MSP programme in 2023. Netskope doesn't sell direct, therefore UK resellers buy through distributors such as Exclusive Networks, and the accreditation needed at the entry Authorized tier isn't published. Both resale and managed service are offered, with the reseller or MSP delivering and billing the customer, and registered deals carry extra incentives, whereas the Service Delivery specialisation requires advanced Netskope certification.
Entry: Distributor
Accreditation: Not published
Joining fee: Not published
Minimum commitment: Not published
Deal registration: Yes
Models: Resale, managed service
Delivers and bills: Reseller
UK: Yes
Verified: 2026-09-23
Source: https://www.exclusive-networks.com/vendors/netskope
Reselling NTT DATA
Research qualification: UK SASE partner eligibility is unconfirmed. Excluded from the default UK comparison. The cited channel programme covers IP transit, Ethernet and DDoS, not proof of a SASE resale route.
NTT DATA doesn't publish a reseller or partner programme for its managed SASE. Its Global IP Network does run a commission-based channel programme for technology solution distributors and direct agents (with channel managers in EMEA), but it only covers IP transit, Ethernet and DDoS protection. NTT DATA's managed SASE, built with Palo Alto Networks and Cisco, is sold direct with no commercial model or billing arrangement published for resellers, so while a UK reseller could join the Global IP Network programme for connectivity, there's no published way to resell NTT DATA's managed SASE.
Entry: Not published
Accreditation: Not published
Joining fee: Not published
Minimum commitment: Not published
Deal registration: Not published
Models: Not published
Delivers and bills: Not published
UK: Not published
Verified: 2026-09-24
Source: https://www.gin.ntt.net/about-the-global-ip-network/channel-partners/
Reselling Open Systems
Research qualification: Programme terms vary by territory, tier and product. Confirm the SASE products available through your selected route.
Open Systems sells managed SASE through the Open Systems Partner Program, and UK partners join directly through Open Systems' UK and Ireland channel team (accreditation before the first sale isn't published). VARs, systems integrators and agents are all covered, with Open Systems delivering and operating the fully managed service, though who bills the customer isn't published. Registered deals earn higher discounts, and for the time being distribution (ALLNET) only covers the DACH region.
Entry: Direct
Accreditation: Not published
Joining fee: Not published
Minimum commitment: Not published
Deal registration: Yes
Models: Resale, referral
Delivers and bills: Not published
UK: Yes
Verified: 2026-09-23
Source: https://www.open-systems.com/partners (source unavailable at the latest link check)
Reselling Orange Business
Research qualification: UK SASE partner eligibility is unconfirmed. Excluded from the default UK comparison.
Orange Business doesn't publish a partner programme that lets UK resellers sell its managed SASE, and its partners page only lists the technology vendors it buys from (such as Cisco, Fortinet and Palo Alto Networks), with no UK entry route published. Orange sells its SASE directly as a managed service on its Evolution Platform, and its own documentation actually describes the Fortinet-based SASE service as not for resale. You may come across the older UK Orange Partner Programme, however that belonged to Orange mobile (now EE) and never covered Orange Business SASE.
Entry: Not published
Accreditation: Not published
Joining fee: Not published
Minimum commitment: Not published
Deal registration: Not published
Models: Not published
Delivers and bills: Not published
UK: Not published
Verified: 2026-09-24
Source: https://www.orange-business.com/en/about-us/partners (source unavailable at the latest link check)
Reselling Palo Alto Networks Prisma SASE
Research qualification: Programme terms vary by territory, tier and product. Confirm the SASE products available through your selected route.
Palo Alto Networks sells Prisma SASE through the NextWave Partner Program, with an MSSP route under the NextWave Managed Services Program. UK resellers buy through distribution, and although the accreditation needed before the first sale isn't published, the Prisma SASE specialisation (with its own training and certifications) unlocks specialisation incentives. Resale, deal referral and managed service are all available, with the partner delivering and billing the customer. NextWave status is reviewed on a defined cycle, and Palo Alto Networks tightened the programme's requirements in 2026.
Entry: Distributor
Accreditation: Not published
Joining fee: Not published
Minimum commitment: Not published
Deal registration: Yes
Models: Resale, referral, managed service
Delivers and bills: Reseller
UK: Yes
Verified: 2026-09-24
Source: https://www.paloaltonetworks.com/partners/managed-security-services-provider-program
Reselling SonicWall Cloud Secure Edge
Research qualification: Programme terms vary by territory, tier and product. Confirm the SASE products available through your selected route.
