SD-WAN · SASE · Security-First
Forcepoint FlexEdge SD-WAN & SASE Review
Forcepoint is a US-based cybersecurity company headquartered in Austin, Texas, delivering security-first SD-WAN and SASE capabilities through its FlexEdge Secure SD-WAN platform. Unlike vendors that bolt security onto existing SD-WAN products, Forcepoint builds its SD-WAN with security architecture — multi-layer inspection, intrusion prevention, DNS sinkholing, and ZTNA — integrated from the ground up. When combined with Forcepoint ONE SSE, FlexEdge delivers a full SASE architecture. Forcepoint targets enterprise and government customers with complex security and compliance requirements, particularly in defence, financial services, and critical infrastructure.
Quick Facts — Forcepoint
| Category | Detail |
|---|---|
| Full company name | Forcepoint LLC |
| Headquarters | Austin, Texas, USA |
| Founded | 2016 (from merger of Websense and Raytheon Cyber Products) |
| Primary product | FlexEdge Secure SD-WAN; Forcepoint ONE SSE (SASE when combined) |
| Architecture | Hardware-based SD-WAN appliances (FlexEdge series) with cloud management; SASE via Forcepoint ONE SSE integration |
| Global PoPs | Forcepoint ONE SSE provides cloud-delivered security globally; SD-WAN is appliance-based |
| UK presence | UK deployments supported via channel; UK government presence |
| SASE capability | Full when combining FlexEdge SD-WAN and Forcepoint ONE SSE |
| SD-WAN capability | Full — FlexEdge Secure SD-WAN with integrated multi-layer security |
| Target market | Enterprise and government; particularly defence, financial services, and critical infrastructure |
| UK channel | Channel partner model; UK government and enterprise resellers |
| Gartner position | Recognised in Gartner Peer Insights for SD-WAN; no current MQ position in SD-WAN or SASE Platforms |
What Netify Thinks
Forcepoint's FlexEdge Secure SD-WAN is distinguished by its security-first design philosophy. Where most SD-WAN vendors treat security as an add-on module, Forcepoint integrates network security controls — multi-layer inspection, IDS/IPS, anti-evasion technology, and ZTNA — directly into the SD-WAN appliance. For government and defence organisations that cannot separate network and security functions, this integrated approach is a genuine differentiator.
Strengths
- Security-first SD-WAN design: FlexEdge integrates multi-layer inspection, intrusion prevention, DNS sinkholing, and anti-evasion technology natively into the SD-WAN appliance — not as a separate security add-on. This matters for organisations that cannot accept any gap between network access and security enforcement.
- Government and defence heritage: Forcepoint has deep roots in the government and defence market through its Raytheon parentage (now Francisco Partners ownership). This brings clearance-relevant deployment experience, classified network support, and government procurement framework presence that most SD-WAN vendors lack.
- Zero-knowledge distributed architecture: FlexEdge's SD-WAN Manager enables a zero-knowledge architecture, automatically creating and terminating connections on demand without requiring persistent site-to-site tunnel management — reducing attack surface.
- Full SASE with Forcepoint ONE: When FlexEdge SD-WAN is combined with Forcepoint ONE SSE (SWG, CASB, ZTNA, FWaaS), the result is a full SASE architecture that maintains the security-first posture across both branch connectivity and cloud access.
Weaknesses
- Not in Gartner SD-WAN or SASE MQ: Forcepoint does not currently hold a position in the Gartner Magic Quadrant for either SD-WAN or SASE Platforms. Buyers using Gartner MQ as a primary screening tool will need to evaluate Forcepoint separately from the shortlisted MQ vendors.
- Smaller market footprint: Forcepoint's SD-WAN market share is significantly smaller than Cisco, Fortinet, or Palo Alto Networks. Channel partner availability, particularly outside North America and government-focused markets, is more limited.
- Two-product SASE model: Full SASE requires both FlexEdge SD-WAN and Forcepoint ONE SSE — two separately licensed and managed products. While integration is designed to work together, this is not a single-pane-of-glass SASE platform in the way Cato Networks or FortiSASE are.
- Less relevant for non-regulated commercial enterprise: Forcepoint's differentiation is most relevant for security-intensive verticals (government, defence, financial services). Standard commercial enterprises may find the security-first architecture adds cost and complexity that exceeds their requirements.
Verdict: Forcepoint FlexEdge is best suited to government, defence, financial services, and critical infrastructure organisations with stringent security and compliance requirements that need security controls integrated into the SD-WAN edge — not bolted on afterwards. It is less well suited to standard commercial enterprises where simpler and more widely deployed SD-WAN platforms would suffice.
Pros & Cons
Pros
- Multi-layer security (IDS/IPS, anti-evasion, DNS sinkholing) natively integrated into SD-WAN appliance
- Zero-knowledge distributed architecture — connections created and terminated on demand
- Government and defence heritage — clearance-relevant deployment experience
- Full SASE when combined with Forcepoint ONE SSE (SWG, CASB, ZTNA, FWaaS)
- MTBF of 150,000 hours on FlexEdge hardware — designed for durability
- ZTNA and private access built in from the ground up
Cons
- Not in Gartner MQ for SD-WAN or SASE Platforms
- Smaller market footprint than major SD-WAN vendors — limited channel breadth
- Full SASE requires two separate products (FlexEdge + Forcepoint ONE SSE)
- Less relevant for non-regulated commercial enterprise — complexity may exceed standard requirements
- Limited MSP channel compared to Barracuda or Cato
Frequently Asked Questions
What is Forcepoint FlexEdge Secure SD-WAN?
Forcepoint FlexEdge Secure SD-WAN is a security-first SD-WAN platform from Forcepoint, combining SD-WAN functionality with integrated multi-layer network security including IDS/IPS, DNS sinkholing, anti-evasion technology, and Zero Trust Network Access. When combined with Forcepoint ONE SSE (Security Service Edge), it delivers a full SASE architecture for organisations with stringent security and compliance requirements.
How much does Forcepoint FlexEdge cost?
Forcepoint does not publish standard list pricing. Costs depend on the FlexEdge appliance model, the number of sites, licensing tier, and whether Forcepoint ONE SSE is included for full SASE. The FlexEdge 350 series (model 352) is a mid-range branch appliance — hardware costs plus annual support typically run in the low-to-mid thousands of pounds per site. Full SASE deployments with Forcepoint ONE SSE carry additional per-user licensing costs. UK organisations should request pricing via a Forcepoint-authorised UK reseller.
Is Forcepoint suitable for UK deployments?
Yes, particularly for UK government and defence organisations. Forcepoint has UK government presence through its heritage in classified and sensitive network environments. UK commercial deployments are supported via the channel partner network. Forcepoint ONE SSE provides cloud-delivered security globally, including UK-region coverage. Compliance certifications relevant to UK regulated industries are available — contact Forcepoint for current certification status for your specific sector.
How does Forcepoint FlexEdge differ from Cisco Meraki SD-WAN?
The fundamental difference is security philosophy. Forcepoint FlexEdge integrates security natively into the SD-WAN appliance and is designed for security-intensive environments where network access and security enforcement cannot be separated. Cisco Meraki is designed for ease of use and rapid deployment, with security available as an add-on via Cisco Umbrella and Cisco Secure Connect. Meraki is better suited to distributed commercial enterprise; Forcepoint FlexEdge is better suited to government, defence, and critical infrastructure.
Include Forcepoint in your SASE RFP
Use the Netify RFP Builder to build a structured, vendor-neutral SASE RFP and receive competitive bids.
Build Your SASE RFP