FAQ: SD WAN Providers and Vendors

Compare the SD WAN and SASE Cybersecurity Market now.

  • Use our Compare the Market tool to create your shortlist across 100+ solutions
  • Includes vendors, managed service providers, integrators and resellers
  • From Gartner leaders to niche players and startups
  • Get a free bespoke RFP template based on your requirements

Answer a handful of questions to compare North American, UK and Global SD WAN solutions.

Compare Cybersecurity Compare SD WAN Visit Marketplace

The introduction of SD WAN was designed to meet the needs of the modern Enterprise, so choosing a good vendor or managed service provider is important. As they become ever more feature-rich and inevitably more expensive, Netify content is designed to help IT decision makers compare and evaluate solutions. For Netify’s thoughts on everything SD WAN and SASE/SSE cybersecurity, please read our top 20 SD WAN guide and top 10 SASE cybersecurity guide.

Who are the top rated Global SD WAN providers and vendors?

No matter where you look, you’ll find the same industry-leading vendors on SD-WAN top 10 lists (albeit in varying order) to include:

While all of the above vendors provide full portfolios of SD-WAN solutions, some of them, like Palo Alto or Fortinet, have a somewhat narrow focus on network security while being able to fulfil SD-WAN requirements. Enterprise businesses may find that solutions created through acquisition, like Cisco, VMware, or HPE, have more complete and mature SD-WAN feature sets.

Managed SD-WAN providers vary a bit more by region. There are many providers with global reach that can service enterprise customers with worldwide footprints, but customer experience can vary by region and may tend to be best in a given provider’s ‘home turf’.

For example, according to Gartner Peer Insights, the top 5 managed SD-WAN service providers in North America are:

  1. Open Systems
  2. Cato Networks
  3. Hughes
  4. Tata Communications
  5. Masergy

In Europe, the top 2 spots are the same but Hughes no longer makes the top 5, Masergy drops from the list, and Aryaka and Blue Wireless take spots 4 and 5 respectively.

Looking at another information source, according to Forrester’s Forrester Wave, global SD-WAN service provider leaders include Vodafone, Orange, Colt, Tata, Aryaka, Verizon, AT&T, and Lumen (CenturyLink).

In summary, the industry seems to agree on the top SD-WAN hardware and software vendors, but businesses should evaluate service providers on customer service and performance in the regions where they operate to ensure they’re making the right choice.

Who are the top rated SD WAN as a service providers?

SD-WAN-as-a-service providers blend SD-WAN hardware and software solutions from industry-leading vendors and leverage connectivity from global network carriers to provide complete SD-WAN solutions as service offering. Some of these service providers develop their own NaaS (network-as-a-service) platforms, while others are traditional network carriers who may white-label one or more solutions on top of their connectivity services.

According to Netify, the top SD-WAN as a service providers, rated on orchestration, underlay, management, cloud support, reporting, SLA, and customer service, include:

  • Cato Networks
  • Aryaka
  • BT Business (vendors include Cisco Meraki)
  • Colt (vendors include Versa Networks)
  • GTT (vendors include VMware/VeloCloud, HPE Aruba, and Fortinet)
  • Lumen (vendors include VMware/VeloCloud, Versa Networks, and Cisco’s Meraki and Viptela)
  • Masergy (vendors include Cisco Meraki and Viptela, HPE Aruba, and Fortinet)
  • Open Systems
  • Versa Networks
  • VMware (VeloCloud)

Who is the best SD WAN provider?

This is an extremely difficult question to answer, and in almost all cases the answer is highly dependent on customer requirements. That said, we’ve nominated Cato Networks as the best SD-WAN provider for a few reasons.

1. Cybersecurity

a. Cato Networks was the first complete solution for Secure Access Service Edge (SASE). For Cato, security wasn’t ‘bolted-on’ to an SD-WAN solution. Their cloud-based NaaS solution was built to provide an SD-WAN solution with SASE built-in, and delivered on top of their own private backbone. A security focus isn’t surprising to see with Cato Networks as their CEO was a co-founder of CheckPoint, an industry leader in network security.

2. Connectivity

a. Cato Networks have their own global backbone with over 60 PoPs to deliver highly-reliable and low-latency connectivity anywhere in the world, including China which some carriers may struggle to reach. This makes it easy for global businesses to migrate from legacy WAN infrastructure like MPLS.

3. Proven Performance

a. Cato Networks’ solution has been proven to deliver for customers ranging from small and medium businesses to service providers. Their growing customer list includes names like RingCentral, Paysafe, and Kyocera.

What are SD WAN services?

Discuss the difference between vendors and managed providers and generally idetnfiy the different ‘services’ within SD WAN products.

SD-WAN vendors provide hardware and software products which can be deployed by a managed service provider to provide SD-WAN solutions.

There are generally three components that vendors provide to comprise their SD-WAN products:

  1. SD-WAN Edge is where the network is delivered to endpoints at customer locations which could include offices, retail locations, datacenters, or cloud platforms. When SD-WAN is delivered to physical on-premise locations, SD-WAN Edge hardware is installed to connect the site to the network.
  2. SD-WAN Orchestrator is typically a software component hosted by a network operator or managed service provider, and it’s responsible for enforcing network and security policies across the network.
  3. SD-WAN Controller is also typically a software component, and in many cases it’s a cloud-native platform which allows customers and/or managed service providers to centrally manage and monitor network traffic, security policies, and edge devices.

Managed service providers will partner with vendors who provide these components, and then they’ll deploy them on existing customer underlay infrastructure or their own infrastructure if they’re a network carrier that can provide both backbone and last-mile connectivity.

What do SD WAN providers look for?

Network abstraction is a central benefit of SD-WAN. In essence, SD-WAN overlays a virtual private network on top of WAN connectivity that may traverse complex paths across multiple public or private networks. In contrast to VPNs which typically facilitate point-to-point connections over a single WAN circuit, SD-WAN solutions interconnect networks using edge infrastructure across any number of network links.

SD-WAN solutions use a component called an orchestrator to orchestrate the connections and traffic paths required to seamlessly achieve an abstract network edge. Orchestrators may also be configured to orchestrate WAN load balancing in edge appliances to provide for elastic traffic scalability.

SD-WAN solutions typically have a controller to allow for central management of orchestration. The controller will often provide a cloud-based web interface for customers or providers to configure security policies to implement zero-trust network access (ZTNA), or traffic shaping policies or quality of service (QoS) controls to manage performance or network costs. The controller then works with the orchestrator to enforce these policies across the abstract network edge.