SonicWall sells Cloud Secure Edge to resellers and MSPs through the SonicWall SecureFirst Partner Program, and as SonicWall is 100 per cent channel, UK partners transact through distribution, with partner benefits starting without any training or business planning commitment. Resale and managed service are both on offer, and the Service Provider Overlay lets MSPs take monthly billing with no commitment and bill their own customers. Partners can then choose between the Velocity track (minimal requirements) and the Mastery track (full incentives), both of which include deal registration.
Entry: Distributor
Accreditation: None
Joining fee: Not published
Minimum commitment: No
Deal registration: Yes
Models: Resale, managed service
Delivers and bills: Reseller
UK: Yes
Verified: 2026-09-24
Source: https://www.sonicwall.com/blog/how-the-all-new-securefirst-partner-program-puts-partners-first
Reselling VeloCloud (Arista)
Research qualification: Programme terms vary by territory, tier and product. Confirm the SASE products available through your selected route.
Arista sells VeloCloud SD-WAN and SASE through the Arista Channels NOW! Partner Program, having taken on VeloCloud MSPs from Broadcom in 2025. Every new UK partner starts at the Authorized level under indirect supply through Arista distributors, and accreditation training is required at every level. Resale and managed service (the VeloCloud MSP track) are both offered, with the partner delivering and billing the customer, although moving up to Elite needs more training and a sales commitment, and ElitePlus is by invitation only.
Entry: Distributor
Accreditation: Vendor certification
Joining fee: Not published
Minimum commitment: No
Deal registration: Yes
Models: Resale, managed service
Delivers and bills: Reseller
UK: Yes
Verified: 2026-09-24
Source: https://www.arista.com/en/partner/partner-program
Reselling Verizon Business
Research qualification: Programme terms vary by territory, tier and product. Confirm the SASE products available through your selected route.
Verizon sells managed SASE through the Verizon Partner Network, and UK partners apply through Verizon's international Partner Network page (which does list the United Kingdom). Training and accreditation are both offered, though whether either is required before your first sale isn't published. Verizon describes several partner models as well as a single partner portal with lead registration and quoting, but who delivers and bills the customer isn't published. Support is regionally aligned, and new applicants receive their application credentials within two to five days.
Entry: Direct
Accreditation: Not published
Joining fee: Not published
Minimum commitment: Not published
Deal registration: Yes
Models: Not published
Delivers and bills: Not published
UK: Yes
Verified: 2026-09-24
Source: https://www.verizon.com/business/en-en/resources/partner-network/
Reselling Versa Networks
Research qualification: Programme terms vary by territory, tier and product. Confirm the SASE products available through your selected route.
Versa Networks sells SASE through the Versa ACE Partner Program, which UK resellers join either directly or through a Versa distributor. Even the entry Core tier needs a set number of staff through Versa's sales, pre-sales and technical training, plus mandatory programme certifications, so it's not the quickest entry point. Resale and managed service are both offered, with MSPs using the multi-tenant Versa platform to deliver and bill their own services, and all three tiers (Core, Elevate and Accelerate) carry a revenue requirement and quarterly business reviews, with deal registration included at every tier.
Entry: Direct / distributor
Accreditation: Vendor certification
Joining fee: Not published
Minimum commitment: Yes
Deal registration: Yes
Models: Resale, managed service
Delivers and bills: Reseller
UK: Yes
Verified: 2026-09-24
Source: https://versa-networks.com/partners/program-summary/
Reselling Virgin Media O2 Business
Research qualification: Managed services availability does not establish a current UK SASE reseller agreement.
Virgin Media O2 Business sells SD-WAN and SASE to UK partners through the Virgin Media Business Partner Programme, which you join directly at Referral, Reseller or Solution Provider level (accreditation before the first sale isn't published). Referral and resale are both offered, with Virgin Media O2 designing, delivering, managing and billing the service itself. No white label option is published, and Netify's own Virgin Media Business reseller route is still being scoped.
Entry: Direct
Accreditation: Not published
Joining fee: Not published
Minimum commitment: Not published
Deal registration: Not published
Models: Referral, resale
Delivers and bills: Vendor
UK: Yes
Verified: 2026-09-23
Source: https://netify.co.uk/marketplace/virgin-media/
Reselling Vodafone Business
Research qualification: Programme terms vary by territory, tier and product. Confirm the SASE products available through your selected route.
