Provider evidence

VeloCloud

VeloCloud was founded in 2012 as a cloud-delivered SD-WAN pioneer, acquired by VMware in 2017 for approximately $336 million, then came under Broadcom’s ownership when Broadcom completed its roughly $69 billion acquisition of VMware in 2023. Under Broadcom, the product was paired with Symantec’s security stack (Broadcom separately owns Symantec’s enterprise security business) into a single-vendor offering called ‘VMware VeloCloud SASE, secured by Symantec’, announced February 2024.

Technology vendor · UK entity not yet reviewed

Evidence profile: Sector evidence not yet reviewed; platform

Research only

https://www.arista.com

Pre-sales contacts Demo Include in proposals

These capabilities use the same evidence as the provider shortlist and matching. A missing finding is not evidence that a provider lacks the capability.

Capability evidence

Capability	Finding	Evidence and qualification
Fully managed service	Partner / integrated	Cloud-native by design, VeloCloud SD-WAN is delivered via a global network of Edge PoPs, either self-managed or as a managed service. Arista authors the platform; the managed-service option is operated by MSP and service-provider partners rather than by Arista end to end. Arista's own press release quotes T&A SYSTEME GmbH, 'a German MSP managing 7500+ sites in 98 countries', and MetTel as the parties running the service for customers. No Arista-run design-to-report managed service was found. Source · Evidence dated 2026-07-29
DIY / self-managed model	Yes	See the published provider record for source context; confirm the scope for your deployment.
Co-managed service	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
Multi-tenant MSP / white-label support	Partial	Enterprises or their managed service providers can define business-level policies that apply enterprise-wide across many Edges Tenant isolation and delegated administration are evidenced by the multitenant Orchestrator, Controller and Gateway architecture and the three-tier RBAC model, and the partner programme carries 'SD-WAN MSP Partner Requirements'. Graded partial rather than yes because no page reviewed described branded or white-label partner portals, which the definition requires. Source · Evidence dated 2026-07-29
Professional services and migration support	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
Last-mile circuit management	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
Lifecycle management	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
Flexible commercial model	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
Encrypted overlay fabric	Yes	See the published provider record for source context; confirm the scope for your deployment.
Dynamic path selection	Yes	See the published provider record for source context; confirm the scope for your deployment.
Active-active link utilisation	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
Application-aware routing	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
QoS and traffic shaping	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
Packet loss remediation	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
Local internet breakout	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
MPLS coexistence and migration	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
Cellular and 5G support	Yes	Dual Physical SIM + single eSIM (single standby) The 7x0 datasheet documents an integrated Telit FN990A28 modem, 'LTE Category Cat-19', carrier aggregation, HSPA+ 3G fallback and a full 5G FR1 band list, with dual physical SIM plus eSIM. The product page states 'integrated WiFi and 5G' and the 4100/5100 page leads with 'Integrated 5G Enterprise-class SD-WAN appliances for branches'. LTE is also listed among supported WAN transports. Source · Evidence dated 2026-07-29
Cloud on-ramp	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
Public cloud gateways	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
Private PoPs / dedicated PoPs	Yes	Gateways can be deployed as partner Gateways on the premises of service providers, where they are managed by the service provider Gateways are not restricted to a shared multi-tenant estate: the datasheet describes 'A distributed, global network of gateways, hosted by Arista/service providers or deployed on-premises' and lists 'Partner Gateway Support' as a feature, covering customer-hosted and dedicated partner deployments. No sovereign-region offering was named on the pages reviewed. Source · Evidence dated 2026-07-29
Private global backbone	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
Regional breakout and data residency	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
Multi-cloud transit fabric	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
Flexible edge form factors	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
High availability design	Partner / integrated	See the published provider record for source context; confirm the scope for your deployment.
SLA-backed service fabric	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
Integrated next-generation firewall	Yes	Native, and specifically confirmed as part of the in-development Edge Threat Management capability - firewalls, segmentation, DNS filtering, geolocation controls, and threat prevention embedded directly on VeloCloud edge devices [17] [21] Not yet generally available - planned for Q4 2026 as of this profile's research Source · Evidence dated 2026-07-22
Full SASE platform	Partial	See the published provider record for source context; confirm the scope for your deployment.
SSE ecosystem integration	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
Zero Trust Network Access	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
Secure web gateway	Partner / integrated	See the published provider record for source context; confirm the scope for your deployment.
CASB capability	Partner / integrated	See the published provider record for source context; confirm the scope for your deployment.
Data loss prevention	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
Remote user access	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
SOC/SIEM/SOAR integration	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
Centralised orchestration	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
Customer portal and RBAC	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
Observability and digital experience monitoring	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
APIs and automation	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.
Managed service assurance	Not confirmed	See the published provider record for source context; confirm the scope for your deployment.