Who are the Gartner leaders in SD WAN?

According to Gartner’s 2021 Magic Quadrant for WAN Edge Infrastructure, SD-WAN market leaders include:

  • Fortinet
  • VMWare
  • Versa Networks
  • Palo Alto Networks
  • Cisco
  • HPE (Aruba/SilverPeak)

Gartner has yet to publish the Magic Quadrant for 2022, although we intend to update this section in 2022 once available.

How to migrate from MPLS to SD WAN

Planning is always essential to any successful migration and there are always considerations to be made to avoid negative impact, but SD-WAN solutions can often be dropped into place with relative ease and without impacting existing services to keep the transition as smooth as possible.

Many MPLS deployments exist alongside internet access, especially when the MPLS connections are fully managed by an internet service provider. In this case, a seamless transition is easy as SD-WAN edge appliances can be deployed using existing internet circuits to allow for gradual cut-over from MPLS prior to turning down. Otherwise, the SD-WAN solution may be deployed with new last-mile internet circuits and operated concurrently with existing MPLS networks for some period.

One key security consideration is encryption. On MPLS, communication took place on a private network which should have been inaccessible by bad actors on the internet or otherwise outside of the MPLS network boundaries, and therefore any intercept of unencrypted network traffic would only be possible by insiders. This could mean that some business applications, especially legacy or internally-developed tools, utilize unencrypted network communications which were never designed to be used outside of private networks. Most SD-WAN solutions are designed with security in mind and will provide strong end-to-end encryption. Still, with SD-WAN utilizing at least some public internet infrastructure for communications, it’s crucial that you choose an SD-WAN solution which will use strong encryption to protect all network traffic before migration.

Once the SD-WAN edge appliances are deployed and interconnectivity is tested, you can start transitioning services over to SD-WAN gateways and away from the MPLS network, as long as they’re using encrypted communication protocols or are otherwise protected using technologies like secure web proxies or VPN.

What is the difference between SD WAN vendors and Managed SD WAN providers?

SD-WAN vendors provide the ‘machinery’ necessary to build an SD-WAN solution, which are typically offered to the market through partners, integrators, or resellers. In contrast, managed SD-WAN providers may build their own SD-WAN platform or utilize products from SD-WAN vendors and connectivity from internet service providers to offer fully-managed services which includes connectivity and SD-WAN.

However, some SD-WAN vendors do offer fully-managed services which may also be referred to as SD-WAN-as-a-service, such as Aryaka or Cato Networks.

Who are the top rated UK SD WAN providers and vendors?

According to Netify, the top UK SD-WAN providers are:

  1. Cato Networks
  2. Aryaka
  3. Masergy
  4. Fortinet
  5. Versa
  6. Cisco Meraki
  7. GTT
  8. Lumen
  9. Palo Alto
  10. Colt

Who are the top rated US SD WAN providers and vendors?

According to Gartner Peer Insights, the top SD-WAN providers in North America are:

  1. Open Systems
  2. Cato Networks
  3. Hughes
  4. Tata Communications
  5. Masergy
  6. ZeroOutages
  7. Aryaka
  8. Turnium
  9. MetTel
  10. AT&T

According to G2, the top SD-WAN vendors in North America are:

  1. Cisco (Meraki, Viptela)
  2. Fortinet
  3. Oracle
  4. Cato Networks
  5. HPE Aruba (Silver Peak)
  6. Aryaka
  7. VMware (VeloCloud)
  8. Citrix
  9. Lumen
  10. CheckPoint

Who are the top rated SD WAN providers and vendors in Canada?

Canada is not listed outside of North America, please use the following vendors to build your Canadian SD-WAN list.

  1. Cisco (Meraki, Viptela)
  2. Fortinet
  3. Oracle
  4. Cato Networks
  5. HPE Aruba (Silver Peak)
  6. Aryaka
  7. VMware (VeloCloud)
  8. Citrix
  9. Lumen
  10. CheckPoint

Who are the top rated SD WAN providers and vendors in Europe?

According to the 2021 Frost Radar report, the top managed SD-WAN providers in Europe include:

  • AT&T
  • Colt
  • Lumen
  • NTT
  • Orange
  • Telefonica
  • Telia Carrier
  • Verizon
  • Vodafone

According to Gartner Peer Insights, the top SD-WAN providers in EMEA are: 1. Open Systems 2. Cato Networks 3. Tata Communications 4. Aryaka 5. Blue Wireless 6. Orange 7. Hughes 8. AT&T 9. Lumen 10. Masergy

Who are the top rated managed SD WAN providers?

  • Aryaka – in addition to managed SD-WAN and SASE services, Aryaka can also provide last-mile connectivity through their ISP partnerships. Also, their SmartCDN service enhances application by leveraging their global private backbone.
  • BT Business – As an internet service provider as well as mobile network provider, BT are in a position to offer a single vendor for enterprise networking including last-mile connectivity, as well as mobile network services. BT’s SD-WAN services utilize solutions from Cisco (Viptela and Meraki) and VMware (VeloCloud).
  • Cato Networks – Cato is an innovator in both SD-WAN and cybersecurity, offering a complete SASE solution as well as SD-WAN services. Cato’s platform is cloud-native which makes migration, deployment, and management simple. Cato operate a global network backbone known for low-latency, PoPs in hard-to-reach regions like China, and its ability to enhance application delivery performance. Cato also offer a number of integrations to enable seamless interoperability with public clouds, security products, and business applications.
  • Colt – Colt is a UK-based voice and data service provider that offers managed SD-WAN-as-a-service solutions, as well as white-labelled SD-WAN services for resale by partners, managed service providers, and integrators. While they don’t have a fully complete cybersecurity portfolio across all SASE components, they do offer managed security services including DDoS protection, managed firewalls, and secure web gateways.
  • GTT – GTT is a US-based internet service provider with a global backbone and worldwide footprint including offices and customer service capabilities. They offer a full complement of managed data networking services including SD-WAN, MPLS, VPLS, and Ethernet connectivity – so migration from legacy solutions like MPLS to modern SD-WAN solutions can be handled by a single provider. GTT’s managed SD-WAN services are delivered using SD-WAN technology from Fortinet, VMware (VeloCloud), and HPE Aruba (Silver Peak).
  • Lumen – Lumen is an evolution of M&A activities that have brought together CenturyLink and Level 3, leading North American internet service providers, as well as several other technology companies. They are still predominantly an internet service provider, and they’ve branded their SD-WAN solutions as ‘Adaptive Networking’. They boast an impressive list of customers including Zoom and Koch, and their SD-WAN solutions are built on their global network backbone using technology from Cisco (Meraki and Viptela), Versa Networks, and VMware (VeloCloud).
  • Masergy – Masergy are a managed services provider who focus on SD-WAN, SASE, and unified communications. They offer SD-WAN services in various models ranging from co-managed to fully-managed, and they can include managed security services like 24/7 SOC monitoring, incident response, advanced IDS and analytics, endpoint security, and vulnerability management.
  • Open Systems – Open Systems is an interesting managed services provider who focus on managed detection and response (MDR) and cloud security, and they have developed their own management platform for SD-WAN and SASE, although they don’t operate their own network and they do utilize SD-WAN products from various SD-WAN vendors in order to deliver managed SD-WAN services.
  • Versa Networks – Versa is a leading SD-WAN vendor that offer a full portfolio of SD-WAN and SASE products which can be deployed and managed by partners, integrators, and service providers. Their technology is scalable and cost effective, and many internet service providers use Versa Networks products to deliver their SD-WAN solutions. Some large service providers leveraging Versa Networks products include Comcast, Verizon, and Virgin.
  • VeloCloud – VeloCloud is a leading SD-WAN vendor who were acquired by VMware, allowing VMware to bolt-on SD-WAN to their portfolio. Together with other VMware products, VeloCloud can deliver a reliable, scalable, and robust SD-WAN solution with full SASE in on-premise, hybrid, and multi-cloud environments.

