SD-WAN and SASE Network Security for Retail

Fortinet FortiSASE on the marketplace · Reviewed 10 Sept 2026 by Harry Yelland

Carrefour Italia (220+ stores, 99.9% network-availability target exceeded) and Best Buy (1,000+ stores connected to AWS) are two strong, named, quantified retail references corroborated by independent case-study indexes and AWS's own blog.

Gaps and unknowns: Payment/PCI DSS segmentation, POS resilience, guest Wi-Fi separation and edge/IoT/camera connectivity have no retail-specific evidence found for FortiSASE specifically (the two case studies found are FortiGate/Secure SD-WAN, not the cloud-delivered FortiSASE product line).

Store and branch connectivity

Proven

Payment and PCI DSS segmentation

Proven

Guest and corporate Wi-Fi separation

Proven

POS and payment resilience

Not found

SaaS and cloud application access

Proven

Third-party and supplier access

Proven

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Proven

Internet and 4G/5G failover

Proven

Seasonal and temporary-site scaling

Proven

Edge, IoT and camera connectivity

Not found

Security policy consistency

Proven

Threat protection and secure web access

Proven

Network and application visibility

Proven

Managed operations

Proven

Sources (10)

• RET-015AcceptedIndependentThird-party case-study index

  Case Study: Carrefour Italia transforms customer service with Fortinet Secure SD-WAN

  Named retailer:

  Carrefour Italia

  Named service:

  Fortinet Secure SD-WAN (FortiGate NGFW, FortiManager, FortiAnalyzer)

  Countries, regions:

  Italy

  Outcome:

  Deployed to 220+ stores in 18 months; exceeded 99.9% network availability target; reduced IT administrative burden

  exceeding a 99.9% network availability target, reducing the administrative burden for its IT team, and building a secure foundation for new digital retail services

  Carrefour Italia, a leading grocery and retail merchandise chain (~1,500 points of sale), deployed Fortinet Secure SD-WAN (FortiGate NGFW + FortiManager + FortiAnalyzer) to 220+ stores over 18 months, exceeding a 99.9% network-availability target and reducing IT administrative burden.

  Does not prove: Summary is from a third-party case-study index rather than Fortinet's own full case study page; PCI/payment segmentation not addressed.

  casestudies.com · Checked 10 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Network and application visibility, Store and branch connectivity, Managed operations

• RET-016AcceptedIndependentThird-party technical blog

  Best Buy improves in-store customer experience using SD-WAN, powered by Amazon Transit Gateway Connect and Fortinet FortiGate

  Named retailer:

  Best Buy

  Named service:

  Fortinet FortiGate SD-WAN virtual appliance with AWS Transit Gateway Connect

  Countries, regions:

  United States, Canada

  Outcome:

  Shortened application response times for stores accessing AWS-hosted workloads; resilient, low-latency store-to-cloud connectivity

  Retail customers are improving the in-store customer experience through personalization by connecting their remote stores to Amazon Web Services using SD-WAN.

  Best Buy, the largest specialty consumer-electronics retailer in North America, uses Fortinet's FortiGate SD-WAN virtual appliance with Amazon Transit Gateway Connect to connect 1,000+ stores to AWS-hosted workloads for inventory sync, supply-chain visibility and order pickup.

  Does not prove: Co-branded AWS blog rather than a Fortinet-authored case study; PCI/payment segmentation and guest Wi-Fi are not addressed. Note: the original amazonaws.cn mirror URL now 404s; swapped to the canonical aws.amazon.com blog post, confirmed live, on 2026-09-10.

  aws.amazon.com · Checked 10 Sept 2026 · Supports: SaaS and cloud application access, Store and branch connectivity

• RET-502AcceptedProvider-authoredNamed customer case study

  Carrefour Italia deploys Fortinet Secure SD-WAN to 220+ stores in 18 months

  Named retailer:

  Carrefour Italia

  Named service:

  Fortinet Secure SD-WAN (FortiGate NGFW, FortiManager, FortiAnalyzer)

  Countries, regions:

  Italy

  Outcome:

  Exceeded 99.9% annual network availability target; reduced administrative burden for IT team; built secure foundation for new digital retail services

  "Initially deployed to all of Carrefour's directly managed stores and the larger franchised hypermarkets, the new Fortinet Secure SD-WAN network package was subsequently made available to the remaining franchisees as a value-added service."

  Verified live 2026-09-15 (cross-platform lead, independently confirmed). Carrefour Italia is a real, major, named grocery retailer. The explicit franchise-rollout structure (directly managed stores first, then extended as a value-added service to remaining franchisees) is genuinely strong evidence for third-party/franchise network access.

  Does not prove: Added 2026-09-15. No named regulation (PCI DSS) despite POS/payment environment being described.

  fortinet.com · Checked 15 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Third-party and supplier access, Store and branch connectivity

• RET-503AcceptedProvider-authoredNamed customer case study

  Jersey Mike's Franchise Systems cuts switch troubleshooting time by 80% with Fortinet

  Named retailer:

  Jersey Mike's Franchise Systems Inc.

  Named service:

  Fortinet Security Fabric (FortiSwitch, FortiGate, SD-WAN)

  Countries, regions:

  Not stated (US franchise chain)

  Outcome:

  80% faster switch troubleshooting time; 50% reduction in hardware returns; faster new-location deployments; improved security and uptime for franchisees

  "The internal IT team at Jersey Mike's Franchise Systems Inc. faced the challenge of securely managing networks across over 2,500 franchise locations with a lean staff... The results included an 80% faster switch troubleshooting time, a 50% reduction in hardware returns, and faster new location deployments."

  Verified live 2026-09-15 (found independently while verifying Carrefour Italia). Jersey Mike's is a real, major, named US franchise restaurant chain. This is one of the strongest possible fits for 'Third-party and supplier access' found in this entire project, since franchise network management at 2,500+ independently-operated locations is close to the definition of the capability itself.

  Does not prove: Added 2026-09-15. Quick-service restaurant franchise rather than traditional retail, but directly on-point for the franchise/third-party access capability. No named regulation.

  casestudies.com · Checked 15 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Network and application visibility, Third-party and supplier access

• RET-507AcceptedProvider-authoredNamed customer case study

  Jungle Jim's International Market | Fortinet Case Study

  Named retailer:

  Jungle Jim's International Market

  Named service:

  FortiGate Next-Generation Firewalls

  Countries, regions:

  United States (Cincinnati, Ohio)

  Outcome:

  Achieved data security required for PCI Level 2 compliance; reduced unauthorized network traffic; enabled store/Wi-Fi expansion without increased security risk

  "We had one big corporate LAN before, and being able to segment all parts of our business utilizing the Fortinet solutions has secured our network in ways it has never been before." - Joshua Campbell, IT Director, Jungle Jim's International Market. "In such a retail environment, guest Wi-Fi access is essential. But it is equally important to keep Wi-Fi guests - and malicious actors - off the corporate network and away from the point-of-sale and customer payment data."

  Verified live 2026-09-15. Jungle Jim's is real and named, with a named IT Director quote. Explicit PCI Level 2 compliance and guest/corporate Wi-Fi separation - directly closes two of the six thin columns.

  Does not prove: Added 2026-09-15. NGFW deployment; SD-WAN capability not explicitly named on this page, so graded supporting-only for that field.

  fortinet.com · Checked 15 Sept 2026 · Supports: Guest and corporate Wi-Fi separation, Payment and PCI DSS segmentation

• RET-508AcceptedProvider-authoredNamed customer case study

  Cub | Fortinet Case Study

  Named retailer:

  Cub

  Named service:

  FortiGate NGFW, FortiSwitch, FortiAP

  Countries, regions:

  United States (Minnesota, Illinois)

  Outcome:

  Improved employee/customer experience; enhanced security posture via segmentation

  "The Fortinet solution enables us to separate the devices that require internet access from the applications and databases that use customers' personal information."

  Verified live 2026-09-15. Cub is real, named, with genuine store counts (80 grocery/pharmacy + 31 liquor). Explicit segmentation quote, though PCI DSS isn't specifically named on this page (implied via segmentation).

  Does not prove: Added 2026-09-15. PCI DSS implied via segmentation language, not explicitly named - graded Partial for PCI DSS segmentation specifically, Proven for guest Wi-Fi separation given the internet-access-vs-sensitive-data split described.

  fortinet.com · Checked 15 Sept 2026 · Supports: Guest and corporate Wi-Fi separation, Payment and PCI DSS segmentation

• RET-509AcceptedProvider-authoredNamed customer case study

  Dave's Hot Chicken secures 75 new franchises a year with Fortinet

  Named retailer:

  Dave's Hot Chicken

  Named service:

  FortiGate NGFW, FortiSwitch, FortiAP, FortiManager, FortiGuard

  Countries, regions:

  United States

  Outcome:

  Enhanced network resilience and reliable uptime supporting rapid growth; improved PCI DSS compliance; reduced reputational risk from public Wi-Fi misuse

  "Dave's Hot Chicken, one of America's fastest-growing restaurants, faced the challenge of securely scaling its operations to open approximately 75 new franchises each year. The company needed to ensure reliable network uptime for its modern point-of-sale systems, achieve PCI DSS compliance, and manage risks from cloud systems and public Wi-Fi."

  Found independently while verifying other Fortinet cases (not part of the original supplied batch). Dave's Hot Chicken is a real, named, fast-growing US restaurant franchise with explicit rapid-franchise-growth and PCI DSS content.

  Does not prove: Added 2026-09-15. Case study aggregator mirror, not Fortinet's own site directly.

  casestudies.com · Checked 15 Sept 2026 · Supports: Threat protection and secure web access, Seasonal and temporary-site scaling, Payment and PCI DSS segmentation

• RET-510AcceptedProvider-authoredNamed customer case study

  Súper Akí saves 60% on WAN costs with Fortinet

  Named retailer:

  Súper Akí

  Named service:

  FortiGate NGFW, Fortinet Secure SD-WAN

  Countries, regions:

  Mexico (southeast)

  Outcome:

  60% reduction in WAN connectivity costs; ensured PCI compliance; enabled secure Wi-Fi and VoIP; highly available network; rapid ROI

  "Fortinet implemented an integrated and automated Security Fabric solution for Súper Akí, which included Secure SD-WAN. This solution slashed WAN connectivity costs by 60%, ensured PCI compliance, and enabled secure Wi-Fi and VoIP services."

  Found independently while verifying other Fortinet cases (not part of the original supplied batch). Súper Akí is a real, named Mexican supermarket chain - directly names Secure SD-WAN, PCI compliance, and Wi-Fi security together.

  Does not prove: Added 2026-09-15. Case study aggregator mirror.

  casestudies.com · Checked 15 Sept 2026 · Supports: Guest and corporate Wi-Fi separation, Payment and PCI DSS segmentation, Store and branch connectivity, Internet and 4G/5G failover

• RET-516AcceptedProvider-authoredNamed customer case study

  The Paper Store Protects its Expanding Store Footprint with Secure SD-WAN and SD-Branch

  Named retailer:

  The Paper Store

  Named service:

  Fortinet Secure SD-WAN and SD-Branch (NGFW, in-store Ethernet switching, wireless APs)

  Countries, regions:

  United States (northeastern US)

  Outcome:

  Stores stayed online through primary circuit failures during peak revenue period (>25% of annual revenue); 20% cost savings; 6x WAN bandwidth increase; 15x faster new-store deployment (avoiding $52,000/month lost revenue per setup); up to 480% improvement in branch connection reliability

  "Several stores - including our highest-performing store - had some level of primary circuit failure during a period when the company typically generates more than a quarter of its annual revenue. With the Fortinet Secure SD-WAN solution in place, those stores stayed online. In fact, they were not even aware of the outage." - Ken Guild, IT Systems Security Manager, The Paper Store.

  Verified live 2026-09-15 (cross-platform lead, independently confirmed with a named IT Security Manager quote and rich quantified metrics). The Paper Store is real, named, at genuine scale (90 stores, seasonal peak-revenue resilience explicitly the central story).

  Does not prove: Added 2026-09-15. No PCI DSS or named regulation despite in-store transaction focus.

  fortinet.com · Checked 15 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Seasonal and temporary-site scaling, Network and application visibility, Store and branch connectivity

• RET-517AcceptedProvider-authoredNamed customer case study

  Batteries Plus Bulbs Taps Fortinet's Secure SD-WAN to Simplify Operations

  Named retailer:

  Batteries Plus Bulbs

  Named service:

  Fortinet Secure SD-WAN (FortiGate NGFW), FortiManager

  Countries, regions:

  United States

  Outcome:

  Simplified single-pane-of-glass WAN and security management via FortiManager; enabled safe use of public internet to scale network traffic instead of relying solely on MPLS

  "Fortinet has announced that specialty retailer Batteries Plus Bulbs has deployed Fortinet's Secure SD-WAN solution to improve security and simplify operations at its 740 Stores - without increasing costs." "We can take a more proactive stance to manage security. This gives us confidence that we are equipped to manage security threats for the next 5 to 7 years." - Dan Dugan, Vice President of Information Technology, Batteries Plus Bulbs.

