An Exclusive Comparison Guide to the top/best UK, US and Global SD WAN providers & vendors with inclusion of SASE security. And access our free tools which Netify have created to help IT decision makers with their SD WAN vendor research.
Create & save shortlists, filter features and compare vendors.
Created for IT decision makers. Login to our market network for realtime SD WAN feature comparison or complete our quick quiz and Netify will instantly display Software-WAN vendors which fit your needs.
GET STARTEDAuthor: Robert Sturt
Send me an Email
UK: 01603-273777 US: 209-392-5505
Last Updated: 9.11.2020
Welcome to the Netify 2020 SD WAN & SASE top vendor analysis. Our longform content is a companion to the SD WAN market network and quick assessment tool which we have created to help IT teams conduct Software WAN vendor selection research. The Netify team have created both tools with the specific intent of helping IT teams to understand which solutions are a good fit for their business.
The Netify market network is at the core of our business value. With one free login, users are able to access our SD WAN ecosystem which enables the creation and saving of shortlists, realtime vendor feature analysis, side by side solution comparison with detailed breakdown of capability.
An alternative to the Netify market network is the SD WAN quick assessment quiz tool which will ask 10 questions to ascertain your high level business needs. Our logic will identify a handful of SD WAN vendors which meet your initial needs with instant results displayed after you answer the last question.
With both the SD WAN market network login and quick assessment, users can retrieve your local sales contact and even book Zoom demos.
I hope you find the content valuable but as always, reach out to me with any questions regarding vendor selection. In addition, I will be making updates throughout 2021 to ensure the content remains relevant. If you do not wish to create a Netify account or use the SD WAN quick assessment, you can jump straight to the vendor list via the Table of Contents and there's a quick reference table at the bottom of this email.
Check out the free tools now →A Vendor Briefing is a research tool for IT teams, and an opportunity to learn about specific SD WAN products, services and business strategies. Alternatively, Netify can provide a general overview of market leading solutions. During a Vendor Briefing, the flow of information covers why certain vendors fit specific business needs. IT teams may ask questions of clarification during a briefing session.
The Netify market network offers real-time feature filters to help understand which vendors offer specific high level business needs. Examples include backbone type, cloud access to AWS, Azure and Google, and SASE security through to Gartner rating.
The vendor list offers options to learn more about each solution, create comparisons, save to shortlists or book a Zoom demo. The vendor page lists all of the partners available to Netify clients from leading brands that your team will be aware of through to relatively new SD WAN vendor solutions. Scroll through each vendor to learn about the current Netify market network partners.
Check out the free tools now →To help you find the top SD WAN options that will fit your needs, complete our short quiz. After you answer just a few questions, we'll provide a handful of recommended SD WAN vendors for you and automatically retrieve sales contact or book Zoom demos of capability.
The Netify team have created 10 questions designed to understand your initial high level business needs. When each question is displayed, we also include an overview of why we are asking to help users understand the implications of their answers.
Vendors will be instantly displayed once your questions have been answered.
Check out the free tools now →IT teams do not always know where to look outside of a handful of vendors, nor can they be sure that the vendor is a good fit for their business needs.
Netify is an SD WAN & SASE security n-squared market network, our service is based on our ability to connect customers with vendors via channel relationships. It would be almost impossible for IT teams to research and form relationships with the same level of vendors, service providers, integrators and distributers.
Learn more →Silver Peak offer pure Internet VPN with SASE via Zscaler.
Login to retrieve local sales contact →
Silver Peak are a channel only vendor offering built in WAN acceleration and SASE integration via a partnership with Zscaler. One of an elite set of Gartner leaders, the solution is based on end to end Internet with no private backbone or public gateways.
With in-built application acceleration, the Silver Peak solution is firmly based around creating an SD WAN feature-set across data delivery via comprehensive cloud management portal capability, sophisticated orchestration with zero touch deployment and SaaS application optimisation.
Products: Unity EdgeConnect, Unity Orchestrator, Unity Boost.
Notes: HPE has acquired Silver Peak in 2020.
Login to retrieve local sales contact →
Cato Networks lead with two clear areas of value across SASE security which is built into their WAN edge capability and their private global backbone which spans 30+ global PoPs. While Cato Networks are relatively new (founded 2015), their solution is built on previous knowledge brought to their proposition by Shlomo Kramer, founder of Checkpoint.