Which providers and vendors offer low cost SD WAN solutions?

Some vendors, including Versa, Meraki, Peplink, and Fortinet, may be considered as ‘low-cost’ SD-WAN solutions because their products can be purchased at prices that can be viewed as affordable even to a small business with a few locations, and deployment is possible without a service provider’s assistance. If you’re a smaller business this can be an acceptable solution, but there are some downsides to going this way:

  1. You’ll still need to work with other vendors to obtain internet connectivity
  2. You’ll be solely responsible for designing your network, securing your network, ensuring that it performs well, handling maintenance like software updates, and responding to outages

While Versa Networks primarily sells through channel partners except for larger deals with internet service providers, Cisco Meraki and Fortinet products can be more easily acquired through resellers or distributors.

Cisco Meraki’s cloud management capabilities are more mature than most, and they can allow an end-user with minimal technical ability to deploy a viable SD-WAN solution without assistance as long as they’re willing to pay annually for cloud management licensed covering each Cisco Meraki appliance.

Which providers and vendors offer global SD WAN?

Of some of the top SD-WAN providers, the following companies operate their own global backbones and have a true global footprint:

  • Cato Networks
  • Aryaka
  • Masergy
  • GTT
  • Lumen (Tier 1)
  • Colt
  • BT (Tier 1)
  • Verizon (Tier 1)
  • AT&T (Tier 1)
  • Orange

How to compare SD WAN devices from multiple vendors?

Some businesses may deploy multiple SD-WAN solutions for a number of reasons. This could be due to carriers in different regions who support different SD-WAN vendors, it could be a scenario where business units gained through acquisition kept their own vendors, or it could simply be an IT department preference to use multiple vendors for diversity and resiliency.

Regardless of why an organization may need to manage a multi-vendor SD-WAN architecture, there are some factors that should be taken into consideration:

  1. Expertise – in global enterprises, it’s unlikely that all personnel who support network infrastructure will have expertise across multiple vendors. If there are a sufficient number of technical staff who understand each solution and management generally get along with each other, this may not be a problem. Otherwise, consider the cost of building and maintaining knowledge required to support multiple solutions against the cost of a single-vendor solution.
  2. Appliance Hardware – multiple SD-WAN solution vendors means multiple sets of hardware to maintain as spares, as well as potential differences in SLAs, hardware warranty conditions, and lead-times for replacement hardware.
  3. Interoperability – if SD-WAN infrastructure is integrated with other products in the technology stack or cloud services, you’ll need to consider impact to multiple platforms when making changes or upgrades.

How many SD WAN vendors are there?

This is difficult to answer because there are so many networking vendors who claim to have at least partial SD-WAN solutions, and any managed service provider can claim to be an SD-WAN vendor or provider if they deploy or resell SD-WAN solutions. That said, here are some numbers from a few different sources:

  • 100+ vendors and providers listed by Netify
  • Over 1,400 companies listed by SDxCentral: Organizations - SDxCentral
  • 76 vendors listed by G2: Best SD-WAN Software in 2022

Why use SD WAN and why is the technology important?

The network abstraction provided by SD-WAN can introduce a variety of business benefits including:

  • Performance improvements by combining multiple WAN circuits through circuit bonding, intelligent load balancing, or leveraging a provider’s application delivery optimization services.
  • Centralized management allowing customers and service providers to orchestrate uniform network policies across their IT estate.
  • Visibility into network security and performance that is much more difficult to achieve using legacy network technologies.
  • Simplified hybrid cloud deployments for organizations who are seeking to benefit from beginning their cloud transformation while maintaining secure connectivity with on-premise resources.
  • Simplified global connectivity for remote working – SD-WAN enables remote workers or remote locations to truly operate with the same user experience and security controls as they would at any other corporate network location, regardless of the underlying internet service provider(s).
  • Bandwidth cost control as SD-WAN allows customers to define policies that ensure any given service or application utilizes optimized paths across the least expensive bandwidth.

Which SD WAN vendors compete with each other?

Some SD-WAN vendors or providers that aren’t obvious competitors may still compete with each other when their core businesses are outside of SD-WAN.

The comparison table selections were made based on groups of vendors and providers that are most likely to compete: Network Security Vendors who have SD-WAN products: Palo Alto Networks Cisco Meraki Fortinet Barracuda Juniper

Network infrastructure or virtualization vendors who have SD-WAN products:

  • Citrix
  • VMware (VeloCloud)
  • Peplink
  • Versa Networks
  • Teldat

SD-WAN as-a-service providers:

  • Open Systems
  • Globalgig
  • Masergy
  • Aryaka
  • Cato Networks

Internet service providers with managed SD-WAN services:

  • Verizon
  • Expereo
  • Lumen
  • GTT
  • Oracle (an outliar that didn’t really fit perfectly in any of these groupings)

Who are the top rated SD WAN cloud providers?

