What is Managed SASE?
Managed SASE (Secure Access Service Edge) is the converged delivery of SD-WAN and cloud-delivered network security as a single managed service. The security layer typically covers Secure Web Gateway, Zero Trust Network Access, Cloud Access Security Broker and Firewall-as-a-Service, with SD-WAN underneath providing application-aware routing across multiple underlay circuits.
In a managed delivery the customer hands platform operations (deployment, monitoring, firewall change, incident handling, circuit lifecycle and SLA accountability) to a managed service provider. For UK enterprise, BT Business is the most established managed SASE provider, delivering on both Cisco Meraki and Fortinet underlays.
Netify works with buyers ahead of RFP to decide on vendor-fit (Meraki vs Fortinet), service model (self-managed, co-managed, fully BT-managed) and indicative commercials. The Netify Vendor Marketplace adds 30+ alternative SASE and SD-WAN suppliers when a non-BT view is needed.
Who is Managed SASE for?
IT Directors, Infrastructure leaders and procurement teams running multi-site UK or international estates across Healthcare, Retail, Manufacturing and Financial Services. Managed SASE is the right answer when internal teams cannot reasonably carry platform operations at scale, when the security posture has to meet sector compliance, and when SD-WAN and cloud security need to be procured as a single contracted service.
Healthcare. NHS trusts and hospital groups needing NHS DSPT alignment, clinical-device segmentation and sub-50ms latency for EHR and PACS.
Retail. Multi-branch retailers needing PCI-aligned posture across the store estate, rapid rollout and a network that holds through peak trading.
Manufacturing. Manufacturers and logistics operators needing IT/OT convergence done safely and cyber-physical resilience.
Financial Services. Banks, insurers and wealth managers needing operational resilience, audit-ready governance and FCA-aligned security posture.
Meraki or Fortinet for Managed SASE?
Fortinet is security-led, compliance-heavy and operationally complex. Meraki is cloud-managed, fast to deploy and operationally simple. Both are available under BT Business managed delivery. The right answer depends on sector compliance, site count, internal capacity to operate the platform, and existing BT contracts.
Fortinet typically wins where compliance posture is the primary driver. Integrated networking and security in one stack, deep segmentation, ZTNA and centralised policy control. Stronger fit in regulated environments and IT/OT convergence.
Meraki typically wins where operational simplicity and rapid deployment are the priorities. Cloud dashboard unifying SD-WAN, switching, wireless and security. Stronger fit in distributed retail and multi-branch estates where lean IT operations and rapid rollout matter.
Netify maintains a dedicated comparison surface that walks through this decision in detail, including BT managed service options on top of either platform.
How does the Netify Marketplace help with SASE procurement?
The Netify Marketplace lists 30+ pre-vetted SD-WAN, SASE and security suppliers, each independently scored against the Netify Market Index methodology. Buyers use the RFP Builder to generate a structured RFP and publish it directly to scored vendors. No sales intermediaries, no gated content, no pay-to-play rankings.
The flow is: select pre-written RFP questions for your sector, add bespoke requirements with AI assistance, publish to the curated marketplace, compare vendor responses side-by-side, move from RFP to vendor engagement.
For buyers who want BT in the shortlist plus an alternative-vendor view, Netify operates both surfaces. The BT Managed SASE advisory sits alongside the Marketplace, so the buyer can decide where BT fits in the wider procurement before committing to RFP.
What does BT Managed SASE cover?
Managed deployment and migration across UK and multinational sites, Managed SD-WAN and SASE with 24/7 monitoring, managed firewall, incident handling, change management, Openreach coordination, circuit lifecycle management, SLA-backed accountability and a single escalation point. Delivered on Cisco Meraki or Fortinet at the underlay.
BT Business overlays a managed service on Fortinet or Meraki that covers the full operational lifecycle. For most mid-market and enterprise buyers, whether the platform is self-managed, co-managed or fully BT-managed shapes the business case as much as the vendor decision itself.
Managed delivery is relevant when internal teams cannot reasonably carry platform operations, when multi-site deployment complexity needs service coordination, or when regulated environments need a contracted accountability line. Netify helps buyers decide which model fits.
How do you procure Managed SASE through Netify?
Two routes. Use the Netify SASE RFP Builder to generate a structured RFP, publish to 30+ scored vendors and compare responses. Or speak to Netify directly for an advisory call on BT Managed SASE (Fortinet or Meraki) with a costed view returned within two working days.