With comprehensive SD WAN features, cloud security and support for mobile users, Cato are a great option for companies looking to transform all elements of their WAN capability. This is especially true for businesses migrating from MPLS VPN services where they are not ready to make the complete transition to an Internet only deployment.
Products: Cloud Optimisation, WAN Optimisation, NGFW (Next-Generation Firewall), Secure Web Gateway, Advanced Threat Protection, Cloud and Mobile Security.
Strong background and experience across security.
Login to retrieve local sales contact →
Open Systems is a mature company with a complete technology stack designed for the Enterprise WAN. The pitch is based on maturity - their offering is designed to provide the complete unified SD WAN experience. With over 20 years security experience, Open Systems offer SD WAN for businesses above 10+ locations and 1000+ users with typical customers spread across manufacturing, chemicals, pharmaceutical and financial services.
The Open System SD WAN use case meets the needs of requirements which require remote access, cloud and security with advanced threat protection and cyber security risk mitigation using cloud based AI driven monitoring.
Security is at the core of Open Systems approach to SD WAN, their solution capability is built on the MDR platform (Managed Detection and Response) with reporting available via Microsoft Azure. While security features are robust, Open Systems also offer access to dedicated Security Analysts with knowledge across their preferred verticals.
With Open Systems history of Security across every layer of the network, their SD WAN capability is secured at the edge and in the cloud. By delivering next generation security architecture, Open Systems reduce the need for orchestration and management of third-party solutions that stretch IT resources and increase enterprise risk.
Products: SASE, SD WAN, Mobile Entry Point, Managed Detection & Response
Fully managed with global backbone provision.
Login to retrieve local sales contact →
Aryaka is an interesting proposition as their WAN infrastructure is based on an MPLS (multiprotocol label switching) PoP deployment. In a sense, the solution is a software WAN evolution of the MPLS VPN. As a Challenger on the Gartner magic quadrant, they offer 25+ Global POPs, physical hardware and Cloud-based SD WAN controller support.
WAN optimisation is built in to the Aryaka solution which meets the needs of most global businesses. Leading brands are using Aryaka such as Skullcandy, Air China and other notable partners including Microsoft Azure & AWS Cloud.
If your business is reluctant to move away from private based, QoS (Quality of Service) enabled MPLS circuits, Aryaka is worth considering as a good half way networking and security capability. Their solutions also support termination of hybrid WAN connectivity.
Products: Smart Connect (WAN optimisation), Smart CDN (IP and Web app acceleration) and Cloud VPN.
Login to retrieve local sales contact →
VeloCloud offers an alternative to the private backbone infrastructures offered by Cato and Aryaka. The solution connects customers across 2700 public gateways with 130 points of presence (POPs). VMware Edge Network Intelligence offers visibility across network performance by delivering statistics based on user experience as applications traverse the global Internet. With Dell EMC SD-WAN, business is able to deliver built-in LTE 4G/5G to deal with remote users, temporary offices and failover.
Another Gartner leader, VMware have recently announced full SASE / Next Generation Firewall support via partnerships with Menlo Security to deliver secure web gateway (SWG), cloud access service broker (CASB), Data Loss Prevention, sandbox, and remote browser isolation. VeloCloud next generation firewall security is delivered via Zscaler to secure Internet access. Available as single and multi-tenanted deployments for the VMware SASE Platform, the solution is designed to deliver all aspects of SD WAN application performance support with security services. All from one platform to meet the demands of the work-from-anywhere workforce.
Some further key benefits include their application performance improvement over degraded links which also includes delay sensitive apps such as voice and video. The VeloCloud strategy looks very strong over the next 12 months with marketing suggesting intent based WAN features are on the horizon.
Products: VMware SD-WAN Gateways, a cloud-based VMware SD-WAN Orchestrator and a branch platform, VMware SD-WAN Edge.
Palo Alto brings strong SASE security to Cloud Genix.
Login to retrieve local sales contact →
Acquired by Palo Alto. CloudGenix was founded in San Jose back in 2013 with backing by Charles River Ventures, Mayfield, Intel Capital and Bain Capital Ventures. CloudGenix offers a true Software-based WAN solution via their ION (Instant-On Network) centralised control platform.