While most SD-WAN providers have at least some support for connecting or integrating with cloud resources, some vendors who have cloud-native platforms and native integrations with public clouds like AWS, Azure, and Google can be a better match for cloud-first organizations.

Regarding vendors, for example, while Palo Alto’s solutions can support virtually any multi-cloud environment and their virtual appliances are available in many public cloud marketplaces, they don’t yet offer any cloud-native solutions themselves. Customers are responsible for deploying and configuring Palo Alto’s solutions in their cloud environment. This is similar for others including Fortinet, Barracuda, Juniper, and Cisco enterprise networking products (excluding Meraki).

Cisco Meraki is a cloud-native solution which is centrally controlled and orchestrated in a fully-managed cloud environment. Their security appliances are still deployed as either physical appliances or virtual appliances, which are also available in most public cloud marketplaces – although deployment is extremely simple as they’re automatically configured upon connection to their cloud controller.

Looking at SD-WAN service providers, cloud capabilities start to become big differentiators when a provider operates a global backbone that can route directly to public clouds. For example, with Cato Networks, customers can avoid costly bandwidth for connectivity using public cloud connectivity solutions like AWS DirectConnect and Azure ExpressRoute – while providing full visibility into the traffic for security inspection as it traverses their network.

VMware’s VeloCloud Gateway (VCG) provides the ‘machinery’ to enable this kind of connectivity through a potentially less-expensive 3rd party network provider, and VMware offers VCG as virtual appliances hosted in their cloud or yours, but unlike Cato, it’s not a cloud-native solution and would require some DIY (do it yourself) deployment and configuration effort from the customer or service provider.

How do I download a list of SD WAN providers and vendors?

You can download our guides here.

Who are the top rated SD WAN suppliers?

  • Cato Networks
  • Aryaka
  • Masergy

Which hybrid WAN providers offer SD WAN?

These hybrid WAN service providers offer SD-WAN services as well as traditional private networking solutions including MPLS, VPLS, or Ethernet EPL/VPL:

  • Globalgig
  • Verizon
  • Expereo
  • AT&T
  • Lumen
  • GTT
  • BT
  • Orange
  • Vodafone

What problems does SD WAN solve?

From a business perspective, because SD-WAN is often sold as a service, it can help businesses shift network infrastructure expenses from large CAPEX investments to more predictable OPEX.

From a technical perspective, there are several problems which SD-WAN can address:

  1. Barriers to cloud transformation – some businesses may avoid adopting public cloud offerings because they have legacy on-premise infrastructure that they can’t get rid of, and they may not believe there’s an affordable way to provide sufficient bandwidth for hybrid operations due to the high costs of vendor-provided connectivity like AWS DirectConnect or Azure ExpressRoute. SD-WAN can help remove this barrier by allowing customers to route traffic between their edge and public clouds by using lower-cost carriers that are directly peered with public cloud infrastructure.
  2. Remote access – SD-WAN’s network abstraction combined with central management provides a scalable platform to enable remote access to any internal resources, from any remote location, while enforcing uniform network and security policies.
  3. Security – as mentioned previously, most SD-WAN solutions will transparently provide end-to-end encryption to protect all traffic that leaves the network edge without requiring changes to internal infrastructure. Additionally, most cloud-native solutions are built to support ZTNA and enforce authentication to all network resources.
  4. Performance and resilience – SD-WAN solutions enable customers to leverage multiple WAN links from multiple providers. In contrast to traditional load-balancing techniques, SD-WAN features like circuit bonding allow different WAN links with different performance characteristics to be combined for increased performance as well as fault tolerance.

What to look for in SD WAN

Identify the elements of SD WAN which makes providers and vendors unique.

Security can be a differentiator among SD-WAN providers and vendors. For instance, if two internet service providers who utilize Versa Networks edge appliances offer SD-WAN, one may offer an appliance which only acts as a gateway to the SD-WAN network, while the other may offer a different appliance which can also act as a next-generation firewall (NGFW). Also, solutions with some level of ZTNA support built-in can also be desirable.

Performance is another consideration which can make some providers stand out. Providers who operate their own global networks that offer direct connectivity to PoPs around the world will be able to provide high performance with low latency.

And, providers who are directly peered with public clouds are even better as they can help customers slash their bandwidth costs. Finally, some providers, especially those with cloud-native solutions, offer content and application delivery optimization services to leverage the performance of a global private network specifically toward the goal of enhancing content delivery.

If performance is important, it may be beneficial to consider a provider who operates their own networks instead of a provider who can only overlay existing infrastructure or resells connectivity from 3rd parties.

Top 20 SD WAN Vendors and Managed Service Providers Comparison Table and Matrix.

Best SD WAN Vendors and Providers List 1-5.

