What SD-WAN and SASE requirements apply to retail organisations?

Retail SD-WAN deployments must address PCI DSS 4.0.1 compliance, distributed store connectivity, peak trading resilience, and transaction continuity across high street and online operations. SASE adds consistent security policy enforcement across all store locations.

How do I choose an SD-WAN vendor for a retail network?

Retail SD-WAN procurement should prioritise PCI DSS compliance support, store connectivity uptime, multi-site management, and peak load resilience. Use the Netify Retail SD-WAN RFP Framework to evaluate 30+ vendors against retail-specific criteria.

What SD-WAN and SASE requirements apply to manufacturing organisations?

Manufacturing SD-WAN deployments must address OT/IT network convergence, IEC 62443 compliance, production floor segmentation, and multi-site connectivity across factories and distribution sites. SASE adds Zero Trust access controls for remote OT monitoring and third-party vendor access.

How do I choose an SD-WAN vendor for a manufacturing network?

Manufacturing SD-WAN procurement should prioritise OT protocol support, production network segmentation, IEC 62443 alignment, and resilient multi-site WAN. Use the Netify Manufacturing SD-WAN RFP Framework to evaluate 30+ vendors against these criteria.

How do I compare SD-WAN vendors in the UK?

The Netify UK SD-WAN Comparison tool scores 30+ SD-WAN and SASE vendors using an algorithmic methodology covering technical capability, UK market presence, deployment complexity, and support quality. Results are vendor-neutral and updated for 2026.

What is the best SD-WAN provider in the UK?

There is no single best SD-WAN provider for all UK organisations. The right choice depends on your site count, existing infrastructure, security requirements, and budget. The Netify SD-WAN Comparison scores vendors across these criteria to help you identify the best fit for your specific needs.

How much does SD-WAN cost in the UK?

SD-WAN pricing in the UK varies significantly by vendor, deployment model, site count, and bandwidth requirements. Use the Netify SD-WAN Comparison and RFP Builder to gather structured pricing from multiple vendors and compare on a like-for-like basis.

What is an SD-WAN RFP?

An SD-WAN RFP is a structured procurement document used by enterprise IT and network teams to evaluate SD-WAN vendors and managed service providers against standardised technical, commercial, and operational criteria. The Netify SD-WAN RFP Framework provides a vendor-neutral evaluation methodology.

What should an SD-WAN RFP include?

An SD-WAN RFP should cover WAN architecture and underlay requirements, application performance and QoS, Zero Trust and security integration, deployment model, multi-site management, SLA commitments, and commercial terms. The Netify framework standardises these criteria across 30+ vendors.

How many SD-WAN vendors should you include in an RFP?

The Netify SD-WAN RFP Framework recommends shortlisting 3-5 vendors for a structured RFP process. Netify's marketplace provides access to 30+ curated SD-WAN and SASE vendors with algorithmic matching to identify the best fit for your requirements.

A SASE RFP is a structured procurement document used by enterprise IT teams to evaluate Secure Access Service Edge vendors against standardised technical, security, and commercial criteria. The Netify SASE RFP Framework provides a comprehensive evaluation methodology.

How many vendors should you include in a SASE RFP?

The Netify SASE RFP Framework recommends inviting 3-5 vendors to respond to a structured RFP, allowing meaningful comparison without overwhelming evaluation teams.

What should a SASE RFP cover?

A comprehensive SASE RFP should evaluate vendors across architecture, security integration, deployment model, compliance alignment, commercial terms, and ongoing support using a standardised framework.