Vodafone Business sells SD-WAN and SASE through its Indirect Partner programme, with UK partners applying directly through an onboarding form and receiving training and setup support once accepted (accreditation before the first sale isn't published). Commercial terms are shaped per partner by Vodafone's Business Partner Managers, and who delivers and bills the customer isn't published. For partners with local specialist capability, longer Strategic Partner Agreements are also available.
Entry: Direct
Accreditation: Not published
Joining fee: Not published
Minimum commitment: Not published
Deal registration: Not published
Models: Resale
Delivers and bills: Not published
UK: Yes
Verified: 2026-09-24
Source: https://www.vodafone.co.uk/business/why-vodafone/trusted-partners
Reselling Zscaler
Research qualification: Historical programme guide: current tier requirements and commitments need confirmation.
Zscaler sells SASE through the Zscaler Summit Partner Program, which UK resellers transact through either directly with Zscaler or via distribution. The latest public programme guide (FY24) requires certified sales and sales engineering staff for both published tiers, Alpine and Zenith, and both of those tiers carry an annual revenue commitment. Resale is offered with the reseller setting its own price, invoicing and collecting from the customer, as well as deal registration on every tier, and although Zscaler revamped the programme for FY26 with renewal registration and teaming incentives, the new tier requirements are only published in its partner portal.
Entry: Direct / distributor
Accreditation: Named tier required
Joining fee: Not published
Minimum commitment: Yes
Deal registration: Yes
Models: Resale, managed service
Delivers and bills: Reseller
UK: Yes
Verified: 2026-09-24
How to choose a SASE partner programme
How to select a managed SASE partner for regulatory compliance needs
Research qualification: Provider delivery does not remove the reseller’s own contractual, data-protection or regulatory responsibilities. The original research does not establish a current VMO2 UK SASE partner agreement. Obtain the scope of responsibilities and data-location commitments in writing.
If regulatory compliance is a concern, BT via Netify and Virgin Media O2 Business are the two programmes where the carrier delivers and bills, so the reseller doesn't carry delivery of the compliance controls itself (Aryaka also works this way on referral deals). None of the 30 partner pages we reviewed publish UK data residency or UK points of presence as a programme term, therefore we'd strongly recommend getting it in writing from the vendor, as well as using the managed service filter to narrow the table down to programmes where the vendor or carrier runs the service.
SASE benefits for channel partners
On the topic of recurring billing, Check Point (consumption-based through Pax8), SonicWall (monthly service provider billing with no commitment) and Expereo (commission on recurring contracts) all evidence it. Vendor-delivered services come from BT via Netify, Virgin Media O2 Business, Open Systems and Expereo, whereas Cato Networks, Versa Networks and Fortinet let a reseller sell a single-vendor stack from one partner programme, and the delivery and billing filter is the easiest way to separate the two.
Top SASE vendors for channel partners
Research qualification: This is a count of the five stated research criteria, not a product-quality ranking. Unknown terms do not mean a vendor fails a requirement. The interactive comparison does not use this count to recommend a supplier.
We've counted each programme against five criteria (no accreditation, no joining fee, no minimum commitment, deal registration and UK availability), with Aryaka, BT via Netify and SonicWall satisfying 4 each, and Forcepoint, Fortinet and VeloCloud (Arista) satisfying 3. Barracuda, Cato Networks, Check Point, Cisco, Cloudflare, Ericsson Cradlepoint, Expereo, HPE Aruba EdgeConnect, Juniper Networks, Netskope, Open Systems, Palo Alto Networks, Verizon Business, Versa Networks and Zscaler satisfy 2, Colt, GTT, Virgin Media O2 Business and Vodafone Business satisfy 1, and AT&T Business, Comcast Business, Lumen, NTT DATA and Orange Business don't satisfy any on published terms.
SD-WAN reseller programmes compared with SASE reseller programmes
Research qualification: The first sentence below is too broad as a current entitlement claim: inclusion in this research does not establish that every programme sells SD-WAN within a complete SASE service. In particular, the cited NTT programme is for IP transit, Ethernet and DDoS. Confirm entitlement programme by programme.
Every programme in the table sells SD-WAN as a component of SASE, however BT via Netify (BT Managed Meraki SD-WAN and BT Managed Fortinet SD-WAN), Colt, Virgin Media O2 Business and VeloCloud (Arista) still let a reseller sell the SD-WAN component on its own, without the cloud security layer.