Company Aryaka Cato Meraki (Cisco) Lumen Masergy
Primary focus SD-WAN and SASE, managed and co-managed SD-WAN & SASE Co-managed SD-WAN & SASE DIY and Co-managed Managed SD-WAN & SASE Managed and co-managed SD-WAN & managed SASE
Supported solutions Aryaka Prime EZ (managed SASE, including SD-WAN)
Aryaka SmartConnect SD-WAN 
Cato's Edge SD-WAN
Cato Socket (branch office and data center device)
Cato SASE Cloud
Umbrella (Umbrella, Cloudlock, Duo Beyond)
Cisco SD-WAN powered by Viptela (physical and virtual)
Cisco SD-WAN powered by Meraki
VMWare VeloCloud, Versa, Meraki, Viptela HPE Aruba (Silver Peak), Fortinet
Cloud integration Aryaka offers SmartConnect SD-WAN services powered by Aryaka's global network fabric, which includes a choice of public cloud, multi-cloud, SaaS provider, or partner cloud connectivity. Cato integrates with major cloud providers, such as Amazon Web Services, Microsoft Azure, and Google Cloud Platform via secure IPSec tunnels. Cisco integrates major public cloud providers, including Alibaba, AWS, Google Cloud Platform, and Microsoft Azure, through direct peering via colocation facilities or Cloud OnRamp via IPSec tunnels. Furthermore, Cisco extends Cloud OnRamp to select SaaS providers for direct connection to SaaS services. Lumen integrates with six (6) major cloud providers in thirty-three (33) cities.   Masergy integrates with twelve (12) major cloud providers in forty-five cities (45) via direct connections.
Value statement Aryaka provides its own fully managed SD-WAN solution with private IP backbone delivery. Cato integrates with AWS, Azure, Google Cloud, and many leading cloud vendors.   Cisco offers DIY and managed single-vendor SD-WAN and SASE solutions leveraging Cisco's security ecosystem, with pre-built integrations to many third-party security providers.  Lumen offers managed SD-WAN solutions from leading vendors, coupling those solutions with the right underlay network based on customers' specific application requirements. Masergy integrates cybersecurity capabilities from leading vendors into its managed and co-managed SD-WAN and SASE offerings, including  Fortinet and Forcepoint, coupling those solutions with the right underlay network based on customers' specific application requirements. 
Coverage Aryaka expands globally, with over forty (40) Points of Presence (PoPs) distributed across six continents Cato's services reach globally, with over sixty-five (65) geographically distributed PoPs. Cisco provides global coverage with over one thousand (1000) peering partnerships with top ISPs, CDNs, and SaaS providers.   Lumen's coverage extends globally, with its MPLS and Internet networks reaching forty-one (41) and thirty-five (35) countries, respectively. Lumen has limited coverage in Africa and the Middle East, with no coverage in Latin America. Masergy provides global coverage extending to eighteen (18) countries.
Backbone type Private backbone (Aryaka Layer 2 and Layer 3 Private Core) Private backbone Private (MPLS) and public (satellite, 5G/LTE, broadband, Internet) backbones Many public and private backbones, depending on customers' connectivity and application requirements (broadband, MPLS, 3G/4G/LTE, etc.) Public (Internet, Broadband, LTE.5G), and private (Masergy SD-Network, BYONetwork) backbones
Differentiators Aryaka offers an all-in-one SD-WAN solution, addressing on-premises devices, bandwidth, connectivity, last and mid-miles, multi-cloud networking, WAN optimization, and end-to-end visibility requirements, with 24x7 NOC services.  Cato converges globally distributed cloud-based PoPs with security capabilities to improve performance and security with support for all types of edges. Cisco is the largest SD-WAN provider worldwide with a single-vendor SASE offering.  Lumen offers on-demand network optimization through intelligent traffic routing and control delivered via APIs and web portals. Masergy offers an end-to-end SD-WAN solution by partnering with Fortinet to provide edge access with built-in on-premises or cloud firewalls. 
Alignment Aryaka is best suited for mid-to-large enterprises with complex requirements seeking fully-managed SD-WAN/SASE services. Aryaka is not the right solution for SMB seeking low-cost SD-WAN solutions.  Cato is best suited for multinational organizations seeking fully-managed SD-WAN/SASE solutions.   Cisco's solutions are best suited for organizations with existing investments in Cisco technology or organizations seeking a single-vendor SASE solution.   Lumen is best suited for global organizations seeking managed SD-WAN solutions. Masergy's solutions are best suited for organizations seeking network services in major global markets. 
Architecture Private backbone with gateways. Private backbone with gateways Cisco's SASE architecture consists of device agents connected to a cloud-delivered security stack (PoP) through IPSec tunnels, PAC files, or proxy chaining and agentless, on-premises devices connected to fixed PoPs via edge gateways and IPSec tunnels.

Cisco's SD-WAN architecture consists of branch office (physical or virtual) and cloud gateways connected through public and private backbones. 
While Lumen can overlay SD-WAN solutions from top providers over any underlay, the specific architecture details will depend on the selected SD-WAN vendor. Masergy's architecture consists of local branch office gateways connected via public or private backbones.
Cybersecurity Aryaka's SASE offering includes VPNaaS, web content filtering, malware protection, SSL inspection, real-time threat intelligence, and FWaaS.

Aryaka's SD-WAN service (included in Prime EZ) offers stateful firewall, micro-segmentation, and Aryaka's Network Access Point (NOP) for branch offices, with optional NGFW for on-premises locations.
Cato Networks provides FWaaS, SWG, CASB, IPS, NG malware protection, and ZTNA. Cisco Umbrella offers DNS security, SWG, FWaaS, CASB, ZTNA, interactive threat intelligence through Cisco Talos Intelligence Group, XDR through Cisco SecureX, featuring web content filtering, application control, DLP (coming soon), IPS (coming soon), RBI, and malware protection.

Cisco SD-WAN offers SSL inspection, enterprise firewall, IPS, web content filtering, and malware sandboxing.
automatic detection and proactive response through managed firewalls, DDoS, and Zero Trust.  Masergy's SASE offering includes NGFW (Fortinet Cloud Firewall), CASB (Forcepoint), and SWG (Fortinet) capabilities featuring Shadow IT discovery, branch IP security, EDR, network visibility, cloud workload protection, and MDR.
Management Aryaka offer fully managed services, including underlay with a single point of contact. Cato offers co-managed services, including fully-managed underlay network.  Cisco providers managed SD-WAN services through partnerships with MSPs. Lumen offers a fully managed SD-WAN solution through authorized channel partners and system integrators.  Masergy offers managed SD-WAN and SASE services with a single point of contact. Masergy also providers co-managed SD-WAN/SASE services, enabling customers to use a central portal to self-manage configurations and policies.  
Gartner status Gartner places Aryaka's solutions in the WAN Edge Infrastructure market.
Gartner pulled Aryaka from its WAN Edge Infrastructure Magic Quadrant in 2020. 
While Cato Networks does not appear on any Gartner Magic Quadrant, it received an honorable mention on Gartner's 2022 Security Service Edge Magic Quadrant. Gartner places Cisco's SD-WAN solution in the WAN Edge Infrastructure market. As of September 2021, Cisco appears as one of the Leaders on Gartner's WAN Edge Infrastructure magic quadrant.
Gartner places Cisco's Umbrella solution in the Security Service Edge category. As of February 2022, Cisco appears a Challenger on Gartner's Security Services Edge magic quadrant. 
Gartner places Lumen's solutions in the Network Services, Global category. As of February 2022, Lumen appears as a Leader on Gartner's Network Services, Global Magic Quadrant. Gartner places Masergy's solutions in the Network Services, Global category. As of February 2022, Masergy appears as a visionary on Gartner's Network Services, Global Magic Quadrant.

Best SD WAN Vendors and Providers List 6-10.