  Verified live 2026-09-15, fully confirmed with a named VP quote (Dan Dugan) found on Fortinet's own site while verifying The Paper Store. Batteries Plus Bulbs is real, named, at genuine scale (740 stores, named as a top franchise brand by Forbes/Entrepreneur).

  Does not prove: Added 2026-09-15. Press-coverage mirror rather than Fortinet's own case-study page directly, though the quote is corroborated on fortinet.com elsewhere.

  channeldrive.in · Checked 15 Sept 2026 · Supports: Store and branch connectivity, Security policy consistency, Managed operations

Palo Alto Networks Prisma SASE on the marketplace · Reviewed 15 Sept 2026 by Harry Yelland

The strongest retail evidence set of all 30 providers: three detailed, named, quantified case studies (Westfield, MediaMarktSaturn, RaceTrac) each addressing a different part of the stack - digital transformation/cost, PCI compliance/multicloud, and POS uptime/rapid rollout respectively - plus named customers Chipotle, AutoNation and Aarons cited in Palo Alto's own retail blog.

Gaps and unknowns: Guest/corporate Wi-Fi separation, third-party/supplier access, seasonal/temporary-site scaling and edge/IoT/camera connectivity are not explicitly addressed by the three case studies reviewed, despite the otherwise very strong evidence base. SaaS and cloud application access corrected from an unsupported Proven to Partial on 2026-09-11 - none of RET-027/028/029 actually named this capability.

Store and branch connectivity

Proven

Payment and PCI DSS segmentation

Proven

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Proven

SaaS and cloud application access

Partial

Third-party and supplier access

Proven

Remote worker and support access

Partial

Multi-site deployment and zero-touch provisioning

Proven

Internet and 4G/5G failover

Partial

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Not found

Security policy consistency

Proven

Threat protection and secure web access

Proven

Network and application visibility

Proven

Managed operations

Partial

Sources (4)

• RET-027AcceptedProvider-authoredProvider case study

  Westfield responds rapidly to a changing market with Prisma SASE

  Named retailer:

  Westfield

  Named service:

  Prisma SASE (Prisma Access + Prisma SD-WAN + ADEM)

  Countries, regions:

  United States

  Outcome:

  60% reduction in network costs; single-pane-of-glass visibility for cybersecurity operations; increased flexibility to deploy new digital tools

  Prisma SASE from Palo Alto Networks provides safeguards that protect us against a wide range of threats." Requirements: "The goal was to give customers, employees, and retail partners access anytime, anywhere, on any device." - Ken Ogami, Senior Vice President & CIO U.S., Westfield.

  Westfield, operator of 19 US shopping malls serving 400 million customers, deployed Prisma SASE (Prisma Access + Prisma SD-WAN + ADEM) to cut network costs by 60% and gain single-pane-of-glass cybersecurity visibility, improving digital-transformation agility during COVID-19. Quote from Ken Ogami, SVP & CIO U.S., Westfield.

  Does not prove: Payment/PCI segmentation and POS-specific detail are not addressed in this case; Westfield is a mall operator rather than a store-level retailer. [2026-09-15] Re-checked live and updated: the source explicitly states the SASE deployment's goal was to give 'customers, employees, and retail partners' anytime/anywhere access - this genuinely supports Third-party and supplier access (retail tenants are third parties to the mall operator) and was previously captured in the requirement text but not reflected in the capabilities field.

  paloaltonetworks.com · Checked 15 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Threat protection and secure web access, Network and application visibility, Third-party and supplier access, Store and branch connectivity, Security policy consistency

• RET-028AcceptedProvider-authoredProvider case study

  MediaMarktSaturn secures 'the store of the future' with Palo Alto Networks portfolio

  Named retailer:

  MediaMarktSaturn Retail Group

  Named service:

  Palo Alto Networks NGFW, PAN-OS SD-WAN subscription, WildFire, Prisma Cloud

  Countries, regions:

  Europe (HQ Ingolstadt, Germany)

  Outcome:

  Standardised, connected security portfolio giving visibility across a large complex environment; proactive threat prevention; increased efficiency via security automation

  Comply with policies and regulations in different geographies, such as PCI compliance.

  MediaMarktSaturn Retail Group, Europe's leading consumer-electronics retailer (1,000+ stores, €21.4bn FY20/21), uses a Palo Alto Networks portfolio (NGFW, PAN-OS SD-WAN, WildFire, Prisma Cloud) to secure transactions, maintain PCI compliance across geographies and secure a multicloud development pipeline.

  Does not prove: Explicitly names PCI compliance as a requirement but does not quote the specific segmentation mechanism used.

  paloaltonetworks.com · Checked 10 Sept 2026 · Supports: Threat protection and secure web access, Network and application visibility, Payment and PCI DSS segmentation, Store and branch connectivity

• RET-029AcceptedIndependentThird-party case-study index

  RaceTrac deploys Prisma SD-WAN to 800 stores in 3 months with Palo Alto Networks

  Named retailer:

  RaceTrac

  Named service:

  Prisma SD-WAN and Prisma SASE

  Countries, regions:

  United States

  Outcome:

  Deployed to all 800 stores in 3 months; 99.99% uptime for payment systems; 70% year-over-year reduction in related trouble tickets

  The solution eliminated the frequent outages, achieving 99.99% uptime for payment systems and reducing related trouble tickets by 70% year-over-year.

  RaceTrac, a major US convenience-store chain, deployed Prisma SD-WAN to all 800 stores in 3 months after suffering frequent outages on end-of-life legacy hardware, achieving 99.99% payment-system uptime and cutting related trouble tickets by 70% year-over-year.

  Does not prove: Summary is from a third-party index rather than Palo Alto's own full case-study page.

  casestudies.com · Checked 10 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Store and branch connectivity, POS and payment resilience

• RET-042AcceptedCustomer-authoredNamed customer case study

  Village Roadshow transforms the business with Prisma SASE, realizes savings of thousands of hours per month

  Named retailer:

  Village Roadshow

  Named service:

  Prisma SASE (Prisma Access, Prisma SD-WAN)

  Countries, regions:

  Australia

  Outcome:

  Thousands of hours per month saved; direct, non-backhauled access to cloud/SaaS applications restored performance and user experience

  "Village Roadshow's network was based on conventional routers that were never designed for the cloud. This typically requires backhauling of all traffic, including cloud-destined traffic... The delay caused by this backhaul impairs application performance."

  Palo Alto's own case study, verified live 2026-09-11. Village Roadshow is a named, real Australian entertainment company (theme parks, cinemas) that the case study itself describes as having 'well-recognised retail brands'. The case explicitly addresses eliminating backhaul of cloud-destined/SaaS traffic via Prisma SASE - a direct match for SaaS and cloud application access - but the customer is media/entertainment rather than core retail, and no SaaS-specific metric is quoted, so this is graded Partial rather than Proven.

  Does not prove: Customer is media & entertainment with retail-adjacent brands, not a core retailer - and the outcome quoted (thousands of hours/month saved) is company-wide, not SaaS-access-specific. Graded Partial for this reason, added 2026-09-11 to properly back the SaaS and cloud application access field for Palo Alto, replacing an unsupported Proven claim.

  paloaltonetworks.com · Checked 11 Sept 2026 · Supports: SaaS and cloud application access

Cato Networks on the marketplace · Reviewed 15 Sept 2026 by Harry Yelland

Elkjøp is a strong, named, quantified retail reference: 420 stores, 10,000 employees across four Nordic countries, with a named executive quote and specific Black Friday peak-season resilience outcomes. This is the best-evidenced retail deployment found across all 30 providers.

Gaps and unknowns: POS/payment segmentation and PCI DSS are not explicitly addressed in the Elkjøp material (it discusses point-of-sale modernisation as context, not segmentation). Aquila (Australian footwear retailer, 60+ sites) is a further named lead that has not been independently opened for corroboration. Guest Wi-Fi, third-party/supplier access and edge/IoT/camera connectivity remain unevidenced. Note: an automated local verification run scored the Elkjøp source at 0.00 similarity; re-fetched directly and confirmed the page is live with the recorded quote intact word-for-word - this looks like the site serving different content to a scripted request (bot/JS protection) rather than a real content problem.

Store and branch connectivity

Proven

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Partial

SaaS and cloud application access

Proven

Third-party and supplier access

Not found

Remote worker and support access

Proven

Multi-site deployment and zero-touch provisioning

Proven

Internet and 4G/5G failover

Proven

Seasonal and temporary-site scaling

Proven

Edge, IoT and camera connectivity

Not found

Security policy consistency

Proven

Threat protection and secure web access

Proven

Network and application visibility

Partial

Managed operations

Proven

Sources (3)

• RET-005AcceptedProvider-authoredProvider case study

  Elkjøp Transforms Peak Retail Season Readiness with the Cato SASE Cloud Platform

  Named retailer:

  Elkjøp

  Named service:

  Cato SASE Cloud Platform

  Countries, regions:

  Norway, Sweden, Denmark, Finland

  Outcome:

  Replaced 860+ firewalls/proxies/load balancers; halved pre-season readiness checks; eliminated emergency IT store trips; network changes cut from six weeks to seconds

  With our old infrastructure, a simple network change could take six weeks. With Cato, we do it in seconds.

  Elkjøp, the largest electronics retailer in the Nordics, moved 420 stores and 10,000 employees onto Cato SASE ahead of Black Friday 2024, replacing 860+ firewalls/proxies/load balancers, halving pre-season readiness checks and eliminating emergency store visits, with automated failover keeping stores online during peak trading. Quote from Reno Dokken, Infrastructure Manager, Elkjøp.

  Does not prove: Explicit PCI/payment segmentation is not addressed; the case describes cloud POS as context, not a segmentation control.

  catonetworks.com · Published 29 Apr 2025 · Checked 10 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Threat protection and secure web access, Seasonal and temporary-site scaling, Remote worker and support access, Store and branch connectivity, Internet and 4G/5G failover, Security policy consistency

• RET-006AcceptedIndependentThird-party case study index

  Aquila (Melbourne-based footwear retailer) achieves reliable, secure connectivity across 60+ Australian locations with Cato Networks' Managed SD-WAN

  Named retailer:

  Aquila

  Named service:

  Cato Networks Managed SD-WAN

  Countries, regions:

  Australia

  Outcome:

  Not stated (headline only; not independently opened)

  Aquila (Melbourne-based footwear retailer) achieves reliable, secure connectivity across 60+ Australian locations

  A case-study index lists Aquila, a Melbourne-based footwear retailer, using Cato's Managed SD-WAN across 60+ Australian locations; the underlying case study page itself was not opened, so this is a named lead rather than verified detail.

  casestudies.com · Checked 10 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Store and branch connectivity

• RET-515AcceptedProvider-authoredNamed customer case study

  The Ultimate Makeover: Ulta Beauty Reinvents its Network to Deliver a Seamless Retail Experience

  Named retailer:

  Ulta Beauty

  Named service:

  Cato SASE Platform

  Countries, regions:

  United States, with UK/Middle East expansion noted

  Outcome:

  "Significant progress strengthening infrastructure"; solid foundation for building and scaling new technologies across stores; centralised firewall control via global PoPs

  "We've made significant progress strengthening our infrastructure. With a solid foundation in place, we're confident building and scaling new technologies across our stores." - Oscar Moncada, SVP of IT Infrastructure, Architecture, Cloud, and Security, Ulta Beauty. "We wanted a platform where we could manage everything from one place, especially as we grew."

  Verified live 2026-09-15, strengthened with a named SVP quote (Oscar Moncada) not previously recorded. Ulta Beauty is real, major, named.

  Does not prove: Added 2026-09-15. Store count and other scale figures taken from earlier Cato materials on the same customer, not re-verified word-for-word on this specific page.

  catonetworks.com · Checked 15 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, SaaS and cloud application access, Security policy consistency, Managed operations

Cisco on the marketplace · Reviewed 15 Sept 2026 by Harry Yelland

Żabka is an outstanding, named, quantified reference (9,800+ stores, one of the largest Cisco SD-WAN deployments worldwide, 94% cut in in-store technician time), corroborated by Cisco's own EMEA newsroom and press coverage. Verizon's own 1,700 retail stores add a second named, detailed reference.

Gaps and unknowns: Payment/PCI segmentation, guest Wi-Fi separation and edge/IoT/camera connectivity have no retail-specific evidence yet. Seasonal scaling and third-party/supplier access are unaddressed in the sources reviewed.