The Palto Alto SD WAN solution offers the capability to support both Internet and MPLS which meets the demands of network migration (from MPLS) and hybrid networking where private connections are retained at certain sites. CloudGenix app fabric is designed to operate across all connectivity types (we've mentioned MPLS but also 4G, 5G and Broadband). Regardless of the circuit type, intelligent traffic steering, high availability and direct access to Cloud-based services all come together to create a rich Software-based WAN capability. Palo Alto acquired CloudGenix which has created significant SASE capability to their overall portfolio of options.
Products: Next Generation Firewall, SD WAN, Panorama.
Fortinet technology is built on their own ASIC hardware, performance is excellent.
Fortinet have long been recognised as a market leading security vendor. With sophisticated SD WAN and Security orchestration, the business operates across all verticals and business sizes. Founded in 2000, this SD WAN provider caters to customers who are interested in consolidating their physical appliances and branch operations into one vendor.
The proposition from Fortinet very much remains market leading in respect of security but their SD WAN offering appears to be viewed as a secondary proposition. With this said, their SD WAN business has grown to 8000 customers on a global basis. Previously only functioning as a security vendor, Fortinet has now added SD WAN features to their list of appliances.
Fortinet monitors their SD WAN links across packet loss, jitter, and latency by using several different techniques, such as HTTP, TWAP, and ping.
Fortinet support hub and spoke, full mesh, on-demand VPN, and partial mesh. Plus, there are up to 4,000 administrative domains and virtual domains that can be supported. Fortinet ASICs (Application-specific integrated circuits) ensure Fortinet designed solutions not only perform well due to their application specific architecture but are also available at a good price point.
Products: FortiGate® Network Security Platform, FortiManagerTM Centralised Management Platform, FortiAnalyzerTM Centralized Logging & Reporting Solution, FortiSIEMTM Unified Event Correlation and Risk Management Solution, FortiAuthenticatorTM User Identity Management Server.
Login to retrieve local sales contact →
Meraki is without a doubt the most popular vendor when discussing initial requirements with prospective buyers. The products are cost effective and feature-rich offering functions such as endpoint management which is positioning IT teams to share intelligence and enforce policies across the network based on the device status and where the services are located or installed, software and/or users.
One of the newer features is device enrolment which means policy is enforced without even having to handle the actual hardware. WiFi access can be delivered based on device type, users and security compliance.
In short, Cisco Meraki is feature rich with the ability to support/deliver a full stack of connectivity from Security, Switching, WAN and Wireless via a single cloud interface. It is important to note but to take advantage of the Meraki capability, your network ‘needs’ to be Meraki end to end. (Not necessary but advised)
Designed for complex Enterprise requirements.
Login to retrieve local sales contact →
Cisco also owns Viptela, how should you decide on Meraki vs Viptela? The major differentiators revolve around the ability to handle three or more uplinks, WAN multicast and TCP optimisation. The value proposition of Viptela is based on customisation allowing customers to control layers 4-7 of the OSI model.
Viptela is extremely competent at WAN segmentation across both on-premise equipment and also cloud architectures. In other words, if your business is complex and global in nature, Meraki could be viewed as too simplistic to meet the demands of your network architecture requirements. With the above said, Meraki and Viptela do intersect as both are able to adjust traffic routing based on the policies your business decides, they are scalable and offer cellular failover.
Citrix is a Challenger in this Magic Quadrant.
After the main Citrix brand application, their SD WAN appliance is focussed on security, traffic prioritisation, WAN connection failover and connecting SaaS applications. NetScaler offers physical, virtual and cloud products with their management and analytics system - MAS.
The Citrix offering includes both WAN optimisation and stateful packet inspection Firewall. With such a large market share from their core Citrix product, their growth of SD WAN is largely across existing customers. The actual SD WAN product is managed by the same cloud based UI platform.