Company Fortinet Palo Alto Globalgig Expereo Open Systems
Primary focus DIY and managed SD-WAN
SASE
SD-WAN and SASE DIY and managed Managed SD-WAN Managed SD-WAN and SASE SD-WAN and SASE  managed
Supported solutions Fortinet Secure SD-WAN (includes physical or virtual FortiGate, FortiManager, FortiAnalyzer, and FortiDeploy)
FortiSASE Secure Internet Access (SIA)
FortiSASE Thin Edge with FortiExtender or FortiGate
Prisma SD-WAN with ION devices
Prisma Access 2.0
SaaS Security
Instant-On Network (ION) appliances and orchestration
Palo Alto Prisma SD-WAN
Cisco Viptela
Peplink
Cisco Meraki
Cradlepoint
Fortinet Secure SD-WAN
Cisco Meraki
Cisco SD-WAN
VMWare SD-WAN
Expereo SD-WAN Gateway
Cloud Connect
SASE+ Service Plans include Business, Enterprise, and Enterprise+
Cloud integration FortiSASE Thin Edge integrates with the major public cloud providers via SD-WAN and S2S IPSec tunnel.

Fortinet Secure SD-WAN is available in Azure, AWS, Google Cloud, VMWare Cloud, Oracle, and Alibaba marketplaces.
Palo Alto integrates with major public cloud providers (Azure, AWS, GCP) through SD-WAN ION software-based devices and IPSec tunnels, and with Microsoft 365 through a fiber-connected backbone and Tier 1 peering. Globalgig connects to the major public cloud providers via IPSec tunnels. Expereo integrates with the major public cloud providers through Layer 2 Cloud Connect Open Systems' SD-WAN solution integrates with Microsoft Azure via ExpressRoute and Azure Virtual WAN and other major public cloud providers, such as AWS, GCP, IBM Cloud, and Oracle, through Equinix Cloud Exchange (ECC) Fabrics.
Value statement Fortinet's FortiSASE extends its security fabric to the cloud to cover all edges, offering flexible edge access models (agent and agentless), organic threat intelligence through FortiGuard Labs, and flexible and scalable pricing models. Furthermore, Fortinet offers multiple SD-WAN consumption and deployment models (on-premises, public cloud, private cloud), enabling growth through low TCO, increased user experience, and proven built-in security. Palo Alto delivers low-latency scalable network connectivity with industry-leading security capabilities baked into a single cloud-delivered platform, using AI and ML-driven single-pass detection to protect against previously unseen threats.   Globalgig offers vendor-agnostic and carrier-independent SD-WAN design, selection, and implementation services based on customer requirements. Expereo offers fully-managed SD-WAN solutions from top providers, coupling those solutions with the right underlay network based on customers' application requirements. Open Systems offers a fully-managed SASE solution with integrated SD-WAN and security managed from a centralized console.
Coverage While FortiSASE SIA has limited availability in North America (US and Canada), Europe (France, Germany, UK), and Asia (Japan), cloud-managed SD-WAN is globally available in all major public clouds and Equinix data centers. Palo Alto provides global coverage with over one hundred (100) PoPs worldwide deployed in AWS and GCP. Globalgig offers global support services, including multi-carrier installation and management. Expereo providers worldwide coverage through its global internet services. Open Systems offers global coverage through geographically dispersed Mobile Entry Points (access points for remote users)
Backbone type Private (MPLS, switched ethernet) and public backbones (broadband, 3G, 4G, LTE) Private and public backbones Private and public backbones Public (broadband, 4G/5G, microwave, satellite, and dedicated public Internet) and private (BYO network) backbones   Private and public backbones
Differentiators Fortinet enables seamless integration of its FortiSASE solution with other Fortinet products, enabling customers to take full advantage of existing technology investments. Additionally, FortiSASE's modular approach delivers customized solutions to meet clients' unique needs.
Fortinet Secure SD-WAN delivers a full security stack with a primitive NGFW to the branch office with zero-touch deployment, managed and scaled from a single-pane management portal. 
Palo Alto's Prisma SD-WAN provides layer Seven (7) application visibility through a single cloud-delivered branch office appliance, using AIOps and machine learning to identify and auto-remediate problems. Globalgig tailors solutions based on customers' unique needs through discovery, design, and alignment workshops. Expereo offers fully-managed and hosted SD-WAN Gateways that integrate with current SD-WAN deployments to avoid vendor lock-in.  Open Systems delivers a fully managed, modular SASE solution through three service plans designed to meet businesses' unique needs.
Alignment Fortinet is best suited for organizations with existing investments in Fortinet products seeking DIY SD-WAN/SASE solutions or organizations seeking managed SD-WAN/SASE solutions Palo Alto's solutions are best suited for global enterprises seeking DIY or managed SD-WAN and SASE services   Globalgig's service offerings are best suited for organizations with limited technical resources and knowledge of SD-WAN technologies  Expereo's services are best suited for multinational organizations seeking a fully-managed SD-WAN/SASE solution.  Open Systems is best suited for multinational organizations with heavy investments in Microsoft Azure products and services seeking a fully managed SASE solution.  
Architecture FortiSASE's architecture consists of agent and agentless connected to cloud-based security stacks (PoPs) directly over the Internet or through a  branch office gateway.
Fortinet Secure SD-WAN's architecture consists of branch office and cloud gateways connected over public or private backbones. 
Palo Alto Prisma SASE's architecture consists of agent and agentless devices connected to cloud-delivered PoPs.
Palo Alto Prisma SD-WAN's architecture consists of branch office gateways connected via public and private backbones.
While Globalgig can overlay SD-WAN solutions from top providers over any underlay, the specific architecture details will depend on the selected SD-WAN vendor. Expereo's architecture consists of branch office gateways connected via private or public backbones Open Systems SD-WAN architecture consists of branch office gateways (Security Delivery Platforms) connected via private or public backbones.
Open Systems SASE architecture consists of  agent and agentless devices connected to Security Delivery Platforms (SDPs)
Cybersecurity FortiSASE includes FWaaS, SWG, and ZTNA, featuring malware protection, SSL inspection, IPS, web content filtering, application control, DLP, logging and monitoring, advanced threat prevention, DNS security, and micro-segmentation.
Fortinet Secure SD-WAN delivers security capabilities through its FortiGate NGFW (physical or virtual), featuring threat intelligence (through FortiGuard), SSL inspection, application control, IDS/IPS, antivirus, reputation, web content filtering, DLP, advanced threat protection, and network segmentation.  
Prisma SASE includes ZTNA, cloud SWG, NG CASB, and FWaaS, featuring encrypted application access, authentication, bi-directional SSL inspection, policy management, VPN, threat detection, DLP, Shadow IT visibility, sandbox, IoT security, DNS security, web content filtering.
Prisma SD-WAN ION offers a zone-based firewall (ZBFW), explicit proxy, and VPN.
While the cybersecurity capabilities will greately depend on the selected SD-WAN vendor, GlobalGig offers built-in security, including NGFW, SIG, and UTM, through Viptela, Meraki, and Fortinet  Expereo's SASE solution includes DNS security, SWG, FWaaS, CASB, and threat intelligence Open Systems cybersecurity capabilities vary depending on the chosen service plan. The Enterprise+ service plan includes standalone firewall, standalone SWG with web content filtering, malware protection, SSL inspection, and DNS filter, unmanaged network and response, standalone ZTNA, secure email gateway, CASB (integrated into SWG), integrated advanced threat protection, and integrated cloud sandbox 
Management Fortinet offers managed SD-WAN solutions through partnerships with MSPs.
For DIY models, Fortinet offers a single management console for security and SD-WAN using FortiManager and FortiManager Cloud
Palo Alto offers managed SD-WAN and SASE services through partnerships with MSPs. Furthermore, Palo Alto provides a central portal through a cloud controller to manage Prisma SD-WAN ION devices for its DIY consumption model.  Globalgig offers a managed SD-WAN solution with three (3) flexible tiers, all with a single point of contact Expereo offers fully-managed SD-WAN and SASE solutions with a single point of contact Open Systems offers fully-managed SD-WAN and SASE solutions with a single point of contact.
Gartner status Gartner places Fortinet's SD-WAN solution in the WAN Edge Infrastructure market. As of September 2021, Fortinet appears as one of the Leaders on Gartner's WAN Edge Infrastructure magic quadrant.