Store and branch connectivity

Proven

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Proven

POS and payment resilience

Partial

SaaS and cloud application access

Not found

Third-party and supplier access

Not found

Remote worker and support access

Proven

Multi-site deployment and zero-touch provisioning

Proven

Internet and 4G/5G failover

Proven

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Proven

Security policy consistency

Not found

Threat protection and secure web access

Not found

Network and application visibility

Not found

Managed operations

Proven

Sources (4)

• RET-008AcceptedProvider-authoredProvider press release

  Polish retail chain Żabka implements Cisco SD-WAN across over 9,800 stores in Poland

  Named retailer:

  Żabka

  Named service:

  Cisco SD-WAN

  Countries, regions:

  Poland

  Outcome:

  One of the world's largest Cisco SD-WAN deployments on a single fabric; up to 300 device installs/day; in-store IT technician time cut by up to 94%

  The implementation of SD-WAN helped reduce the time IT technicians need to spend in individual stores by up to 94 percent.

  Żabka, Poland's largest convenience-store chain, deployed Cisco SD-WAN across 9,800+ stores via partner Trecom - one of the largest single-fabric Cisco SD-WAN deployments worldwide, with up to 300 device installs per day and a 94% cut in in-store technician time. Quote from Jakub Masłowski, Technology Director, Żabka Group.

  Does not prove: Payment/POS segmentation, guest Wi-Fi and PCI DSS are not addressed in this source.

  news-blogs.cisco.com · Published 2 Oct 2023 · Checked 10 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Store and branch connectivity, Managed operations

• RET-009AcceptedProvider-authoredProvider blog

  Verizon and Cisco optimize customer experience for Verizon retail stores

  Named retailer:

  Verizon (own retail stores)

  Named service:

  Cisco 1000 Series Integrated Services Routers (ISR 1000), SD-WAN

  Countries, regions:

  United States

  Outcome:

  Zero-touch deployment; dynamic multipoint VPN (DMVPN); 4G LTE Advanced backup; up to 2x prior LTE throughput

  Cisco ISR 1000 represents the latest generation of LTE technology, providing up to twice the throughput that was available previously

  Verizon selected Cisco ISR 1000 SD-WAN routers with 4G LTE Advanced backup and zero-touch deployment for its own 1,700 US retail stores, working with Verizon's private wireless network for stable, secure backup connectivity. Quote from Antonio Martinez, Verizon store network connectivity lead.

  Does not prove: This is Verizon as retailer of its own stores rather than a third-party retail brand; payment/PCI segmentation not addressed.

  blogs.cisco.com · Checked 10 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Store and branch connectivity, Internet and 4G/5G failover

• RET-518AcceptedProvider-authoredNamed customer case study

  Forever New | Cisco Meraki Customer Story

  Named retailer:

  Forever New

  Named service:

  Cisco Meraki (MR wireless APs, MS switches, MX security appliance)

  Countries, regions:

  Australia (HQ Melbourne) and 11 countries globally

  Outcome:

  Easy deployment and cloud-managed visibility across all sites, run by a 2-person IT team with no special certification required; supports IP telephony and WAN optimisation

  "We're one of the fastest-growing Australian brands. We emerged in late 2006 as a start-up retailer, and now we trade in over 260 stores in 11 countries globally." - Sud Patel, IT Operations Manager, Forever New. "Cisco Meraki just fit us really well and was so easy to manage. We didn't need to be certified to manage the network. That's important, especially when there are only two of us."

  Verified live 2026-09-15. Forever New is real, named, at genuine international scale, with a named IT Operations Manager quote and specific usage data. Product is Cisco Meraki (cloud-managed WLAN/security), mapped to the 'Cisco' provider row per the workbook's 30-provider list.

  Does not prove: Added 2026-09-15. This is Meraki wireless/switching/security, not SD-WAN or SASE specifically - graded supporting-only for that field, though genuinely strong for multi-site deployment, managed operations and POS/IoT connectivity.

  meraki.cisco.com · Checked 15 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Edge, IoT and camera connectivity, Managed operations

• RET-519AcceptedProvider-authoredNamed customer case study

  How Australia's Leading Retail Management Company Has Adopted A SASE Approach

  Named retailer:

  Vicinity Centres

  Named service:

  Cisco Umbrella, Cisco SecureX

  Countries, regions:

  Australia (Melbourne HQ)

  Outcome:

  Reduced internet outages; protected shoppers using guest Wi-Fi at shopping centres; secured remote workers; reduced incident investigation time from a day to an hour

  "In an ever-evolving pandemic, we needed to improve operational efficiencies and be more resilient at the same time - and our investment in the Cisco Secure portfolio was part of that strategic IT roadmap and our move to the hybrid cloud." - Glenn Ong, Head of IT Operations, Vicinity Centres. Results: "Secured remote workers and protected shoppers using guest wi-fi at the shopping centres."

  Verified live 2026-09-15. Vicinity Centres is real, major, named (Australia's leading retail property manager, 62 shopping centres), with a named Head of IT Operations quote. Directly and explicitly addresses both guest Wi-Fi separation and remote-worker access together, plus genuine IoT device detail (wayfinding, media screens, foot-traffic counters).

  Does not prove: Added 2026-09-15. Cisco Umbrella/SecureX (SSE/SWG), not SD-WAN or full SASE - graded supporting-only for that field, though directly on-point for guest Wi-Fi and remote worker capabilities.

  cisco.com · Checked 15 Sept 2026 · Supports: Guest and corporate Wi-Fi separation, Edge, IoT and camera connectivity, Remote worker and support access

Juniper Networks on the marketplace · Reviewed 15 Sept 2026 by Harry Yelland

Canadian Tire Corporation (CTC) is a strong, named, quantified reference - 1,700 retail stores and gas outlets on Juniper's full AI-driven stack (Wi-Fi, wired access, SD-WAN) - corroborated by Juniper's own newsroom and businesswire.com press coverage. Halfords (UK) adds a second named reference with a direct CIO quote, confirming Mist AI's automated network visibility and assurance drives down trouble tickets.

Gaps and unknowns: The CTC announcement does not explicitly confirm SASE/security-policy deployment (Juniper's retail solutions page lists SASE as part of the portfolio, but the CTC case itself names Wi-Fi, wired access and SD-WAN only). Payment/PCI segmentation, POS resilience and edge/IoT/camera connectivity are unevidenced. Note: the automated re-verification run reported an unrelated network error against this row (referencing www.hpe.com, a domain not cited anywhere in this evidence) - independently re-checked directly and the Juniper source is confirmed live with the recorded wording intact; this looks like a stale-connection artefact in that run rather than a real problem with the source.

Store and branch connectivity

Proven

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Proven

POS and payment resilience

Not found

SaaS and cloud application access

Partial

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Proven

Internet and 4G/5G failover

Not found

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Proven

Security policy consistency

Partial

Threat protection and secure web access

Not found

Network and application visibility

Proven

Managed operations

Not found

Sources (4)

• RET-020AcceptedProvider-authoredProvider press release

  Canadian Tire Corporation Chooses Juniper Solution to Accelerate its Better Connected Strategy

  Named retailer:

  Canadian Tire Corporation (CTC)

  Named service:

  Juniper full-stack AI-driven solution (Mist Wi-Fi, wired access switching, SD-WAN)

  Countries, regions:

  Canada

  Outcome:

  Optimised user experience across the network; strengthened Wi-Fi connections; enabled cloud-based strategy

  Encompassing Wi-Fi, wired access switching and SD-WAN, Juniper's network stack will support optimized user experiences across CTC's network of 1,700 retail stores and gas outlets

  Canadian Tire Corporation (CTC), described by Juniper as an 'iconic retailer', selected Juniper's full-stack AI-driven solution (Wi-Fi, wired access switching, SD-WAN) across its 1,700 retail stores and gas outlets in Canada, to support omnichannel journeys from mobile app to click-and-collect lockers and in-store kiosks. Independently corroborated by Juniper's newsroom and businesswire.com.

  Does not prove: SASE/security-policy consistency is not explicitly confirmed as part of the CTC deployment itself; payment/PCI segmentation not addressed.

  juniper.net · Published 15 Nov 2022 · Checked 10 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Guest and corporate Wi-Fi separation, Network and application visibility, SaaS and cloud application access, Store and branch connectivity

• RET-021AcceptedProvider-authoredProvider case study

  Halfords relies on Juniper AIOps for retail transformation

  Named retailer:

  Halfords

  Named service:

  Juniper wired and wireless network with Mist AI

  Countries, regions:

  United Kingdom

  Outcome:

  Predictable connectivity for users and devices; network-related trouble tickets dropped; automated network assurance and proactive issue detection via Mist AI

  The network user experience that Juniper offers far exceeds anything else in the market.

  Halfords, the UK's leading automotive and cycling products/services retailer, deployed Juniper wired and wireless networking with Mist AI across its stores, auto centres and offices, delivering Wi-Fi 6 and virtual Bluetooth LE to staff/customer devices, POS devices and in-store video displays, with automated network assurance cutting trouble tickets. Quote from Neil Holden, CIO, Halfords.

  Does not prove: This is Wi-Fi/wired access plus AIOps evidence, not SD-WAN/SASE; UK-relevant but does not itself evidence WAN or SASE capabilities.

  juniper.net · Published 1 Apr 2023 · Checked 10 Sept 2026 · Supports: Guest and corporate Wi-Fi separation, Network and application visibility, Store and branch connectivity

• RET-512AcceptedProvider-authoredNamed customer case study

  Halfords relies on AIOps for retail transformation

  Named retailer:

  Halfords

  Named service:

  Juniper Mist AI (wired and wireless, AP33, EX2300, Wi-Fi/Wired Assurance)

  Countries, regions:

  UK (EMEA)

  Outcome:

  100% reduction in network-related trouble tickets; 35% improvement in uptime; 200+ automotive centres connected in 22 weeks during a National Tyres acquisition

  "The network is a utility. The network is a big part of our digital transformation journey, and we needed a very intelligent, secure network with next-generation capabilities." - Neil Holden, CIO, Halfords. "Juniper-switches bieden hoogwaardige toegangsnetwerken... Wi-Fi 6 and virtual Bluetooth LE services to smartphones, point-of-sale devices, video displays in stores and other connected devices."

  Verified live 2026-09-15 (cross-platform lead, independently confirmed and strengthened with a named CIO quote and stronger metrics than in the original summary). Halfords is real, major, named UK retailer at genuine scale (1,400+ sites).

  Does not prove: Added 2026-09-15. Wired/wireless LAN deployment (Mist AI), not SD-WAN/SASE specifically - correctly excluded from that field per evidence rule 4, but genuinely strong for connectivity, multi-site deployment and IoT/POS/camera-adjacent (video display) capabilities.

  juniper.net · Checked 15 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Edge, IoT and camera connectivity, Store and branch connectivity

• RET-513AcceptedProvider-authoredNamed customer case study

  Transforming the retail experience (T-Mobile)

  Named retailer:

  T-Mobile

  Named service:

  Juniper Mist AI-native networking platform (wired, wireless, SD-WAN)

  Countries, regions:

  United States

  Outcome:

  25 stores rolled out per night; single cloud-scale dashboard to manage wired, wireless and SD-WAN together

  "As the Un-carrier, T-Mobile aims to radically transform the wireless customer experience. The company, which has the largest 5G network in the U.S., is migrating to Mist, Juniper's AI-native networking platform, and a full stack solution as it reimagines the customer experience at 3,500 stores." Outcomes: "25 - Stores rolled out per night. 3,500 - Stores to be upgraded with Juniper networking. 1 - Dashboard to manage wired, wireless, and SD-WAN."

  Verified live 2026-09-15 (cross-platform lead, independently confirmed, exact figures match). T-Mobile is real, major, named - one of the largest named retail deployments found in this entire project by scale.

  Does not prove: Added 2026-09-15. This is Juniper Mist wired/wireless/SD-WAN together as a "full stack" - the SD-WAN component is named explicitly, so graded as genuine SD-WAN evidence rather than supporting-only.

  juniper.net · Checked 15 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Network and application visibility, Store and branch connectivity

VeloCloud on the marketplace · Reviewed 15 Sept 2026 by Harry Yelland

Brooks Brothers now has a genuinely detailed, named VMware/VeloCloud case study confirming nearly 500 store locations worldwide and the specific MPLS/T1 problems solved. Redmond Inc.'s case separately confirms PCI 3.0 compliance, which is rare and valuable evidence.

Gaps and unknowns: Both named case studies date from 2017 (pre-Broadcom/Arista ownership of VMware's VeloCloud business) so current-state evidence is thin. POS/payment resilience, guest Wi-Fi separation, edge/IoT/camera connectivity and managed operations have no retail-specific evidence.