Vendor solution comparison 1 to 5. (Click the company name for more information)
Vendor | Cisco Meraki | Cisco SD WAN Viptela | Silver Peak | Aryaka | VeloCloud |
WAN architecture | Edge based | Edge based | Edge based | 25 Global PoP backbone | 100+ Global PoP gateways |
Gartner status | Challengers | Challengers | Leaders | Visionaries | Leaders |
Form factor | Physical, cloud (AWS, Azure) | Physical (vEdge, ISR, ASR), virtual, Hyper-V, KVM), Cloud AWS, Azure, Google) | Physical, virtual (VMware, KVM, Cloud (AWS, Azure) | Physical | Physical, virtual (VMware, KVM, Xen), cloud (AWS, Azure) |
Firewall | Advanced | Basic on Viptela hardware, advanced on Cisco hardware | Basic, advanced via partners | Basic, advanced via partners | Basic, advanced via partners |
WAN optimisation | Limited | Yes (add-on to Cisco hardware, not available on vEdge) | Yes, add-on | Yes | No |
Application path selection | None | Yes (add-on to Cisco hardware, not available on vEdge) | SaaS optimisation chooses optimal egress point (via data centre or hub site) | Partnered with AWS & Azure, can manually configure for other cloud/SaaS apps | Yes, VeloCloud has 100+ shared gateways for path optimisation. Providers can build out their own gateways as well |
Elevator pitch | Rich history of networking, value adds such as CCTV | Customisable solution for the larger Enterprise | Good traffic path selection and Broadband treatment | MPLS alternative with VPN access to private PoP locations | Cloud-based service delivery, orchestration, and analytics to create a flexible architecture |
SASE Security | Rich history of networking, value adds such as CCTV | Customisable solution for the larger Enterprise | Good traffic path selection and Broadband treatment | MPLS alternative with VPN access to private PoP locations | Cloud-based service delivery, orchestration, and analytics to create a flexible architecture |
Vendor solution comparison 6 to 10. (Click the company name for more information)
Vendor | Citrix | Open Systems | Fortinet | Palo Alto | Cato Networks |
WAN architecture | Edge based | Edge based | Edge based | Edge based | US centric, UK and Europe |
Gartner status | Challengers | Niche player | Not listed | Leader | Not listed |
Form factor | Physical, virtual (VMware, XS, Hyper-V and KVM), Cloud (AWS, Azure) | Physical, virtual (VMware, Hyper-V), Cloud (AWS, Azure) | Physical, FusionHub offers cloud based virtualisation, Hyper-V | Physical | Physical |
Firewall | Advanced | Basic, advanced via partners | Basic, advanced via partners | Basic, advanced via partners | Basic, advanced via partners |
WAN optimisation | Yes on the 5100, 2100 and 1100 devices | Yes, add-on | Limited | Limited | Limited |
Application path selection | Yes via 14 global gateways | None | No | Applications defined by path | Closest Pop selected per application |
Elevator pitch | Experience for SaaS, cloud, and virtual applications | Forwarding is unique for real time application delivery with good failsafe technology | Good support for 4G and 5G services | Good history of WAN optimisation | US Pop locations, one UK PoP and 2 European |
SASE Security | Rich history of networking, value adds such as CCTV | Customisable solution for the larger Enterprise | Good traffic path selection and Broadband treatment | MPLS alternative with VPN access to private PoP locations | Cloud-based service delivery, orchestration, and analytics to create a flexible architecture |
The Netify market network is now live. Create a free login to access the very latest research across 10+ leading SD WAN & SASE vendors. Users can filter features across cloud, backbone and security. Save shortlists, book Zoom demos and create side-by-side comparisons.
Register nowThe Netify SD WAN Market Network is free to use. Simply create your login to begin building and saving vendor shortlists, filter the top features, examine solutions side-by-side and book Zoom demo calls.
Learn moreOf SD WAN vendor sell via distribution and the channel.
Businesses today are tasked with comparing SD WAN providers, vendors, service providers, resellers and integrators to establish the best fit solution vs requirements.
The typical first step is to create an initial shortlist. And while this sounds simple in concept, the process is more challenging than ever. The average IT team simply does not have the resources available to conduct the necessary research which results in wasted time with the wrong sales pitches.
Concepts such as SASE security with associated framework elements, cloud access, traffic optimisation and global application performance must all be understood prior to shortlisting vendors.
We've created this longform article, with comparison table, to help companies make sense of the vendor landscape. Although the majority of solutions originate from US and UK SD WAN vendors, all solutions are capable of delivering global requirements.
If your business is embarking on a WAN procurement project, your IT team will need to consider hardware and software, the physical and virtual across CPE, gateways and controllers. In addition, delivery and support remain at the top of the buying criteria points list. While software defined solutions do offer significant capability, the challenge is in deciphering marketing material by conducting the necessary research.
USED BY PERMIRA, CDC, BRITISH LEGION, TILNEY AND MORE