Zscaler SSE & SASE Review | Netify Marketplace

SSE · SASE · Zero Trust

Zscaler SSE & SASE Review

Zscaler is a cloud-native cybersecurity company headquartered in San Jose, California, and listed on Nasdaq (ZS). Founded in 2007, Zscaler operates the Zero Trust Exchange — the world's largest inline cloud security platform, distributed across 160+ data centres globally. Unlike vendors that bolt security onto network hardware, Zscaler was built exclusively as a cloud proxy, inspecting all traffic — including encrypted SSL — without on-premises appliances. The platform is primarily positioned as a Security Service Edge (SSE) solution with SD-WAN delivered via third-party vendor integrations. Zscaler is best suited to large enterprises with distributed workforces, complex compliance requirements, and existing investment in cloud-first infrastructure.

SSE Market Leader

160+ Global DCs

Zero Trust Exchange

San Jose, CA

Quick Facts — Zscaler

Category	Detail
Full company name	Zscaler, Inc.
Headquarters	San Jose, California, USA
Founded	2007
Primary product	Zero Trust Exchange (SSE platform)
Architecture	Cloud-native (proxy-based, no on-premises appliances)
Global data centres	160+ (as of 2025)
UK presence	London (EMEA HQ, The Royal Exchange); multiple UK PoPs within the global network
SASE capability	Partial — SSE Leader; SD-WAN requires third-party integration (e.g. Cisco Catalyst SD-WAN, VMware VeloCloud, HPE Aruba EdgeConnect)
SD-WAN capability	Partial (via partner ecosystem only; no native SD-WAN)
Target market	Mid-market to large enterprise; not recommended for SMEs
UK channel	Direct sales + partner/reseller ecosystem (available on G-Cloud)
Gartner position (SSE)	Leader — Gartner Magic Quadrant for Security Service Edge, 2025 (highest 'Ability to Execute' of all vendors)
Gartner position (SASE)	Visionary — Gartner Magic Quadrant for SASE Platforms, 2025

What Netify Thinks

Zscaler has been named a Leader in the Gartner Magic Quadrant for Security Service Edge every year since the report's inception (2022–2025), ranking highest on the 'Ability to Execute' axis in 2025. This reflects genuine market traction — Zscaler is the dominant cloud-native SSE platform for large enterprises pursuing a zero trust architecture.

Strengths

SSE market leadership: Zscaler has been named a Leader in the Gartner Magic Quadrant for Security Service Edge every year since the report's inception (2022–2025), ranking highest on the 'Ability to Execute' axis in 2025.
Global scale with strong UK presence: Operating 160+ data centres worldwide, Zscaler has established London as its EMEA headquarters (The Royal Exchange, 2025) and holds UK Cyber Essentials accreditation. UK enterprises benefit from low-latency access to multiple UK PoPs.
Zero Trust depth: ZIA and ZPA together replace both legacy web proxies and VPNs in a single cloud-delivered platform. The inside-out connectivity model means applications are never exposed to the internet — a meaningful architectural advantage over firewall-and-VPN approaches.

Weaknesses

No native SD-WAN: Zscaler does not provide its own SD-WAN. Organisations requiring a full SASE stack must procure an SD-WAN separately from a third-party vendor. This adds procurement complexity and a potential gap in unified management.
Management complexity and cost: ZIA and ZPA are managed through separate consoles (plus a third for the Client Connector), creating operational overhead. Enterprise contracts frequently involve 7% annual uplift on renewal, and overall licensing costs are high relative to competitors.
Not suited to SMEs or legacy environments: Zscaler is explicitly enterprise-grade. Small businesses or organisations with significant legacy application dependencies will find the complexity of deployment and management disproportionate to their needs.

Verdict: Zscaler is the strongest choice for large UK enterprises undertaking cloud-first transformation who need proven SSE capability, deep ZTNA, and the ability to integrate security across a distributed, mobile workforce — provided they already have or are procuring a separate SD-WAN solution.