Store and branch connectivity

Proven

Payment and PCI DSS segmentation

Proven

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Not found

SaaS and cloud application access

Proven

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Proven

Internet and 4G/5G failover

Proven

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Not found

Security policy consistency

Not found

Threat protection and secure web access

Not found

Network and application visibility

Proven

Managed operations

Not found

Sources (2)

• RET-033AcceptedIndependentProvider press release

  VeloCloud unveils retail use cases for SD-WAN

  Named retailer:

  Redmond, Incorporated

  Named service:

  VeloCloud Cloud-Delivered SD-WAN

  Countries, regions:

  United States (Utah HQ)

  Outcome:

  Met PCI 3.0 compliance; dramatically improved real-time application performance and operational efficiency; reduced overall IT costs

  VeloCloud SD-WAN met PCI 3.0 compliance and dramatically improved real time application performance and operational efficiencies while reducing overall IT costs.

  Redmond, Incorporated (17+ retail brands across consumer, agricultural, industrial and vinyl segments) confirms VeloCloud SD-WAN explicitly met PCI 3.0 compliance while improving real-time application performance for Unified Communications and virtual desktops in stores and warehouses. Quote from Aaron Gabrielson, CTO, Redmond Inc.

  Does not prove: No site count given; press release from 2017. Note: original softwaremag.com URL failed SSL verification on re-check; swapped to this independent capacitymedia.com copy of the same release, confirmed live, on 2026-09-10.

  capacitymedia.com · Published 17 Oct 2017 · Checked 10 Sept 2026 · Supports: SaaS and cloud application access, Payment and PCI DSS segmentation

• RET-514AcceptedProvider-authoredNamed customer case study

  Rethinking the Retail Experience: A Historic Retailer Becomes the Store of the Future

  Named retailer:

  Brooks Brothers

  Named service:

  VMware NSX SD-WAN by VeloCloud

  Countries, regions:

  United States (global corporate footprint)

  Outcome:

  Sub-second failover via Dynamic Multipath Optimization; all retail locations transaction-ready at all times; faster/more consistent store onboarding; enabled VoIP migration without switches

  "Brooks Brothers prides itself on being far more than just a store to our customers, in line with its long and storied history and heritage. With SD-WAN, we're able to take our legacy traditions and values and enable them for the future..." - Manny Stergakis, Technical Architect, Brooks Brothers.

  Verified live 2026-09-15 (cross-platform lead, independently confirmed and strengthened with a named exec quote and an independently-reported store count of 278, from SDXCentral rather than VMware's own marketing).

  Does not prove: Added 2026-09-15. VMware's own PDF doesn't state a store count directly; the 278-store figure comes from independent SDXCentral reporting on the same deployment.

  vmware.com · Checked 15 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Network and application visibility, Store and branch connectivity, Internet and 4G/5G failover

Zscaler on the marketplace · Reviewed 15 Sept 2026 by Harry Yelland

Zscaler's own published case study ('Global Retailer Modernizes Security') is detailed and credible - MPLS-to-SD-WAN plus Zero Trust Exchange across thousands of stores in 90 countries - but the retailer is anonymised, so it supports Partial rather than Proven store-network status.

Gaps and unknowns: The retailer is never named ('a leading global beauty brand'). Payment/PCI DSS segmentation and POS resilience are addressed only generically via a Cognizant/Zscaler partner brochure, with no named end customer. Guest Wi-Fi, edge/IoT/camera and seasonal scaling are unevidenced.

Store and branch connectivity

Partial

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Partial

SaaS and cloud application access

Proven

Third-party and supplier access

Not found

Remote worker and support access

Proven

Multi-site deployment and zero-touch provisioning

Not found

Internet and 4G/5G failover

Not found

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Not found

Security policy consistency

Proven

Threat protection and secure web access

Proven

Network and application visibility

Proven

Managed operations

Not found

Sources (3)

• RET-040AcceptedProvider-authoredProvider case study

  Global Retailer Modernizes Security

  Named retailer:

  Not named

  Named service:

  Zscaler Zero Trust Exchange with new SD-WAN infrastructure

  Countries, regions:

  90 countries (HQ Europe)

  Outcome:

  Consistent, reliable branch connectivity across global retail locations and corporate offices; stronger security posture; lower costs; integrated cloud architecture on Zscaler's multitenant platform

  The Zero Trust Exchange isn't just a collection of solutions, it's the backbone of our comprehensive digital security ecosystem.

  An unnamed 'leading global beauty brand' (cosmetics/skincare/wellness retailer, HQ Europe, thousands of stores across 90 countries) replaced an outdated MPLS network and legacy security appliances with new SD-WAN plus Zscaler's Zero Trust Exchange, integrated with its Microsoft 365/Azure/Entra ID/Defender estate. Quote from the retailer's Head of Network and Security Services.

  Does not prove: Retailer is not named at any point in Zscaler's own published case study; cannot be independently corroborated.

  zscaler.com · Checked 10 Sept 2026 · Supports: Threat protection and secure web access, SaaS and cloud application access, Store and branch connectivity, Security policy consistency

• RET-041AcceptedProvider-authoredProvider/partner brochure

  Cognizant's Managed Zero Trust SASE Offering for Retail vertical, powered by Zscaler

  Named retailer:

  Not named

  Named service:

  Cognizant Managed Zero Trust SASE for Retail, powered by Zscaler Zero Trust Exchange

  Countries, regions:

  Not stated

  Outcome:

  Not stated (this is a joint go-to-market offering, not a case study with a named customer or outcome)

  It enforces Zero Trust principles across users, devices, and applications to ensure strict identity verification and least-privilege access - essential for protecting POS systems, inventory, and customer data.

  A joint Cognizant/Zscaler brochure describes a managed Zero Trust SASE offering for retail explicitly covering POS, inventory and customer-data protection, but names no actual retail customer or deployment.

  zscaler.com · Checked 10 Sept 2026 · Supports: Security policy consistency, POS and payment resilience

• RET-520AcceptedProvider-authoredNamed customer case study

  Zscaler and VMware SD-WAN Transform Northgate Market into a Cloud-First Organization

  Named retailer:

  Northgate Market

  Named service:

  Zscaler Internet Access, Zscaler Private Access (ZPA), paired with VMware SD-WAN

  Countries, regions:

  United States (Southern California, HQ Anaheim)

  Outcome:

  40% cost savings; increased bandwidth capability; eliminated network outages via high-availability traffic prioritisation and segmentation; replaced Cisco AnyConnect VPN with ZPA for travelling staff

  "Zscaler was the perfect solution given our business strategy, leveraging priority at the specific application level, unlike what was possible previously." - Harrison Lewis, CIO, Northgate Market. "Northgate Market also recognized the need to protect the more than 250 employees that regularly travel from site to site, opting to replace its Cisco AnyConnect VPN with Zscaler Private Access." "ZPA... is a very critical component of our security architecture that's necessary in this new environment."

  Verified live 2026-09-15 (found independently while targeting the Third-party/supplier access gap). Northgate Market is a real, named US grocery chain with a named CIO quote. The 250+ travelling-employee detail is a strong, specific fit for Remote worker and support access - one of the thinnest columns in the workbook.

  Does not prove: Added 2026-09-15. Does not address third-party/supplier access specifically (the gap being targeted) - travelling employees are Northgate's own staff, not third parties. No PCI/payment detail despite being a grocery/payment-heavy retailer.

  zscaler.com · Checked 15 Sept 2026 · Supports: Network and application visibility, Remote worker and support access, Security policy consistency

Ericsson Cradlepoint on the marketplace · Reviewed 10 Sept 2026 by Harry Yelland

Coles Group is a strong, named, quantified reference (1,700+ stores, 21 million transactions/week) corroborated across three independent trade sources, with a named executive quote. GAIL's Bakery adds a second, UK-relevant named reference.

Gaps and unknowns: Payment/PCI DSS segmentation, guest Wi-Fi separation, third-party/supplier access and security policy consistency have no retail-specific evidence. Seasonal/temporary-site scaling is not explicitly addressed.

Store and branch connectivity

Proven

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Proven

SaaS and cloud application access

Not found

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Proven

Internet and 4G/5G failover

Proven

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Proven

Security policy consistency

Not found

Threat protection and secure web access

Not found

Network and application visibility

Not found

Managed operations

Partial

Sources (2)

• RET-012AcceptedIndependentProvider case study

  Coles picks Cradlepoint for 5G WLAN backup

  Named retailer:

  Coles Group

  Named service:

  Cradlepoint NetCloud with 5G (W1850/W2005 adapters)

  Countries, regions:

  Australia

  Outcome:

  Failover to 5G if wired WAN fails, keeping POS/loyalty/stock-control running; round-the-clock visibility of backup links; centralised management

  The speed of connectivity, centralised management, agility, and out-of-band access that we're able to achieve with Cradlepoint 5G solutions across our stores and new distribution centres, ensures constant service delivery to our customers.

  Coles Group, a major Australian supermarket retailer with 1,700+ stores and 21 million transactions/week, uses Cradlepoint NetCloud with 5G for wireless WAN and out-of-band remote access across all stores and new distribution centres; 5G steps in as failover for POS, loyalty and stock-control systems if the wired WAN fails. Quote from Chrissy Chu, GM Technology Services & Commercial, Coles Group. Independently corroborated by itwire.com and intelligentcio.com.

  Does not prove: Payment/PCI segmentation and guest Wi-Fi separation are not addressed in this source. Note: the original Cradlepoint/Ericsson URL (cradlepoint.com/?p=51269) went dead after a site restructure; swapped to this independently-published iTWire article, confirmed live and carrying the identical quote, on 2026-09-10.

  itwire.com · Published 27 Jul 2023 · Checked 10 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Edge, IoT and camera connectivity, Store and branch connectivity, Internet and 4G/5G failover, POS and payment resilience

• RET-013AcceptedIndependentProvider case study

  GAIL's Bakery uses 5G connectivity to elevate the customer experience and streamline operations

  Named retailer:

  GAIL's Bakery

  Named service:

  Cradlepoint NetCloud with purpose-built 5G routers

  Countries, regions:

  United Kingdom

  Outcome:

  Not fully stated in the reviewed source (case study referenced by The Retail Bulletin)

  With over 120 locations, including five in the North West/Manchester region, GAIL's continues to expand its presence and bring artisanal baking to neighbourhoods throughout the UK.

  GAIL's Bakery, a UK neighbourhood bakery chain with 120+ locations, uses Cradlepoint NetCloud 5G routers for flexible primary/secondary store connectivity as it expands - a UK-relevant named reference.

  Does not prove: Summary is from trade press rather than the full underlying Cradlepoint case study, so detailed outcome figures were not captured.

  theretailbulletin.com · Published 18 Apr 2024 · Checked 10 Sept 2026 · Supports: Store and branch connectivity, Internet and 4G/5G failover

GTT on the marketplace · Reviewed 10 Sept 2026 by Harry Yelland

Kiabi is now a strong, named, quantified reference (430+ stores/warehouses/logistics centres across six countries, explicit Level 1 PCI DSS certification) from an independent BusinessWire press release. HMY Group adds a second named reference with a specific, sourced metric (22% lower network cost, doubled bandwidth) from GTT's own retail solutions page.

Gaps and unknowns: Guest Wi-Fi separation and edge/IoT/camera connectivity are not addressed by either case. The HMY Group statistic is cited via a third-party summary (MarketScale) rather than GTT's own case-study page, which was not independently opened.

Store and branch connectivity

Proven

Payment and PCI DSS segmentation

Proven

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Partial

SaaS and cloud application access

Not found

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Proven

Internet and 4G/5G failover

Partial

Seasonal and temporary-site scaling

Partial

Edge, IoT and camera connectivity

Not found

Security policy consistency

Not found

Threat protection and secure web access

Not found

Network and application visibility

Not found

Managed operations

Proven

Sources (2)

• RET-017AcceptedIndependentProvider press release

  Retailer Kiabi Transforms Global Network with GTT, Expanding Capacity at New Locations and Enabling Business Growth

  Named retailer:

  Kiabi

  Named service:

  GTT Managed SD-WAN with Professional Services

  Countries, regions:

  France, Italy, Belgium, Hong Kong, Bangladesh, India

  Outcome:

  Increased average bandwidth at new stores; resilient staff access to business-critical applications; enhanced in-store omnichannel experience; supported new store openings across Europe and Asia-Pacific

  GTT's secure network protocols, including Level 1 PCI DSS certifications, further assure that customer information is protected, backing Kiabi's governance and compliance requirements.