Fortinet's FortiSASE solution does not appear on Gartner's 2022 Security Service Edge (SSE) magic quadrant. 
Gartner places Palo Alto's Prisma SD-WAN in the WAN Edge Infrastructure market. As of September 2021, Palo Alto appears as one of the Leaders on Gartner's WAN Edge Infrastructure magic quadrant.
Gartner places Palo Alto's Prisma Access solution in the Security Service Edge (SSE). As of February 2022, Palo Alto appears as a Challenger on Gartner's Security Service Edge Magic Quadrant 
As of the time of this writing, Globalgig does not appear on any Gartner Magic Quadrant As of the time of this writing, Expereo does not appear on any Gartner Magic Quadrant At the time of this writing, Open Systems does not appear on any Gartner Magic Quadrant

Best SD WAN Vendors and Providers List 11-15.

Company Verizon GTT Versa VeloCloud (Now VMWare - VeloCloud was acquired by VMWare on 2018) Peplink
Primary focus Managed SD-WAN and SASE Managed SD-WAN and SD-WAN DIY with managed circuits SD-WAN & SASE DYI and managed SD-WAN and SASE DIY and managed SD-WAN DIY and managed
Supported solutions Versa Networks
Cisco Viptela
Cisco Meraki
Silver Peak
Fortinet
Verizon Advanced SASE
HPE (Silver Peak) Aruba EdgeConnect SD-WAN Edge Platform
VMWare SD-WAN
Fortinet Secure SD-WAN
Versa SASE (with built-in Versa Security, delivered on-premises, cloud, or hybrid)
Versa Tital
Versa Secure SD-WAN
Versa Operating System (VOS)
Versa Secure Access (ZTNA)
Versa Director (central management)
Versa Analytics
Versa Concerto (orchestration engine)

VMWare SASE (includes VMWare SD-WAN, VMWare Secure Access, VMWare Web cloud Security, and VMWare Edge Network Intelligence)
VMWare Workspace ONE (Secure Access)
VMWare NSX Firewall
VMWare Carbon Black
Balance WAN routers
Max branch office routers
FusionHub
InControl 2
Cloud integration Verizon integrates with the major public cloud (AWS, Azure, Google Cloud) and SaaS providers (Office 365, Google, SFDC, etc.) via Verizon's Secure Cloud Interconnect, Cloud OnRamp for Public Clouds, and Cloud OnRamp for SaaS. GTT offers integration to the major public cloud providers (Google Cloud Platform, AWS, Microsoft Azure, IBM Cloud, and Oracle CLoud) through direct secure connections Versa Networks integrates with the major public cloud providers (Google Cloud Platform, Microsoft Azure, and AWS) via IPSec tunnels and direct connections (AWS Transit Gateway Connect, Google Cloud Network Connectivity, Azure Virtual WAN) VMWare integrates with major public and SaaS providers via VMWare SD-WAN Cloud Gateways deployed globally.   Peplink integrates with the major public clouds (AWS, Google Cloud Platform, Microsoft Azure) via FusionHubs, Peplink's virtual Speedhub appliance.  
Value statement Verizon partners with leading security vendors to bring fully-managed, "best-of-suite" SASE solutions. GTT offers unified management of SD-WAN solutions over a global Tier 1 Internet backbone, creating higher ROI with lower capital expenditures. Versa Networks offers core SASE features with unmatched security within a single operating system. VMWare provides DIY and managed SD-WAN and SASE solutions with global coverage expanding over one hundred and fifty (150) PoPs, integrating with leading security vendors such as Zscaler and Menlo Security to deliver industry-leading security capabilities. Peplink's solution enables greater connection speeds and throughput over low-cost backbones, such as cable, DLS, and cellular, providing an overall more affordable solution than its competitors.
Coverage Verizon has a global reach, with its MPLS and Internet networks expanding sixty-one (61) and thirty-five (35) countries, respectively. GTT has a global reach, with over six hundred (600) PoPs across six continents   Versa offers global coverage through ninety (90) PoP locations.   VMWare has a global reach, with over one hundred and fifty (15) geographically distributed PoPs (150+), servicing customers of all sizes and across all verticals. Peplink provides global coverage, with limited sales and support in North America and Europe.
Backbone type Private and public backbones   Private (MPLS) and public (broadband, 4G/LTE) backbones Private (MPLS) and public (3G, 4G, LTE, broadband) backbones Private (MPLS) and public (broadband, 3G/4G LTE) Private (MPLS) and public (3G/4G LTE, DSL, cable) backbones
Differentiators Verizon offers managed SD-WAN solutions from leading vendors to meet customers' unique needs. GTT offers fully-managed SD-WAN solutions from leading vendors connected via GTT's Tier-1 Internet backbone   Versa Networks offers robust built-in security at the branch office through low-cost appliances that increase application performance and reliability through intelligent traffic optimization and lower the TCO by leveraging existing low-cost Internet links as on-ramp access to cloud applications. VMWare's main differentiator is its addition of AI-driven network visibility to improve SD-WAN and SASE client experience. Peplink's SD-WAN solution provides traffic optimization for latency-sensitive applications, such as voice and video, over low-cost backbones using bandwidth bonding and WAN smoothing mechanisms.  
Alignment Verizon's SD-WAN solution is best suited for global organizations seeking managed SD-WAN solutions. GTT's managed SD-WAN solution is best suited for organizations with global connectivity seeking to reduce capital expense.  Due to the complexity of its product and steep learning curve, Versa Networks' SASE and SD-WAN solutions are best suited for organizations with strong IT resources or organizations looking for a fully-managed managed SASE/SD-WAN solution. VMWare's SD-WAN and SASE solutions are best suited for multinational organizations seeking DIY SD-WAN/SASE services.   Peplink's solution is best suited for customers with wireless/cellular WAN requirements, such as transportation, maritime, and robotics
Architecture The architecture will depend on the SD-WAN vendor selected by the customer.  The architecture will depend on the SD-WAN technology option selected by the customer. 
Versa Networks' SASE architecture consists of endpoint agents connecting to cloud gateways to access enteprise applications via secure and encrypted connections.