Reselling SASE: frequently asked questions
Research qualification: Answers below preserve the dated research. Read current programme qualifications with the counts, commercial terms and joining timelines; these can vary by territory and track.
How are SASE reseller margins structured?
BT via Netify pays commission upfront on install, Expereo pays advisors commission on recurring contracts, and GTT pays commission on both new and renewal business. Fortinet, Forcepoint, Netskope, Cloudflare, VeloCloud (Arista) and Zscaler instead tier the reseller's discount by partner level, meaning margin rises as your accreditation does.
What is SASE deal registration and which programmes offer it?
Deal registration lets a reseller lock an opportunity to themselves so the vendor protects it from other partners, and 20 programmes offer it, which are Aryaka, Barracuda, Check Point, Cisco, Cloudflare, Ericsson Cradlepoint, Expereo, Forcepoint, Fortinet, GTT, HPE Aruba EdgeConnect, Juniper Networks, Netskope, Open Systems, Palo Alto Networks, SonicWall, VeloCloud (Arista), Verizon Business (as lead registration), Versa Networks and Zscaler. The other 10 don't publish it, and it's worth knowing that Forcepoint only honours a registered deal through the distributor named on the registration.
Which SASE distributors operate in the UK?
The distributors named across the programmes we've compared are Westcon-Comstor and Arrow (Cato Networks), Ingram Micro (Cisco), Exclusive Networks (Fortinet and Netskope), Nextgen (Barracuda) and the Pax8 and Sherweb marketplaces (Check Point). Ericsson Cradlepoint, Forcepoint, Palo Alto Networks, SonicWall, VeloCloud (Arista), Versa Networks and Zscaler also sell through distribution, but don't name their UK distributors on their partner pages.
Can you white label SASE?
Yes, through 2 programmes, with Aryaka offering white label and co-management options and Colt offering its SD WAN as a white label service. BT via Netify isn't white label, since BT's name stays on both the contract and the bill.
Do SASE vendors require accreditation before you can sell?
Most either do or simply don't say, with only BT via Netify, Forcepoint (Authorized tier) and SonicWall publishing no accreditation requirement before the first sale. Fortinet needs one Fortinet Certified Fundamentals certification even at Advocate level, Versa Networks requires trained staff and programme certifications even at its Core tier, VeloCloud (Arista) requires accreditation training, and Cloudflare and Zscaler both require certified staff at their named tiers.
Is there a SASE partner programme with no minimum sales target?
Yes, 5 of them in fact, with Aryaka, BT via Netify, Fortinet (at Advocate level), SonicWall and VeloCloud (Arista, at Authorized level) publishing no minimum commitment at entry. Versa Networks, Forcepoint and Zscaler set a revenue or bookings requirement at every published tier, while Cloudflare and Fortinet add one from their Select tiers upwards.
Who delivers and bills the customer when you resell SASE?
With BT via Netify and Virgin Media O2 Business the carrier delivers and bills, Aryaka does the same on referral deals, and Colt bills through the partner when its white label option is used. On 14 programmes (including Cisco, Fortinet, Netskope, Palo Alto Networks and Zscaler) the reseller or MSP delivers and bills, and the remaining 12 don't publish who bills the customer.
How long does it take to join a SASE partner programme?
BT via Netify typically takes two to three weeks from an accepted application to a live reseller code, and Verizon issues application credentials within two to five days. The other 28 programmes don't publish a joining timeline, therefore we'd recommend asking the vendor's channel team before you plan a first quarter's revenue around it.
How this comparison was verified
Research qualification: The original methodology below describes the author’s research. A subsequent link check is not independent verification of every claim. Where a source is historical, unavailable or insufficient for UK SASE eligibility, the comparison states that limitation. Review is due by 24 December 2026.
Every row was checked against the vendor's own partner programme page, downloadable programme guides and distributor listings, with carrier partner and wholesale pages used for BT, Colt, GTT, Virgin Media O2 Business, Vodafone Business and the other carriers. The table was verified on 23 and 24 September 2026 and is reviewed quarterly, and anything a vendor doesn't publish is marked "not published" rather than estimated. If you're a vendor and something's out of date, you can send a correction (with a link to the source) to support@netify.com.
Apply to resell BT SASE with Netify
Resell BT Business with Netify and become an Authorised Reseller of BT at https://netify.co.uk/go/bt-reseller-application/.