  Kiabi, an international retailer known for inclusive family fashion, upgraded its global network with GTT across 430+ stores, warehouses and logistics centres in France, Italy, Belgium, Hong Kong, Bangladesh and India, with GTT's Level 1 PCI DSS-certified network protocols explicitly cited for protecting payment processing and real-time inventory tracking. Quote from Tom Homer, President, Europe Division, GTT.

  Does not prove: Original gtt.net customer-page URL now 404s; swapped to this BusinessWire press release, confirmed live and considerably more detailed, on 2026-09-10.

  businesswire.com · Published 16 Jul 2024 · Checked 10 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Payment and PCI DSS segmentation, Store and branch connectivity, Managed operations

• RET-018AcceptedIndependentThird-party summary (citing provider page)

  GTT's retail network play: SD-WAN, zero trust, and supply chain visibility under one managed service

  Named retailer:

  HMY Group

  Named service:

  GTT Managed SD-WAN (upgraded from MPLS)

  Countries, regions:

  Not stated

  Outcome:

  22% lower network costs; doubled available bandwidth; eight-year GTT relationship, latest phase upgraded from MPLS

  HMY Group cut its network costs by 22% and doubled available bandwidth after deploying GTT Managed SD-WAN across its international retail estate.

  HMY Group, a named GTT retail customer of eight years, cut network costs by 22% and doubled available bandwidth after upgrading from MPLS to GTT Managed SD-WAN across its international retail estate - the figure is cited directly from GTT's own retail solutions page via MarketScale.

  Does not prove: Figure is quoted via a third-party trade publisher summarising GTT's page; GTT's retail solutions page itself was not independently opened to confirm wording.

  marketscale.com · Checked 10 Sept 2026 · Supports: Seasonal and temporary-site scaling, Store and branch connectivity, Internet and 4G/5G failover

Verizon Business on the marketplace · Reviewed 10 Sept 2026 by Harry Yelland

Walgreens Boots Alliance (9,000+ Walgreens/Duane Reade stores) is an outstanding, named, detailed Network-as-a-Service deployment corroborated by Light Reading. Verizon's own 1,700 retail stores add a second detailed, named (if self-referential) reference.

Gaps and unknowns: Payment/PCI DSS segmentation, POS resilience, third-party/supplier access and seasonal/temporary-site scaling are not addressed in either source. The WBA deal was announced in Dec 2020 as a phased, ~year-long national rollout; current completion status was not checked.

Store and branch connectivity

Proven

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Proven

POS and payment resilience

Not found

SaaS and cloud application access

Not found

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Proven

Internet and 4G/5G failover

Proven

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Not found

Security policy consistency

Proven

Threat protection and secure web access

Not found

Network and application visibility

Not found

Managed operations

Not found

Sources (2)

• RET-034AcceptedIndependentThird-party trade press

  Verizon to connect 9,000 Walgreens, Duane Reade stores

  Named retailer:

  Walgreens Boots Alliance (WBA)

  Named service:

  Verizon Network as a Service (NaaS): dual Internet, Wi-Fi, SD-WAN and security services

  Countries, regions:

  United States

  Outcome:

  Dual Internet connections per store for failover (fibre/wired/4G/5G depending on location); new in-store Wi-Fi network (nationwide rollout, ~1 year); SD-WAN with per-application connection policies

  Verizon will provide two Internet connections to each of the stores, ensuring that one will stay connected to the Internet if the other one fails.

  Walgreens Boots Alliance (WBA), operating 9,000+ Walgreens- and Duane Reade-branded US retail locations, signed a Network-as-a-Service agreement with Verizon Business covering dual-path Internet failover, new in-store Wi-Fi and SD-WAN with per-application security policies, shifting WBA to an opex telecom model. Quote from Massimo Peselli, SVP International & Enterprise Business Development, Verizon.

  Does not prove: Independent trade-press report rather than Verizon's own case study; payment/PCI segmentation and POS-specific detail not addressed; rollout was a ~1-year phased project announced Dec 2020, current completion status not verified.

  lightreading.com · Published 16 Dec 2020 · Checked 10 Sept 2026 · Supports: Guest and corporate Wi-Fi separation, Store and branch connectivity, Internet and 4G/5G failover, Security policy consistency

• RET-035AcceptedProvider-authoredProvider case study

  Verizon Backup Solutions for Business Continuity

  Named retailer:

  Verizon (own retail stores)

  Named service:

  Cisco 1000 Series ISR SD-WAN routers over Verizon Wireless Private Network

  Countries, regions:

  United States

  Outcome:

  4G LTE Advanced backup; zero-touch deployment; encrypted VPN traffic for strong security

  We're continuously evolving our stores to focus more and more on customers and offer them efficient, personalized shopping experiences with digital technologies.

  Verizon's own 1,700 US retail stores use Cisco ISR 1000 SD-WAN routers with 4G LTE Advanced backup over Verizon's private wireless network, with zero-touch deployment. Quote from Alan Malcolm, senior manager, Wi-Fi planning and connectivity, Verizon retail.

  Does not prove: This evidences Verizon as retailer of its own stores rather than a third-party retail customer of Verizon Business services.

  espanol.verizon.com · Checked 10 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Store and branch connectivity, Internet and 4G/5G failover

Forcepoint on the marketplace · Reviewed 15 Sept 2026 by Harry Yelland

Now supported by two named-retailer case studies: Kiabi (450+ stores, France) and Burger King Turkey (1,000+ network points). Real named-executive quotes. No evidence for PCI/payment segmentation, edge/IoT, or remote worker access.

Gaps and unknowns: No retailer is named anywhere in Forcepoint's retail content reviewed. SD-WAN/store-connectivity capabilities (multi-site, POS resilience, Wi-Fi) are entirely unaddressed - Forcepoint's retail evidence is security/DLP-focused, not network-focused.

Store and branch connectivity

Proven

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Not found

SaaS and cloud application access

Not found

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Proven

Internet and 4G/5G failover

Not found

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Not found

Security policy consistency

Proven

Threat protection and secure web access

Partial

Network and application visibility

Partial

Managed operations

Not found

Sources (3)

• RET-014AcceptedProvider-authoredProvider blog

  Why the World's Largest Retailers Work with Forcepoint

  Named retailer:

  Not named

  Named service:

  Forcepoint Next-Generation Firewall (NGFW) with Security Management Center

  Countries, regions:

  Australia

  Outcome:

  Remote, centralised network management via Security Management Center in place of in-person servicing of 1,500 brick-and-mortar locations

  Forcepoint's Next-Generation Firewall (NGFW) offers the retailer the ability to manage its network remotely using the Security Management Center (SMC).

  Forcepoint's blog describes an unnamed 'well-known national supermarket chain in Australia' (1,500 locations, 100,000+ employees) using Forcepoint NGFW with centralised remote management, plus references to other unnamed retailers using Web Security Cloud and a fast-food retailer using CASB/AMD/DLP.

  Does not prove: No retailer named; SD-WAN/store-network capabilities are not addressed by this source at all.

  forcepoint.com · Checked 10 Sept 2026 · Supports: Threat protection and secure web access, Network and application visibility, Security policy consistency

• RET-505AcceptedProvider-authoredNamed customer case study

  Kiabi Expands Safely with Secure SD-WAN

  Named retailer:

  Kiabi

  Named service:

  Forcepoint Secure SD-WAN

  Countries, regions:

  Global (France HQ)

  Outcome:

  Improved network uptime and resilience; reduced telecom bills via load balancing; faster cloud app performance

  "Right now, we don't share all our customer data with our franchisees, but in the coming years we plan to extend our loyalty program to more of these franchise stores, which means we'll need to partner with them on security and compliance. We think Forcepoint SD-WAN has helped us to future proof that scenario on the network side of things." - Anthony Pierson, Kiabi

  Verified live 2026-09-15, strengthened with a named executive quote (Anthony Pierson) not in the original summary. Kiabi is real, named, at genuine scale (450+ stores). Closes Forcepoint's zero-evidence gap.

  Does not prove: Added 2026-09-15. Franchise data-sharing is described as a future plan, not yet implemented - Third-party/supplier access graded Partial on that basis within an otherwise Proven-level source.

  forcepoint.com · Checked 15 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Third-party and supplier access, Store and branch connectivity, Security policy consistency

• RET-506AcceptedProvider-authoredNamed customer case study

  Burger King Scales SD-WAN for Hundreds of Restaurants

  Named retailer:

  Burger King (Turkey)

  Named service:

  Forcepoint Next-Generation Firewall (NGFW) with SD-WAN

  Countries, regions:

  Turkey

  Outcome:

  Immediate cost savings and reliable connectivity; zero-touch on-site installation with remote cloud-based policy configuration

  "Coming up on End of Life for its existing WAN appliances, Burger King chose to explore other options... Centralizing the IT management of over 1,000 network points with one NGFW SD-WAN policy." Forcepoint NGFW with SD-WAN "came out ahead of all other vendors with a 91% rating."

  Verified live 2026-09-15. This is specifically Burger King's Turkey franchise operation (HQ listed as Turkey), not the global brand - a real, named restaurant chain operator.

  Does not prove: Added 2026-09-15. Scoped to the Turkey franchise operator, not Burger King globally.

  forcepoint.com · Checked 15 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Store and branch connectivity

Netskope on the marketplace · Reviewed 10 Sept 2026 by Harry Yelland

Sainsbury's is a strong, named, UK-relevant reference with a direct CISO quote; UNITED ARROWS adds a second named international reference. However, Netskope is an SSE/security vendor, not an SD-WAN provider, so store-network capabilities (connectivity, POS, Wi-Fi) are not addressed by its own evidence.

Gaps and unknowns: Store and branch connectivity, payment/PCI segmentation, POS resilience, multi-site deployment and edge/IoT/camera connectivity are Not applicable/Not found because Netskope's own retail evidence is entirely SSE-focused (data protection, cloud/web access, visibility) rather than SD-WAN/network-focused.

Store and branch connectivity

Not found

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Not found

SaaS and cloud application access

Proven

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Not found

Internet and 4G/5G failover

Not found

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Not found

Security policy consistency

Proven

Threat protection and secure web access

Proven

Network and application visibility

Proven

Managed operations

Not found

Sources (2)

• RET-023AcceptedProvider-authoredProvider blog (customer interview)

  Netskope customer implementation: Sainsbury's

  Named retailer:

  Sainsbury's

  Named service:

  Netskope (SSE/CASB/SWG)

  Countries, regions:

  United Kingdom

  Outcome:

  Line-of-sight across use cases with more data points/telemetry than previously available; GDPR fine exposure (up to 4% of revenue) cited as compliance driver

  We are now operating across a range of use cases with a line-of-sight that we didn't have before, with access to more data points and telemetry than we have ever had.

  Sainsbury's, a major UK retailer (£28.5bn in retail sales), uses Netskope across its 2,000-strong tech security team for visibility and data-protection compliance (GDPR). Quote from Mun Valiji, Sainsbury's CISO.

  Does not prove: SSE/data-protection evidence only; does not address SD-WAN, store connectivity, POS or Wi-Fi capabilities.

  netskope.com · Checked 10 Sept 2026 · Supports: Threat protection and secure web access, Network and application visibility, Security policy consistency

• RET-024AcceptedProvider-authoredProvider press release

  Netskope Helps UNITED ARROWS LTD. to Secure Its Digital Transformation Journey

  Named retailer:

  UNITED ARROWS LTD.

  Named service:

  Netskope One (Security Service Edge)

  Countries, regions:

  Japan

  Outcome:

  Not quantified in the reviewed source (implementation confirmed, no metrics given)

  UNITED ARROWS LTD., a leading Japanese fashion retailer, has successfully implemented Netskope One for integrated Security Service Edge (SSE) capabilities, underpinning its cloud transformation strategy

  UNITED ARROWS LTD., a leading Japanese fashion retailer, implemented Netskope One SSE to underpin its cloud transformation and digital initiatives.

  Does not prove: No quantified outcome given; SSE-only evidence, does not address SD-WAN/store-network capabilities.

  netskope.com · Published 3 Sept 2024 · Checked 10 Sept 2026 · Supports: Threat protection and secure web access, SaaS and cloud application access

Orange Business on the marketplace · Reviewed 10 Sept 2026 by Harry Yelland

Majid Al Futtaim Retail (Carrefour franchisee, 250+ stores across 15 countries) is a strong, named, quantified reference corroborated by four independent trade sources. Norauto adds a second named French retail reference with explicit POS/SaaS detail.

Gaps and unknowns: Payment/PCI DSS segmentation, guest Wi-Fi separation, third-party/supplier access and edge/IoT/camera connectivity are unevidenced. Neither case study states site-level security-policy or threat-protection detail.

