Wireless WAN / SD-WAN adjacent vendor
Cradlepoint / Ericsson
Ericsson/Cradlepoint sources evidence cellular-centric SD-WAN, 5G, link bonding/SASE and network slicing positioning.
Netify profile
Cradlepoint / Ericsson in depth
Platform and architecture
Cradlepoint, part of Ericsson, leads cellular-first WAN: E-series and R-series routers and adapters built around 4G and 5G with NetCloud SaaS management. Wireless WAN is the design centre, from branch failover to primary 5G connectivity for sites, vehicles and IoT. Ericsson ownership ties roadmaps to 5G network capability, including private network integration.
Security and SASE capability
NetCloud has grown a zero-trust layer: NetCloud Exchange provides ZTNA and secure connect services over cellular, with firewalling on-box and web security integrations. The Ericom acquisition added isolation-based security capability. Treat the security stack as solid for cellular-led estates rather than a full SASE replacement for deep CASB/DLP needs.
Service, support and channel
Strong carrier and channel routes (cellular operators bundle Cradlepoint widely) with healthy UK distribution; public safety, transport and retail are signature verticals. NetCloud subscriptions include support, with 24x7 tiers and managed offers through partners and operators.
Commercials and the Netify verdict
Subscription-first: hardware bundled into NetCloud plans per device. The Netify verdict: shortlist Cradlepoint when wireless is strategic, not just backup: day-one site openings, vehicles and field operations, 5G-primary branches and IoT estates. For wired-first enterprises it is the resilience and agility layer alongside a conventional SD-WAN or SASE platform.
Questions
Cradlepoint / Ericsson: common buyer questions
Is 5G reliable enough as primary WAN?
Increasingly yes, where coverage allows: Cradlepoint estates run thousands of 5G-primary sites with dual-SIM and dual-modem designs handling carrier diversity. Model traffic and validate coverage per postcode before committing.
What is NetCloud Exchange?
Cradlepoint's extension of NetCloud into zero-trust services: ZTNA and secure connectivity built for cellular-connected sites, vehicles and IoT, managed from the same console as the routers.
How does Ericsson ownership matter to buyers?
Roadmap alignment with 5G evolution, including private networks and operator integrations, plus financial backing. For organisations betting on cellular WAN, that backing derisks the platform.
Key differentiators
- Wireless-first branch architecture from Ericsson with deep 5G expertise; NetCloud provides cellular-centric SD-WAN management.
- Strong story for organisations adopting 5G as a primary access medium rather than as a backup.
- Network slicing and private 5G integration roadmap is more credible than competitors lacking cellular heritage.
Best fit for
- Distributed enterprises with strong cellular/5G access strategy (retail, logistics, transport, public sector).
- Buyers consolidating wireless WAN with traditional fixed-line SD-WAN under one operational tool.
- Organisations interested in private 5G integration with branch SD-WAN.
Watch-outs
- SASE story is partner-integrated rather than native; SSE capabilities require validation in RFP.
- Cloud on-ramp and multi-cloud transit fabric have limited public evidence relative to dedicated SASE platforms.
- Best for cellular-led architectures; less strong as a primary fit for fixed-circuit-heavy estates.
40 features, 6 categories
Capability matrix
Each capability is graded against public source evidence. Hover any status grade for a definition. Where evidence is limited, the grade reflects that uncertainty rather than assuming the capability is present.
Service delivery and operating model
| # | Capability | Status | Definition |
|---|---|---|---|
| F01 | Fully managed service | Partner / integrated | Provider designs, deploys, monitors, changes, supports and reports on the service. |
| F02 | DIY / self-managed model | Yes | Customer operates SD-WAN controller, policies, updates and incident response. |
| F03 | Co-managed service | Partner / integrated | Provider runs platform/support while customer retains selected policy or change rights. |
| F04 | Multi-tenant MSP / white-label support | Partner / integrated | Tenant isolation, delegated administration, branded portals, templates and service-provider scale. |
| F05 | Professional services and migration support | Partner / integrated | Discovery, design, pilot, staging, migration runbooks, rollback and training. |
| F06 | Last-mile circuit management | Partner / integrated | Sourcing, monitoring and support for broadband, DIA, LTE/5G, MPLS and cross-connects. |
| F07 | Lifecycle management | Partner / integrated | Hardware replacement, firmware upgrades, patching, renewals and EoL planning. |
| F08 | Flexible commercial model | Yes | Per-site, per-bandwidth, per-user, per-device, consumption, NaaS or bundled pricing. |
Network architecture and transport
| # | Capability | Status | Definition |
|---|---|---|---|