Pros & Cons

Pros

SSE market leader: ranked highest on 'Ability to Execute' in the Gartner MQ for SSE 2025
160+ global data centres ensure low-latency inspection close to the user
London EMEA HQ (2025) and UK Cyber Essentials accreditation — strong local presence
ZPA replaces VPN without exposing applications to the internet (inside-out connectivity)
Native integrations with AWS, Azure, and Google Cloud, plus Microsoft 365 optimisation
Comprehensive compliance coverage including GDPR, FedRAMP High, ISO 27001, PCI DSS, and HIPAA
Red Canary acquisition (2025) adds MDR and AI-driven threat intelligence capability

Cons

No native SD-WAN: a separate vendor is required, adding procurement complexity and cost
Separate management consoles for ZIA, ZPA, and Client Connector — no single-pane-of-glass management
High licensing costs with reported 7% annual renewal uplift; unsuitable for SMEs
ZPA availability limited to approximately 50 of 160+ global PoPs, which can affect latency for private app access
Complex initial configuration and ongoing management requires experienced security staff
Reported variability in mobile client connector performance on iOS and Android devices

Frequently Asked Questions

What is Zscaler?

Zscaler, Inc. (Nasdaq: ZS) is a cloud-native cybersecurity company founded in 2007 and headquartered in San Jose, California. It operates the Zero Trust Exchange — a cloud-delivered SSE platform distributed across 160+ data centres globally — which secures user, device, and application traffic without on-premises hardware, using a proxy-based architecture that inspects all connections inline, including encrypted SSL traffic.

How much does Zscaler cost in the UK?

Zscaler does not publish standard pricing and all contracts are negotiated. Based on publicly available information and G-Cloud procurement data, indicative UK pricing is as follows: ZIA Essentials approximately $72–$100 per user/year; ZIA Business approximately $100–$200 per user/year; ZIA Transformation approximately $200–$375 per user/year; ZPA (add-on) approximately $72–$150 per user/year; typical enterprise (1,000+ users) $100,000–$500,000+ per year total contract value. Prices are USD-denominated. UK buyers typically procure via Zscaler-authorised resellers or through G-Cloud. Annual renewal uplift of approximately 7% is commonly reported.

Is Zscaler a good choice for UK deployments?

Yes, for large enterprises. Zscaler has established London as its EMEA headquarters (The Royal Exchange, opened 2025), and holds UK Cyber Essentials certification. UK users connect to PoPs within or close to the UK, reducing latency for internet and SaaS-bound traffic. Zscaler also holds FedRAMP High, C5, IRAP, GDPR, and ISO 27001/27701 certifications, making it suitable for regulated UK sectors including financial services, healthcare, and central government. UK buyers can also procure via G-Cloud, simplifying public sector procurement.

How does Zscaler compare to Palo Alto Networks, Netskope, and Cloudflare One?

All four are SSE/SASE vendors but with different strengths. Zscaler is best for large enterprise SASE and SSE. Palo Alto Networks (Prisma) offers integrated SD-WAN and SASE in one platform. Netskope is strong for data-centric security and CASB. Cloudflare One is a cost-effective mid-market option with a cloud-native Anycast architecture and Magic WAN for partial SD-WAN capability.

	Zscaler	Palo Alto Networks (Prisma)	Netskope	Cloudflare One
Best for	Large enterprise SASE & SSE	Integrated SD-WAN + SASE	Data-centric security / CASB	Mid-market / cost-conscious buyers
Gartner position	Leader, SSE MQ 2025	Leader, SSE MQ 2025	Leader, SSE MQ 2025	Challenger, SSE MQ 2025
SD-WAN native?	No (third-party required)	Yes (Prisma SD-WAN)	No (third-party required)	Partial (Magic WAN)
Architecture	Cloud-native proxy	Cloud-native + NGFW	Cloud-native proxy	Cloud-native (Anycast)
UK suitability	Strong — London EMEA HQ, multiple UK PoPs	Strong — regional offices and PoPs	Strong — UK PoPs available	Good — London PoPs

Include Zscaler in your SASE RFP

Use the Netify RFP Builder to build a structured, vendor-neutral SASE RFP and receive competitive bids.

Build Your SASE RFP