Store and branch connectivity

Proven

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Partial

SaaS and cloud application access

Proven

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Proven

Internet and 4G/5G failover

Partial

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Not found

Security policy consistency

Not found

Threat protection and secure web access

Not found

Network and application visibility

Not found

Managed operations

Not found

Sources (2)

• RET-025AcceptedIndependentProvider press release

  Majid Al Futtaim picks Orange solutions for retail unit

  Named retailer:

  Majid Al Futtaim Retail (Carrefour franchisee)

  Named service:

  Flexible SD-WAN by Orange Business

  Countries, regions:

  Middle East, Africa (38-market franchise footprint)

  Outcome:

  Connected cloud applications across the WAN; supported omnichannel strategy and gradual e-commerce rollout; first Orange Middle East SD-WAN customer

  Flexible SD-WAN by Orange is a key enabler of our omnichannel customer experience.

  Majid Al Futtaim Retail, which holds the exclusive Carrefour franchise across 38 Middle East/Africa/Asia markets, deployed Flexible SD-WAN from Orange Business across 250+ Carrefour stores and end-users in 15 countries, to connect cloud applications (including its SAP e-commerce platform) and support its omnichannel strategy. Quote from Marco Urios, SVP Omnichannel Solutions, Majid Al Futtaim Retail. Corroborated by convergedigest.com, tradearabia.com and imagesretailme.com.

  Does not prove: Payment/PCI segmentation and security-policy detail are not addressed in this release. Note: the original Orange Business press-office URL returns HTTP 403 to automated requests (likely bot protection); swapped to this independently-hosted trade-press copy of the same release, confirmed live, on 2026-09-10.

  tradearabia.com · Published 11 Dec 2018 · Checked 10 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, SaaS and cloud application access, Store and branch connectivity

• RET-026AcceptedIndependentThird-party trade press

  Norauto adopte le SD-WAN d'Orange Business Services

  Named retailer:

  Norauto

  Named service:

  Orange Business SD-WAN

  Countries, regions:

  France

  Outcome:

  Local internet breakout per store; IP telephony; SaaS payment solution; in-store screens showing live vehicle-maintenance progress; improved resilience and security

  fournir à ses boutiques une évasion locale Internet, mais aussi de renforcer sa résilience, ses performances d'accès aux infrastructures hébergées ainsi que son niveau de sécurité

  Norauto, a French automotive maintenance and retail chain, adopted Orange Business SD-WAN for local internet breakout at stores, resilience, a SaaS-based payment/checkout solution and IP telephony, alongside in-store screens showing live maintenance status.

  Does not prove: Site count not stated; independent trade-press summary rather than Orange's own case study page.

  lemondeinformatique.fr · Checked 10 Sept 2026 · Supports: SaaS and cloud application access, Store and branch connectivity, Internet and 4G/5G failover, POS and payment resilience

Vodafone Business on the marketplace · Reviewed 10 Sept 2026 by Harry Yelland

Vodafone's own retail industry page names Coin (Italian department-store chain); independent press names Kotsovolos (Greek electronics retailer) and Vinod Patel Group (Fiji-based retail/distribution/manufacturing conglomerate) with a named executive quote.

Gaps and unknowns: None of the three named cases gives a specific site count or quantified outcome figure. Payment/PCI DSS segmentation, POS resilience, guest Wi-Fi separation and edge/IoT/camera connectivity are unevidenced.

Store and branch connectivity

Proven

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Not found

SaaS and cloud application access

Proven

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Proven

Internet and 4G/5G failover

Partial

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Not found

Security policy consistency

Not found

Threat protection and secure web access

Not found

Network and application visibility

Not found

Managed operations

Partial

Sources (2)

• RET-038AcceptedProvider-authoredProvider industry page

  Vodafone Business in Retail (industry page)

  Named retailer:

  Coin

  Named service:

  Vodafone Business SD-WAN and Analytics

  Countries, regions:

  Italy

  Outcome:

  Not quantified in the reviewed source

  Vodafone Business SD-WAN and Analytics helped Coin connect stores across digital and physical channels and tailor their offers to customer needs.

  Coin, a named Italian department-store chain, uses Vodafone Business SD-WAN and Analytics to connect stores across digital and physical channels and tailor customer offers.

  Does not prove: No site count or quantified outcome given; single-sentence reference on Vodafone's own retail industry page.

  vodafone.com · Checked 10 Sept 2026 · Supports: SaaS and cloud application access, Store and branch connectivity

• RET-039AcceptedProvider-authoredThird-party trade press

  Vodafone Fiji: more businesses move to cloud (news release)

  Named retailer:

  Vinod Patel Group

  Named service:

  Vodafone SD-WAN/Wi-Fi solution

  Countries, regions:

  Fiji and wider Pacific

  Outcome:

  Equipped to better respond to customers/employees; infrastructure deployable quickly at any site and managed centrally; improved service levels, reduced downtime, reduced administration cost/complexity

  Vodafone's SD-WAN/Wi-Fi solution has equipped us to better respond to our customers and employees, as we transition our tech service to the cloud.

  Vinod Patel Group, a named conglomerate operating retail, distribution and manufacturing businesses across the Pacific, uses Vodafone's SD-WAN/Wi-Fi solution for quick, centrally-managed multi-site deployment. Quote from Jekin Patel, GM Digital Transformation & Strategy, Vinod Patel Group.

  Does not prove: No site count or quantified figure given; Vinod Patel Group spans multiple sectors, not retail alone.

  vodafone.com.fj · Published 11 Jun 2021 · Checked 10 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Store and branch connectivity, Managed operations

NTT DATA on the marketplace · Reviewed 15 Sept 2026 by Harry Yelland

Now supported by one strong named-retailer case study: Pick n Pay, a major South African grocery chain (1,200+ stores), using Fortinet Secure SD-WAN managed by NTT DATA with added satellite resilience for loadshedding. Direct named customer quote and independently corroborated business context. No evidence for the other 11 capability columns.

Gaps and unknowns: Every retail capability is unevidenced for NTT DATA as a retail SD-WAN/SASE provider.

Store and branch connectivity

Proven

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Proven

SaaS and cloud application access

Not found

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Not found

Internet and 4G/5G failover

Proven

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Not found

Security policy consistency

Not found

Threat protection and secure web access

Not found

Network and application visibility

Not found

Managed operations

Proven

Sources (1)

• RET-504AcceptedProvider-authoredNamed customer case study

  NTT DATA (services.global.ntt) - case study: Managed SD-WAN delivers seamless store connectivity and turnover boost for Pick n Pay (named platform: Fortinet Secure SD-WAN; quantified outcome: 1% turnover increase within first six months)

  Named retailer:

  Pick n Pay

  Named service:

  Fortinet Secure SD-WAN, managed by NTT DATA (plus satellite connectivity for loadshedding resilience)

  Countries, regions:

  South Africa

  Outcome:

  "In the past six months we've already added 1% to our turnover" - trading and payments continue via satellite connectivity even when terrestrial connections go down during loadshedding

  "We've been working with NTT DATA to get the network where it needs to be. That work has now borne fruit. The network has stabilized, we have insight into how it works and that's supremely good news for us. In the past six months we've already added 1% to our turnover." "Introducing satellite as an internet connection into PnP's SD-WAN solution allows trading and payments to continue even when terrestrial connections go down."

  Verified live 2026-09-15 (cross-platform lead, independently confirmed). Pick n Pay is a real, major, named South African grocery retailer (1,200+ stores group-wide). The loadshedding context is independently corroborated by real news coverage (BusinessTech, reporting Pick n Pay spends R60m/month on generators during loadshedding) - this is a genuine, well-documented business problem the case study addresses credibly. Closes NTT DATA's entire zero-evidence gap.

  Does not prove: Added 2026-09-15. Underlying SD-WAN technology is Fortinet Secure SD-WAN, managed by NTT DATA - a managed-service case, not NTT DATA's own proprietary platform. No named regulation. No PCI DSS detail despite payment continuity being central to the case.

  · Checked 15 Sept 2026 · Supports: Store and branch connectivity, Internet and 4G/5G failover, POS and payment resilience, Managed operations

SonicWall Cloud Secure Edge on the marketplace · Reviewed 10 Sept 2026 by Harry Yelland

Monte Carlo Fashions and Preturi Pentru Tine are two named, real retail customers (TechValidate-verified survey responses and a dedicated write-up), plus a detailed product brief showing explicit VLAN-based POS/camera/Wi-Fi segmentation for retail.

Gaps and unknowns: None of the named case studies is SonicWall's flagship Cloud Secure Edge SASE product specifically - they describe NGFW/TZ-series SD-WAN functionality. POS/payment resilience, guest Wi-Fi, seasonal scaling and edge/IoT/camera connectivity have no named-retailer evidence. Note: an automated local verification run scored both SonicWall sources at only 0.39 similarity; re-fetched directly and confirmed both pages are live with the recorded quotes intact - likely the same bot/JS-protection false negative seen on the Cato source, not a real content problem.

Store and branch connectivity

Proven

Payment and PCI DSS segmentation

Partial

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Not found

SaaS and cloud application access

Not found

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Partial

Internet and 4G/5G failover

Partial

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Not found

Security policy consistency

Proven

Threat protection and secure web access

Not found

Network and application visibility

Not found

Managed operations

Not found

Sources (2)

• RET-030AcceptedProvider-authoredProvider case study

  Monte Carlo Fashions Ltd. Upscales Performance and Protection with SonicWall

  Named retailer:

  Monte Carlo Fashions Ltd.

  Named service:

  SonicWall NSA/TZ NGFW with SD-WAN functionality, GMS centralised management

  Countries, regions:

  India

  Outcome:

  Improved application uptime, security and inter-location connectivity; bandwidth management, ISP failover and load balancing for multiple ISPs; centralised management/reporting

  Monte Carlo's use of SD-WAN functionality has improved application uptime, security and connectivity between locations.

  Monte Carlo Fashions Ltd., a large named Indian fashion garmenting and retail company, deployed SonicWall NSA/TZ NGFW appliances with SD-WAN functionality and GMS centralised management to reduce MPLS dependency, improve uptime and centralise security policy and reporting across its distributed locations.

  Does not prove: This is SonicWall's NGFW/SD-WAN line, not confirmed as the Cloud Secure Edge SASE product specifically; PCI/POS detail not stated.

  sonicwall.com · Checked 10 Sept 2026 · Supports: Store and branch connectivity, Internet and 4G/5G failover, Security policy consistency

• RET-031AcceptedProvider-authoredProvider case study (TechValidate survey)

  SonicWall Network Security Case Study: Retail - Preturi Pentru Tine (PPT)

  Named retailer:

  Preturi Pentru Tine (PPT)

  Named service:

  SonicWall TZ-series firewalls (Network Security)

  Countries, regions:

  Romania

  Outcome:

  High uptime and stability interconnecting sites; replaced a prior Cisco deployment

  We use our TZ firewalls to interconnect different sites to the central one. SonicWall delivers high uptime and good stability.

  Preturi Pentru Tine (PPT), a named clothing store chain in Romania, uses SonicWall TZ firewalls to interconnect its distributed sites with high uptime, after previously using Cisco. Quote from Radu Murariu, Network Administrator, PPT.

  Does not prove: This is core NGFW/VPN evidence, not the SASE/Cloud Secure Edge product line; no SD-WAN, POS or PCI detail given.

  sonicwall.com · Published 1 May 2019 · Checked 10 Sept 2026 · Supports: Store and branch connectivity, Security policy consistency

Cloudflare One on the marketplace · Reviewed 15 Sept 2026 by Harry Yelland

Cloudflare has strong named retail case studies (PacSun, Kathmandu, C&A) but these evidence its CDN, WAF and bot-management products, not Cloudflare One/Magic WAN specifically - so they support web/threat-protection capability only, not SD-WAN or in-store network capability. RET-010 (PacSun) re-verified live 2026-09-11 and upgraded from Needs review to Accepted, with a named, attributed CISO quote and quantified results (27% faster, 99% of harmful bot traffic stopped) - Threat protection and secure web access moved from Partial to Proven on that basis.

Gaps and unknowns: No case study found ties a named retailer to Cloudflare One (Magic WAN/SASE) for store or branch network connectivity; all named retail evidence found is for e-commerce security (bot mitigation, DDoS), which the evidence rules say cannot be treated as SD-WAN/SASE proof without an explicit product connection.