| F09 | Encrypted overlay fabric | Yes | Secure tunnels across broadband, DIA, MPLS, LTE/5G, satellite or private WAN. |
| F10 | Dynamic path selection | Yes | Real-time routing based on latency, jitter, packet loss, brownouts, MOS and policy. |
| F11 | Active-active link utilisation | Yes | Use multiple links concurrently rather than passive backup only. |
| F12 | Application-aware routing | Yes | Identification and routing for SaaS, UCaaS, ERP and custom applications. |
| F13 | QoS and traffic shaping | Yes | Per-application and per-class prioritisation, reservation and policing. |
| F14 | Packet loss remediation | Yes | FEC, packet duplication, jitter buffering, TCP optimisation and WAN optimisation. |
| F15 | Local internet breakout | Yes | Secure direct internet access from branch sites. |
| F16 | MPLS coexistence and migration | Yes | Hybrid MPLS/internet/cellular during transition. |
| F17 | Cellular and 5G support | Yes | Integrated/external modem, SIM management, signal monitoring and failover. |
| F18 | Cloud on-ramp | Partial | Automated/simplified connectivity to AWS, Azure, Google Cloud, Oracle, Equinix, Megaport and SaaS. |
Gateway, PoP and backbone design
| # | Capability | Status | Definition |
|---|---|---|---|
| F19 | Public cloud gateways | Partial | Vendor-operated gateways/PoPs for SaaS optimisation, remote access or security enforcement. |
| F20 | Private PoPs / dedicated PoPs | Unknown | Customer-hosted, dedicated or sovereign PoP options. |
| F21 | Private global backbone | Unknown | Vendor-owned or controlled backbone between PoPs. |
| F22 | Regional breakout and data residency | Yes | Pin traffic to countries, regions or approved inspection locations. |
| F23 | Multi-cloud transit fabric | Partial | Branch-to-cloud, cloud-to-cloud and user-to-cloud connectivity under common policy. |
| F24 | Flexible edge form factors | Yes | Physical, virtual, cloud marketplace, container or uCPE. |
| F25 | High availability design | Yes | Dual appliances, dual circuits, dual power, HA clustering and gateway redundancy. |
| F26 | SLA-backed service fabric | Partner / integrated | SLA for uptime, response, change handling and possibly latency/jitter/loss. |
Security and SASE capability
| # | Capability | Status | Definition |
|---|---|---|---|
| F27 | Integrated next-generation firewall | Partial | Stateful firewall, app control, IPS/IDS, malware inspection and URL filtering. |
| F28 | Full SASE platform | Yes | SD-WAN plus SWG, CASB, ZTNA, FWaaS, DLP, RBI, DNS security and threat prevention. |
| F29 | SSE ecosystem integration | Partial | Interoperation with Zscaler, Netskope, Palo Alto Prisma Access, Cisco Secure Access, Cloudflare etc. |
| F30 | Zero Trust Network Access | Partial | Identity and posture-based access to private applications. |
| F31 | Secure web gateway | Partial | URL filtering, SSL inspection, malware scanning and acceptable-use controls. |
| F32 | CASB capability | Unknown | SaaS discovery, sanctioned/unsanctioned app control and SaaS policy enforcement. |
| F33 | Data loss prevention | Unknown | Data classification, inspection, blocking, alerting and exception workflow. |
| F34 | Remote user access | Partial | Client or clientless access for remote workers, contractors and mobile users. |
| F35 | SOC/SIEM/SOAR integration | Partial | Syslog, APIs, event export, threat intelligence and workflow integration. |
Operations, assurance and automation
| # | Capability | Status | Definition |
|---|---|---|---|
| F36 | Centralised orchestration | Yes | Templates, intent-based policy, zero-touch provisioning and configuration compliance. |
| F37 | Customer portal and RBAC | Yes | Real-time status, role-based access, reporting, tickets and change requests. |
| F38 | Observability and digital experience monitoring | Yes | App experience, user experience, device health, SaaS telemetry and path analytics. |
| F39 | APIs and automation | Partial | REST APIs, Terraform, webhooks, event streaming and ITSM integration. |
| F40 | Managed service assurance | Partner / integrated | 24/7 NOC/SOC, proactive monitoring, incident ownership, RCA, service reviews and change governance. |
Commercial
Cost model and pricing visibility
Public pricing visibility
Quote-based. No complete public enterprise price was found in reviewed sources.
Cost model
Quote-based NetCloud subscriptions + routers/adapters; public hardware pricing may exist through resellers.
Evidence
Primary sources
Every capability grade traces back to one of these sources. Reviewed 2026-05-22.
Verification notes
Capability matrix sourced from Netify internal vendor research (May 2026). Status grades reflect public source evidence only. Confirm via RFP. Qualitative fields (differentiators, best fit, watch-outs) are Netify editorial synthesis based on the evidence summary and capability profile; review before publishing. Extended dimensions (regions, clouds, AI, resilience, deployment speed, sectors, organisation fit, identity, platforms, support, logging) are indicative desk research grades from June 2026; confirm via RFP.