NNetify

Use your browser print dialog to save this shortlist as a PDF. If the dialog did not open automatically, press Ctrl+P or Cmd+P.

Netify SASE and SD-WAN shortlist · 2026-09-03

Your bespoke provider shortlist

Criteria. Scoring profile: balanced.

8 providers shortlisted from 30 evaluated. Generated by the Netify shortlist builder.

  1. No. 1 · Score 69.6 · technology vendor

    Cato Networks

    Single converged platform with no policy or log fragmentation across SD-WAN and security functions.

    Watch out: Less suited to best-of-breed buyers wanting Zscaler or Netskope as the SSE layer.

    Commercials: Quote-based subscription; typically site/user/bandwidth/security bundle based. · Typical deployment: unknown

  2. No. 2 · Score 63.9 · technology vendor

    Netskope

    Strong CASB heritage; widely recognised as a leading SSE vendor for SaaS-heavy environments.

    Watch out: Native SD-WAN (Borderless WAN) is newer than dedicated SD-WAN platforms; validate path selection and QoS depth in RFP.

    Commercials: Quote-based subscription; modules commonly priced by users, sites, traffic and security functions. · Typical deployment: unknown

  3. No. 3 · Score 63.5 · technology vendor

    Cisco

    Broadest platform portfolio in the category, covering Catalyst SD-WAN for enterprise WAN, Meraki MX for cloud-managed branch, and Cisco Secure Access for converged SASE delivery.

    Watch out: Two distinct SD-WAN product lines (Catalyst and Meraki) means buyers should confirm which fits the target deployment profile and the longer-term roadmap.

    Commercials: Quote-based subscription/licence + appliance/support; Meraki public SKUs via partners, enterprise pricing varies by platform and term. · Typical deployment: unknown

  4. No. 4 · Score 61.7 · technology vendor

    Palo Alto Networks Prisma SASE

    Prisma SASE converges SD-WAN, cloud-delivered security, and digital experience management (ADEM) under a single platform identity.

    Watch out: Premium pricing relative to firewall-led SD-WAN vendors; commercial model requires careful scoping by users, bandwidth, locations and term.

    Commercials: Quote-based subscriptions; appliance/ION and Prisma Access/SASE licensing typically priced by users, bandwidth, locations and term. · Typical deployment: unknown

  5. No. 5 · Score 51.1 · technology vendor

    Versa Networks

    Multi-tenancy from the ground up, making Versa a common choice for service providers and carriers building managed SD-WAN and SASE platforms.

    Watch out: Less well-known to enterprise buyers as a direct purchase; most enterprise consumption is via service providers.

    Commercials: Quote-based subscription; MSP/carrier pricing depends on tenant scale, bandwidth, security package and delivery model. · Typical deployment: unknown

  6. No. 6 · Score 51.1 · technology vendor

    Zscaler

    Category leader in SSE with ZIA, ZPA and ZDX; widely adopted as the security layer in best-of-breed SASE architectures.

    Watch out: Historically SSE-led; native SD-WAN capability is less mature than dedicated SD-WAN platforms (validate path selection, QoS and packet loss in RFP).

    Commercials: Quote-based subscription; typically per-user/workload/location modules; SD-WAN integrations may add partner/vendor cost. · Typical deployment: unknown

  7. No. 7 · Score 49.9 · technology vendor

    Fortinet FortiSASE

    Native convergence of networking and security on a single operating system (FortiOS) across FortiGate edge, FortiManager and FortiSASE.

    Watch out: Like Cisco, managed delivery is via partners rather than Fortinet directly; underlay and field operations are not owned by the vendor.

    Commercials: Quote-based appliances/subscriptions/support; public reseller pricing exists for hardware but enterprise managed/SASE bundles require quote. · Typical deployment: unknown

  8. No. 8 · Score 46.9 · technology vendor

    HPE Aruba EdgeConnect

    EdgeConnect SD-WAN (acquired with Silver Peak) is positioned as the foundation for single-vendor SASE alongside Aruba SSE.

    Watch out: Aruba SSE is newer than the SSE leaders (Zscaler, Netskope); buyers wanting best-of-breed SASE should evaluate the SSE capability set carefully.

    Commercials: Quote-based subscription/appliance/support; MSP-managed options available through partners/providers. · Typical deployment: unknown

Scores are weighted across 40 capabilities with points accrued based on: yes 1.0, via partner 0.75, via managed service 0.65, partial 0.5, not confirmed 0.15, not primary 0. Extended dimensions are indicative desk research; confirm via RFP.

Published by Netify Group Limited, netify.co.uk. Extended dimension grades are indicative desk research; confirm capability via a structured RFP.