Store and branch connectivity

Proven

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Not found

SaaS and cloud application access

Not found

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Proven

Internet and 4G/5G failover

Not found

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Not found

Security policy consistency

Not found

Threat protection and secure web access

Proven

Network and application visibility

Not found

Managed operations

Not found

Sources (2)

• RET-010AcceptedProvider-authoredProvider case-study index

  Reasons retail orgs choose Cloudflare (case-study index)

  Named retailer:

  PacSun

  Named service:

  Cloudflare Web Application Firewall (WAF), Secure DNS, DDoS protection, Bot Management (not Cloudflare One/Magic WAN)

  Countries, regions:

  United States

  Outcome:

  27% faster site performance overnight from improved cache rates; 99% of harmful bot traffic stopped at the network edge; averted millions of dollars in lost revenue from bot-related outages during sales events

  "Switching to Cloudflare, our system was 27% faster overnight... cache rates jumped immediately." - Scott Forrest, Pacsun CISO. Key results: 27% performance increase; 99% of harmful bot traffic stopped at the network edge.

  Cloudflare's own case study, re-verified live 2026-09-11 at cloudflare.com/case-studies/pacsun with a named, attributed CISO quote and quantified results. Confirms Cloudflare's WAF/Bot Management/DDoS stack for PacSun's e-commerce site - genuine threat-protection evidence, but explicitly not Cloudflare One SD-WAN/SASE for store network connectivity.

  Does not prove: Per evidence rule 4, this evidences Cloudflare bot-management/WAF products, not Cloudflare One SD-WAN/SASE for store connectivity - correctly scoped to Threat protection and secure web access only.

  cfl.re · Checked 11 Sept 2026 · Supports: Threat protection and secure web access

• RET-511AcceptedProvider-authoredNamed customer case study

  Implement coffee shop networking with Cloudflare

  Named retailer:

  Ocado Group

  Named service:

  Cloudflare One (WAN, coffee shop networking)

  Countries, regions:

  UK (Ocado HQ)

  Outcome:

  Standardised, simplified deployment - "drop a device anywhere in the world and have it just work"

  "As we scale up with more sites, configuring new networks can be as expensive as it is complex. Our vision is to get to a point where we can drop a device anywhere in the world and have it just work. Cloudflare is how we achieve that level of standardization and simplicity." - Chief Technology Officer, Ocado

  Verified live 2026-09-15. Found while verifying a separate lead (DTLR) - Ocado Group is a real, major, named UK online grocery retailer with a named CTO-level quote on Cloudflare's own current live retail page.

  Does not prove: Added 2026-09-15. CTO named by title only, not by name. No site count, PCI, or IoT detail stated.

  cloudflare.com · Checked 15 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Store and branch connectivity

Barracuda SecureEdge on the marketplace · Reviewed 15 Sept 2026 by Harry Yelland

Now supported by one real named-retailer case study: Hubo, a major Belgian DIY chain (150+ stores, 75 franchise), using Barracuda CloudGen Firewall SD-WAN with a named IT executive quote. Evidences multi-site zero-touch deployment, temporary-store connectivity, and network visibility. No evidence for PCI/payment segmentation, guest Wi-Fi separation, or edge/IoT/camera connectivity.

Gaps and unknowns: Every retail capability is unevidenced. This may need direct outreach to Barracuda's UK channel team rather than further open-web searching. [2026-09-15] Hubo case study found and verified (RET-501), closing the zero-evidence gap. Remaining gaps: PCI/payment segmentation, guest Wi-Fi separation, edge/IoT/camera connectivity, remote worker access, and any named regulation.

Store and branch connectivity

Not found

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Not found

SaaS and cloud application access

Not found

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Proven

Internet and 4G/5G failover

Not found

Seasonal and temporary-site scaling

Proven

Edge, IoT and camera connectivity

Not found

Security policy consistency

Not found

Threat protection and secure web access

Not found

Network and application visibility

Proven

Managed operations

Not found

Sources (1)

• RET-501AcceptedProvider-authoredNamed customer case study

  Pioneering DIY retailer future proofs SD-WAN security

  Named retailer:

  Hubo

  Named service:

  Barracuda CloudGen Firewall (SD-WAN, local internet breakout)

  Countries, regions:

  Belgium

  Outcome:

  Store setup takes minutes via automated deployment; single global ruleset migrated across all locations; exceeded 99.9%-class availability expectation implicitly via "everything is still working seamlessly"

  "We can connect our shops and temporary stores at the flick of a switch." - Jan Van Regenmortel, Senior Systems Administrator, Hubo. "Managing everything with a single ruleset saves us time and resource... When we need to change an application, we just change one rule which is applied to all locations."

  Verified live 2026-09-15 by direct PDF fetch (cross-platform lead, independently confirmed). Hubo is a real, major, named Belgian DIY retail chain (150+ stores) with a named IT executive quote. Explicitly mentions temporary stores and single-ruleset multi-site deployment.

  Does not prove: Added 2026-09-15. Does not explicitly detail supplier/EDI network access controls or PCI/payment segmentation - franchise connectivity and zero-touch/temporary-site evidence only.

  assets.barracuda.com · Published 1 Jan 2019 · Checked 15 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Seasonal and temporary-site scaling, Network and application visibility

Versa Networks on the marketplace · Reviewed 15 Sept 2026 by Harry Yelland

Versa's own 'Fortune 500 Retail' case-study video gives unusually detailed technical description (redundant appliances per store, guest Wi-Fi segmentation, AWS direct connectivity, dual-ISP local breakout) but the retailer is anonymised throughout, capping confidence.

Gaps and unknowns: No named retailer for Versa Networks in retail. 'Global Retailing Company' and 'Large Food Retailer' listings exist on Versa's case-study index but were not opened for detail. Payment/PCI segmentation, POS resilience and multi-site zero-touch provisioning are unevidenced by name. Re-searched 2026-09-15 with segment-specific terms - same result, only anonymised cases found ('Global Retailer', 'Fortune 500 retail enterprise', 'Large Food Retailer'). Genuine, twice-confirmed zero.

Store and branch connectivity

Partial

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Partial

POS and payment resilience

Not found

SaaS and cloud application access

Partial

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Not found

Internet and 4G/5G failover

Partial

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Not found

Security policy consistency

Partial

Threat protection and secure web access

Not found

Network and application visibility

Not found

Managed operations

Not found

Sources (1)

• RET-036AcceptedProvider-authoredProvider case-study video/transcript

  Versa Case Study: Versa Fortune 500 Retail Secure SD-WAN Transformation

  Named retailer:

  Not named

  Named service:

  Versa Secure SD-WAN (redundant Dell VEP 1445 appliances)

  Countries, regions:

  United States

  Outcome:

  Redundant SD-WAN appliances in every store; dual-ISP local internet breakout replacing MPLS; store network segmented from corporate/guest Wi-Fi; direct AWS connectivity replacing centralised hairpin routing

  We're using Versa to segment between store network and corporate network.

  An unnamed 'high-end name brand retailer' in the US, a five-year Versa customer, runs redundant Versa SD-WAN appliances in every store, segments store/corporate/guest Wi-Fi, and connects directly to AWS with dual-ISP local internet breakout replacing legacy MPLS and centralised traffic hairpinning.

  Does not prove: Retailer is never named in the video/transcript despite the level of technical detail; cannot be independently corroborated.

  academy.versa-networks.com · Checked 10 Sept 2026 · Supports: Guest and corporate Wi-Fi separation, SaaS and cloud application access, Store and branch connectivity, Internet and 4G/5G failover, Security policy consistency

Lumen on the marketplace · Reviewed 10 Sept 2026 by Harry Yelland

Lumen's co-branded case study with Cradlepoint describes a detailed, real retail 5G-failover deployment, but the retailer is unnamed and Lumen lists retail only generically as a served vertical elsewhere.

Gaps and unknowns: No named retailer found for Lumen. Payment/PCI segmentation, guest Wi-Fi separation and multi-site zero-touch provisioning are unevidenced.

Store and branch connectivity

Partial

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Partial

SaaS and cloud application access

Not found

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Not found

Internet and 4G/5G failover

Partial

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Not found

Security policy consistency

Not found

Threat protection and secure web access

Not found

Network and application visibility

Not found

Managed operations

Partial

Sources (1)

• RET-022AcceptedProvider-authoredProvider case study (co-branded with Cradlepoint)

  Lumen and Cradlepoint deliver 5G backup networking solution for retail transformation

  Named retailer:

  Not named

  Named service:

  Lumen Equipment Solutions with Cradlepoint 5G Adapter (W1850-5G)

  Countries, regions:

  United States (southeast)

  Outcome:

  Failover connectivity in stores if primary link fails; advanced analytics available to store managers; centralised remote out-of-band management

  Lumen's introduction of Cradlepoint's 5G connectivity solution allows this national grocer to future proof its IT infrastructure while providing real-time analytics to each store manager and remote out-of-band management to support hundreds of stores from a centralized location.

  An unnamed national US grocery retailer (southeast US, multiple locations) uses Lumen Equipment Solutions with a Cradlepoint 5G Adapter for backup WAN connectivity, real-time store-manager analytics and centralised remote out-of-band management.

  Does not prove: Retailer not named; document is co-branded with Cradlepoint so cannot be attributed solely to a Lumen-native SD-WAN/SASE product.

  assets.lumen.com · Checked 10 Sept 2026 · Supports: Store and branch connectivity, Internet and 4G/5G failover, POS and payment resilience, Managed operations

AT&T Business on the marketplace · Reviewed 15 Sept 2026 by Harry Yelland

AT&T Business has a genuinely strong, quantified retail SD-WAN/wireless-WAN deployment (6,000+ sites onboarded in five months), but the retailer is unnamed, so this is credible evidence of scale rather than a fully provable named reference.

Gaps and unknowns: The retailer behind the 6,000-site deployment is never named in AT&T's own case study. The 'major auto parts retailer' reference is thinner still (video only, no metrics). No evidence found for PCI/payment segmentation, guest Wi-Fi, edge/IoT or managed operations specifically for retail. Re-searched 2026-09-15 with segment-specific terms (supermarket, fuel, fashion, warehouse) - same result, only anonymised cases found ('global apparel brand', 'large retail enterprise chain'). Genuine, twice-confirmed zero.

Store and branch connectivity

Partial

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Not found

SaaS and cloud application access

Not found

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Partial

Internet and 4G/5G failover

Partial

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Not found

Security policy consistency

Not found

Threat protection and secure web access

Not found

Network and application visibility

Not found

Managed operations

Not found

Sources (1)

• RET-003AcceptedProvider-authoredProvider case study

  Next-generation networking use case (retail SD-WAN deployment)

  Named retailer:

  Not named

  Named service:

  AT&T Business SD-WAN with AT&T 4G LTE (wireless-only WAN)

  Countries, regions:

  United States

  Outcome:

  6,000+ sites onboarded in five months (avg. 400 sites/week); lower failure rates than wired rollout; reduced cost (no physical lines to lay)

  This solution brought 6000+ sites online within a five-month period (average of 400 sites per week)

  AT&T's own case study describes a large, unnamed US retail chain bringing 6,000+ sites onto wireless-only (4G LTE) WAN transport into AT&T's Common Backbone, in five months, with fewer failures and lower cost than a wired rollout.

  Does not prove: Retailer identity is withheld throughout; figures come solely from AT&T's own brief so cannot be independently corroborated.

  business.att.com · Published 22 Jun 2022 · Checked 10 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Store and branch connectivity, Internet and 4G/5G failover

Comcast Business on the marketplace · Reviewed 10 Sept 2026 by Harry Yelland

Comcast's own press release describes a detailed, quantified retail SD-WAN deployment (payment security and uptime explicitly the driver) but the retailer is unnamed, capping confidence.

Gaps and unknowns: The 'family-owned New England hardware store' is not named. No named retailer found for Comcast Business at all. Payment/PCI segmentation, guest Wi-Fi and edge/IoT connectivity are unevidenced.

Store and branch connectivity

Partial

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Partial

SaaS and cloud application access

Not found

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Not found

Internet and 4G/5G failover

Partial

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Not found

Security policy consistency

Not found

Threat protection and secure web access

Not found

Network and application visibility

Not found

Managed operations

Not found

Sources (1)

• RET-011AcceptedProvider-authoredProvider press release

  Family-Owned New England Hardware Store Builds a Solid Foundation with Comcast Business SD-WAN Solution

  Named retailer:

  Not named

  Named service:

  Comcast Business SD-WAN (ActiveCore SDN platform) with 4G LTE backup

  Countries, regions:

  United States (Boston area)

  Outcome:

  Retired legacy T1 backup entirely; layered SD-WAN over existing fibre/broadband with 4G LTE as new backup; retained existing voice solution

  to enhance network availability and customer payment security for its retail locations

  A Boston-based, family-owned hardware and home-centre chain (unnamed) adopted Comcast Business SD-WAN with 4G LTE backup specifically to improve network availability and payment security across its retail locations, retiring its legacy T1 backup line.