For buyers shortlisting across multiple SASE vendors, the RFP Builder is the faster path. For buyers focused on BT Managed SASE specifically, the direct advisory call is the faster path. Buyers commonly run both: RFP Builder for the wider marketplace view, advisory call for the BT-specific costed view.
There is no fee for either path. Netify earns commission downstream from the supplier if the buyer chooses to transact through the marketplace or through the BT reseller programme.
Glossary
- SASE (Secure Access Service Edge)
- Converged delivery of SD-WAN and cloud-delivered network security as a single platform. Security functions typically include Secure Web Gateway (SWG), Zero Trust Network Access (ZTNA), Cloud Access Security Broker (CASB) and Firewall-as-a-Service (FWaaS).
- SD-WAN (Software-Defined Wide Area Network)
- Network-layer technology that abstracts the underlay (broadband, leased line, 4G/5G) and applies application-aware routing across multiple paths. The networking foundation that SASE is built on.
- Managed SASE
- SASE delivered as a managed service, where the provider owns platform operations end to end: deployment, monitoring, firewall change, incident handling, circuit lifecycle and SLA accountability. BT Business is the most established managed SASE provider for UK enterprise.
- ZTNA (Zero Trust Network Access)
- Identity-based access model where every request is authenticated, authorised and encrypted regardless of network location. Replaces the perimeter-based VPN access model in most modern SASE deployments.
- SWG (Secure Web Gateway)
- Cloud-delivered traffic-inspection layer that enforces URL filtering, malware scanning and DLP policy on outbound user traffic. Standard component of any SASE bundle.
- CASB (Cloud Access Security Broker)
- Policy enforcement point sitting between users and cloud services (Microsoft 365, Salesforce, Google Workspace) that enforces DLP, threat protection and configuration governance.
- FWaaS (Firewall-as-a-Service)
- Cloud-delivered firewall capability that replaces or augments on-site next-gen firewalls. Sits in the SASE provider's cloud, allowing consistent policy across distributed users and sites.
- Netify Marketplace
- Netify-curated index of 30+ pre-vetted SD-WAN, SASE and security suppliers, each independently scored against the Netify Market Index methodology. Used by enterprise buyers running vendor-neutral procurement.
- SASE RFP Builder
- Netify procurement tool that generates a structured SASE RFP from input fields and publishes it directly to scored vendors in the Marketplace. Buyers compare responses side-by-side and shortlist without sales intermediaries.
- BT Authorised Partner
- The commercial relationship status BT grants to a named partner. Netify has held BT Authorised Partner status since 2012 and is listed on BT Business's authorised partners page.
Frequently asked questions
Does Netify deliver Managed SASE directly?
Netify is a BT Authorised Partner. BT Business delivers the managed SASE service on Cisco Meraki or Fortinet. Netify provides the buyer-side advisory, the marketplace of alternative vendors, and the RFP Builder used to procure the service.
Is BT Managed SASE available on both Cisco Meraki and Fortinet?
Yes. BT's managed service layer wraps both Fortinet and Meraki SD-WAN and SASE stacks, with 24/7 monitoring, managed firewall, incident handling and change management.
What is the difference between SD-WAN and SASE?
SD-WAN is the network-layer routing and underlay-abstraction technology. SASE is SD-WAN plus cloud-delivered network security (SWG, ZTNA, CASB, FWaaS) procured and managed as a single service. Most enterprise buyers move from SD-WAN to SASE when the security layer needs to consolidate.
How long does a Managed SASE deployment take?
Timelines depend on site count, underlay readiness and Openreach coordination on the BT route. Netify comes back within two working days with vendor-fit, service-model and indicative commercials before you commit to RFP.
Can I run BT Managed SASE alongside non-BT connectivity?
Yes. SD-WAN and SASE are underlay-agnostic, so the managed service can run over BT circuits, third-party broadband, leased lines or 4G/5G. BT manages the platform regardless of underlay provenance.
How does Netify charge for the advisory?
There is no fee for the buyer. Netify earns commission downstream from the supplier when the buyer transacts through the marketplace or the BT reseller programme. Editorial independence is documented in the Netify methodology and how-we-make-money pages.
Speak to Netify about your Managed SASE requirement
Tell us about your sites, sector and current network. We come back within two working days with a vendor-fit view on BT Managed SASE (Cisco Meraki or Fortinet) and indicative service options.
Speak to NetifyOr email support@netify.com.