ITMAP for SASE Platforms

SASE Platforms are subscription services that join wide-area networking and network security into one product, delivered from points of presence the vendor operates and controlled through a single policy engine, console and data store. The market exists because enterprises with dispersed branches, remote staff and cloud-hosted applications no longer want to run separate WAN and security estates that must be stitched together.

Capability scope: a vendor-owned WAN edge (SD-WAN appliances, virtual edges or a private backbone with branch on-ramps); cloud-delivered secure web access, SaaS visibility and control, zero trust access to private applications, and firewall inspection of all ports; inline data protection; and a shared identity, device-posture and logging layer that applies the same rule to a user at home, in a branch or on cellular.

Evaluation criteria: how much of the stack runs on one codebase rather than acquired parts joined at the console; the number, capacity and consistency of enforcement locations, including in-country options for data residency; performance under full inspection; the effort to deploy, change and troubleshoot policy; and pricing transparency across modular and bundled purchase.

Buyers: CIOs, network architects and CISOs at mid-sized and large enterprises retiring MPLS, VPN concentrators and branch firewalls.

Exclusions: security-only cloud services without an owned WAN edge; SD-WAN-only vendors that rely on a partner for security; firewall vendors whose SD-WAN is a feature of on-premises appliances rather than part of a cloud-managed service; telecom carriers and managed service providers reselling another vendor’s platform; standalone ZTNA, browser-security and DNS-filtering tools; and the hyperscalers.

Vendors and products in this market

  • Aryaka — Aryaka Unified SASE as a Service
  • Barracuda Networks — Barracuda SecureEdge
  • Cato Networks — Cato SASE Cloud Platform
  • Check Point Software — Harmony SASE with Quantum SD-WAN
  • Cisco — Cisco SASE (Cisco Secure Access with Catalyst SD-WAN)
  • Cloudflare — Cloudflare One (with Magic WAN)
  • Ericsson (Cradlepoint) — Ericsson NetCloud SASE
  • Forcepoint — Forcepoint ONE Data-First SASE with FlexEdge Secure SD-WAN
  • Fortinet — FortiSASE with Fortinet Secure SD-WAN
  • Hewlett Packard Enterprise — HPE Aruba Networking SASE (HPE Aruba Networking SSE with EdgeConnect SD-WAN)
  • Netskope — Netskope One SASE (with Netskope One SD-WAN)
  • Palo Alto Networks — Prisma SASE (Prisma Access with Prisma SD-WAN)
  • Sangfor Technologies — Sangfor Access Secure
  • Swiss Post (Open Systems) — Open Systems Managed SASE
  • Versa Networks — VersaONE Universal SASE Platform
  • Zscaler — Zscaler Zero Trust SASE (Zero Trust Exchange with Zero Trust SD-WAN)
  • iboss — iboss Zero Trust SASE

Explore the interactive vendor map and product comparisons. Registration and profile requirements apply to protected features, reports and intelligence.

Browse all markets