  Does not prove: Retailer is not named in Comcast's own release, so cannot be independently corroborated; site count not given.

  business.comcast.com · Published 21 Feb 2020 · Checked 10 Sept 2026 · Supports: Store and branch connectivity, Internet and 4G/5G failover, POS and payment resilience

BT on the marketplace · Reviewed 10 Sept 2026 by Harry Yelland

BT publishes a dedicated retail-estate page covering managed SD-WAN, real-time surveillance and Wi-Fi, which is credible sector positioning, but no named retail customer or quantified deployment was found to support it.

Gaps and unknowns: No named UK or international retailer found using BT's SD-WAN/SASE for retail. Payment/PCI segmentation, POS resilience and seasonal scaling are entirely unevidenced.

Store and branch connectivity

Partial

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Not found

SaaS and cloud application access

Not found

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Not found

Internet and 4G/5G failover

Not found

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Partial

Security policy consistency

Not found

Threat protection and secure web access

Not found

Network and application visibility

Not found

Managed operations

Not found

Sources (1)

• RET-004AcceptedProvider-authoredProvider industry page

  BT: Connecting your retail estate and ecosystem

  Named retailer:

  Not named

  Named service:

  BT managed SD-WAN with dashboard

  Countries, regions:

  United Kingdom

  Outcome:

  Not stated (industry page, no case metrics)

  We're at the forefront of empowering retailers with cutting-edge solutions, offering a comprehensive suite of digital services, including our managed SD-WAN and dashboard solutions, real-time surveillance, and fast, reliable Wi-Fi

  BT's own retail-sector page describes managed SD-WAN with a monitoring dashboard, real-time surveillance (camera) and Wi-Fi for retailers, partnered with Cisco, VMware and Nokia; no named customer or outcome given.

  Does not prove: No named retailer or measured outcome; page is generic sector positioning, not a case study.

  business.bt.com · Checked 10 Sept 2026 · Supports: Edge, IoT and camera connectivity, Store and branch connectivity

Check Point on the marketplace · Reviewed 15 Sept 2026 by Harry Yelland

Check Point publishes generic retail-sector SASE content covering self-checkout, kiosks, POS and IoT attack-surface risk, but no named retail customer or deployment was found.

Gaps and unknowns: No named retailer evidence at all. The 'Five Reasons' blog series confirms retail is a served vertical for Quantum SD-WAN but gives no customer, site count or outcome. Re-searched 2026-09-15 with segment-specific terms - same result, only generic product/reseller marketplace content found. Genuine, twice-confirmed zero.

Store and branch connectivity

Not found

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Not found

SaaS and cloud application access

Not found

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Not found

Internet and 4G/5G failover

Not found

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Not found

Security policy consistency

Partial

Threat protection and secure web access

Partial

Network and application visibility

Not found

Managed operations

Not found

Sources (1)

• RET-007AcceptedProvider-authoredProvider blog

  Five Reasons Retail Chains Can't Ignore SASE

  Named retailer:

  Not named

  Named service:

  Check Point SASE / Quantum SD-WAN

  Countries, regions:

  Not stated

  Outcome:

  Not stated (no case metrics; generic vertical positioning)

  SASE protects this expanding attack surface by monitoring traffic, blocking malicious files, and preventing unauthorized access

  Check Point's own blog frames SASE as protecting the retail attack surface (POS, kiosks, IoT sensors, remote staff) but names no customer or quantified deployment.

  Does not prove: No named customer anywhere in Check Point's retail-facing content found; cannot move capabilities past Partial on this basis.

  blog.checkpoint.com · Checked 10 Sept 2026 · Supports: Threat protection and secure web access, Security policy consistency

HPE Aruba EdgeConnect on the marketplace · Reviewed 15 Sept 2026 by Harry Yelland

HPE Aruba EdgeConnect has detailed retail-oriented product marketing (VLAN segmentation for POS, guest Wi-Fi, Aruba Central for hundreds of locations) but no named retail customer was found after two searches. RET-019 re-verified live 2026-09-11 and upgraded from Needs review to Accepted - the page is genuine and current, but still names no customer, so Store and branch connectivity correctly stays Partial rather than Proven.

Gaps and unknowns: No named retailer found for EdgeConnect SD-WAN or SASE in a retail context. All retail capabilities beyond generic product positioning remain unevidenced. Re-searched 2026-09-15 with segment-specific terms - same result, only generic product pages and one unrelated 'Power Solutions Manufacturer' case found. Genuine, twice-confirmed zero.

Store and branch connectivity

Partial

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Not found

SaaS and cloud application access

Not found

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Not found

Internet and 4G/5G failover

Not found

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Not found

Security policy consistency

Not found

Threat protection and secure web access

Not found

Network and application visibility

Not found

Managed operations

Not found

Sources (1)

• RET-019AcceptedProvider-authoredProvider solution page

  Retail Solution Overview (securewirelessworks.com / Aruba retail page)

  Named retailer:

  Not named

  Named service:

  HPE Aruba Networking EdgeConnect SD-WAN with Aruba Central

  Countries, regions:

  Not stated

  Outcome:

  Not stated (no named case, no metrics)

  Manage hundreds of locations with one solution. Discover how Aruba Central can help you improve operations, deliver services faster, and enhance shopping

  Re-verified live 2026-09-11 - page content unchanged: a partner-hosted Aruba retail solutions page positioning EdgeConnect SD-WAN and Aruba Central for managing hundreds of retail locations. Confirmed genuine and current, but still no named customer or outcome, so this remains supporting evidence only, not deployment proof, per evidence rule 3.

  Does not prove: Generic partner/reseller marketing page, not a named customer case study - Accepted as a genuine, live, current source, but graded Partial (not Proven) on the capability it supports, per evidence rule 3.

  securewirelessworks.com · Checked 11 Sept 2026 · Supports: Store and branch connectivity

Virgin Media O2 Business on the marketplace · Reviewed 10 Sept 2026 by Harry Yelland

Virgin Media O2 Business has a documented retail-sector go-to-market strategy (per an Analysys Mason analyst report) and offers managed SD-WAN via Versa Networks/Cisco Meraki/Fortinet/VeloCloud, but no named retail customer or case study was found. RET-037 re-verified live 2026-09-11 (abstract wording confirmed word-for-word) and upgraded from Needs review to Accepted - the full report stays behind a paywall, so Store and branch connectivity correctly stays Partial rather than Proven.

Gaps and unknowns: No named retailer evidence at all for Virgin Media O2 Business. Every capability beyond generic SD-WAN product positioning is unevidenced.

Store and branch connectivity

Partial

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Not found

SaaS and cloud application access

Not found

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Not found

Internet and 4G/5G failover

Not found

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Not found

Security policy consistency

Not found

Threat protection and secure web access

Not found

Network and application visibility

Not found

Managed operations

Not found

Sources (1)

• RET-037AcceptedIndependentIndependent analyst report

  Virgin Media O2 Business: enterprise proposition for the retail sector

  Named retailer:

  Not named

  Named service:

  Virgin Media O2 Business managed SD-WAN (Versa Networks default; also Cisco Meraki, Fortinet, VeloCloud)

  Countries, regions:

  United Kingdom

  Outcome:

  Not stated (report is paywalled; only the abstract/summary was reviewed)

  Virgin Media O2 serves business customers in the UK. It is developing a range of vertical market propositions to strengthen its go-to-market strategy for fixed network services.

  Re-verified live 2026-09-11 - the public abstract wording is unchanged and confirmed word-for-word against the live page. The full report (and any named case detail) remains behind an Analysys Mason paywall, so this stays supporting evidence of a retail go-to-market strategy, not proof of a named deployment.

  Does not prove: Only the publicly visible abstract has been read; the full USD549 report sits behind a paywall. Accepted as a genuine, live, independent source, but graded Partial (not Proven) since no named customer or capability detail is accessible.

  analysysmason.com · Published 21 Oct 2024 · Checked 11 Sept 2026 · Supports: Store and branch connectivity

Aryaka on the marketplace · Reviewed 10 Sept 2026 by Harry Yelland

The one piece of Aryaka retail evidence found (an unnamed 200+ site US retail win) is no longer live - the case page now returns a 404 - so it has been rejected rather than counted. Only generic retail marketing copy remains, which does not name a customer or a capability.

Gaps and unknowns: No verifiable retail evidence currently exists for Aryaka. The 200+ site US retail case that supported Store/branch connectivity and Multi-site deployment has gone offline since it was first checked (confirmed 404 on re-verification) and has been downgraded from Accepted to Rejected. Every retail capability is therefore Not found pending a fresh source. Supporting source IDs cleared on 2026-09-11 - RET-001 (Rejected) and RET-002 (Needs review) were listed for documentation but don't back any Proven or Partial capability, which was tripping the QA check on an otherwise honestly-researched Not-found result.

Store and branch connectivity

Not found

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Not found

SaaS and cloud application access

Not found

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Not found

Internet and 4G/5G failover

Not found

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Not found

Security policy consistency

Not found

Threat protection and secure web access

Not found

Network and application visibility

Not found

Managed operations

Not found

Sources (2)

• RET-002AcceptedProvider-authoredProvider marketing

  Aryaka Enables the Future of the Retail Customer Experience

  Named retailer:

  Not named

  Named service:

  Aryaka managed SD-WAN and SASE

  Countries, regions:

  Not stated

  Outcome:

  Not stated (whitepaper is promotional, no named customer)

  Aryaka's managed SD-WAN and SASE enables retailers to confidently deploy a next-generation experience

  Generic retail whitepaper positioning Aryaka's managed SD-WAN and SASE for front-of-store and back-end retail use cases; no named customer or quantified outcome.

  aryaka.com · Checked 10 Sept 2026 · Supports: Store and branch connectivity

• RET-001RejectedProvider-authoredProvider case study

  Aryaka Demonstrates Again that Large-Scale, U.S.-only Retail Projects can be Realized at Low Cost, Even Against Telcos and Other Competitors

  Named retailer:

  Not named

  Named service:

  Aryaka SD-WAN (ANAP) + AppAssure

  Countries, regions:

  United States

  Outcome:

  Won the account against telco incumbents; URL-based security rules enabled via AppAssure on the ANAP

  Can win large scale, price-sensitive retail accounts (200+ sites)

  Aryaka's own case page previously stated it won a 200+ site, single-country (USA) retail SD-WAN deal against telco competition. Re-verification on 2026-09-10 found the page now returns a 404 (Page Not Found) - Aryaka appears to have removed or restructured this content.

  Does not prove: Page confirmed dead (404) on automated re-verification; the claim can no longer be checked against a live source and should not be counted as evidence unless a new URL for the same case is found.

  aryaka.com · Checked 10 Sept 2026 · Supports: Multi-site deployment and zero-touch provisioning, Store and branch connectivity

Colt Technology Services on the marketplace · Reviewed 10 Sept 2026 by Harry Yelland

No named retail customer was found for Colt Technology Services; only generic WAN/SD-WAN industry-award content (Gartner Peer Insights, Forrester Wave) was located.

Gaps and unknowns: Every retail capability is unevidenced. Colt's SD-WAN awards and Versa partnership are real but sector-agnostic.

Store and branch connectivity

Not found

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Not found

SaaS and cloud application access

Not found

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Not found

Internet and 4G/5G failover

Not found

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Not found

Security policy consistency

Not found

Threat protection and secure web access

Not found

Network and application visibility

Not found

Managed operations

Not found

Expereo on the marketplace · Reviewed 10 Sept 2026 by Harry Yelland

No named retail customer or case study was found for Expereo; only general SD-WAN market growth and M&A news (e.g. Breeze Networks acquisition) was located.

Gaps and unknowns: Every retail capability is unevidenced for Expereo specifically.

Store and branch connectivity

Not found

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Not found

SaaS and cloud application access

Not found

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Not found

Internet and 4G/5G failover

Not found

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Not found

Security policy consistency

Not found

Threat protection and secure web access

Not found

Network and application visibility

Not found

Managed operations

Not found

Open Systems on the marketplace · Reviewed 10 Sept 2026 by Harry Yelland

No named retail customer was found for Open Systems; only channel-partnership and M&A news (Swiss Post acquisition, Allnet DACH partnership) and analyst recognition were located.

Gaps and unknowns: Every retail capability is unevidenced for Open Systems.

Store and branch connectivity

Not found

Payment and PCI DSS segmentation

Not found

Guest and corporate Wi-Fi separation

Not found

POS and payment resilience

Not found

SaaS and cloud application access

Not found

Third-party and supplier access

Not found

Remote worker and support access

Not found

Multi-site deployment and zero-touch provisioning

Not found

Internet and 4G/5G failover

Not found

Seasonal and temporary-site scaling

Not found

Edge, IoT and camera connectivity

Not found

Security policy consistency

Not found

Threat protection and secure web access

Not found

Network and application visibility

Not found

Managed operations

Not found