Versa Networks' SD-WAN architecture consists of branch office gateways with DIA, interconnected via public or private backbones. 
VMWare's SASE architecture consists of cloud gateways (SASE PoPs) globally deployed and managed by VMWare, to which device agents connect leveraging VMWare Workspace ONE technology.

VMWare's SD-WAN architecture consists of hosted or on-premises gateways, branch office appliances, and data center appliances managed via a cloud-hosted or on-premises central orchestrator
Branch office gateways with DIA, interconnected via private and public backbones.
Cybersecurity Verizon partners with Cisco to provide cybersecurity capabilities for its SD-WAN offering, including Cisco SD-WAN Security and Cisco Duo for ZTA.
Verizon's Advanced SASE offering includes SWG and ZTNA.
The cybersecurity features will depend on the selected SD-WAN technology option.  Versa Networks' SASE solution includes SWG, ZTNA, CASB, FWaaS, and RBI, featuring IPS/IDS, application whitelisting, web application firewalls, DNS security, network sandboxing and obfuscation, MFA, and risk-based access control. 
Versa Networks' Secure SD-WAN solution includes SWG, NGFW, DLP, malware protection, lateral movement detection, web content filtering, IPS/IDS, DDoS, dynamic VPN/Next-generation VPN, SSL inspection, micro-segmentation, and WAN optimization.
VMWare's SASE solution includes ZTNA, SWG (powered by Menlo Security Cloud Platform), CASB (VMWare Cloud Web Security), and NGFW, featuring  RBI, malware protection, sandbox, web content filtering, SSL inspection, and DLP. Optionally, customers can implement UEM through VMWare's Workspace ONE and Carbon Black solutions.
 
VMWare SD-WAN offering integrates with third-party NGFW running locally on branch office and data center appliances and cloud-based NGFW, AV, IPS/IDS, and threat-detection. VMWare SD-WAN offering also integrates with VMWare Cloud Web Security to protect against cloud and Internet-borne threats.
Peplink's SD-WAN solution offers web content filtering, DPI firewall, IDS, and DoS protection
Management Verizon offers managed SD-WAN solutions via a single point of contact GTT offers a fully-managed SD-WAN solution. GTT also offers a Tier 1 Internet backbone for organizations deploying DIY SD-WAN.  Versa Networks offers a multi-tenant architecture allowing MSPs to deliver SD-WAN services. For DIY consumption models, Versa Networks offers centralized management via Versa Networks' Director management platform. VMWAre offers managed SASE services (including SD-WAN) through authorized MSPs.  Peplink offers managed SD-WAN services through certified channel partners.
For DIY deployment models, Peplinks offers centralized management via Peplink's InControl 2 cloud-based management console
Gartner status Gartner places Verizon's solutions in the Network Services, Global category. As of February 2022, Verizon appears as one of the leaders on Gartner's Network Services, Global Magic Quadrant Gartner places GTT's services in the Network Services, Global category. As of February 2022, GTT appears as a niche player on Gartner's Magic Quadrant for Network Services, Global Gartner places Versa Networks' SD-WAN solution in the WAN Edge Infrastructure market. As of September 2021, Versa Networks appears as a Leader on Gartner's WAN Edge Infrastructure magic quadrant.
Gartner places Versa Networks' SASE solution in the Security Service Edge category. As of February 2022, Versa Networks appears as a niche player on Gartner's Security Service Edge magic quadrant.
Gartner places VMWare's SD-WAN solution in the WAN Edge Infrastructure market. As of September 2021, VMWare appears as a Leader on Gartner's WAN Edge Infrastructure magic quadrant. Gartner places Peplink's solution in the WAN Edge Infrastructure market. As of September 2021, Peplink appears as a Niche player Gartner's WAN Edge Infrastructure magic quadrant.

Best SD WAN Vendors and Providers List 16-20.

Company Oracle Citrix Juniper Networks Barracuda Teldat
Primary focus SD-WAN & SASE DIY, managed, and co-managed SD-WAN and SASE DIY, managed SD-WAN and SASE DIY, co-managed, and managed SD-WAN-as-a-Service & SASE managed, co-managed, and DIY SD-WAN Managed
Supported solutions Oracle SD-WAN Edge (Oracle Talari Platforms - virtual, cloud, and physical)
Oracle SD-WAN Security Gateway (CloudGuard Edge security gateways)
Oracle SD-WAN Aware
Oracle SD-WAN Orchestration Cloud
Citrix SD-WAN (physical, virtual, Cloud Direct)
Citrix SD-WAN Orchestrator
Citrix Secure Private Access/Secure Workspace Access (ZTNA)
Citrix Secure Internet Access (SWG)
Citrix Workspace
Juniper AI-driven SD-WAN
Security Director (SASE Portal)
Secure Edge
Next-Generation Firewall Services
Advanced Threat Prevention
Session Smart Router
SRX series Gateways
CloudGen WAN (physical)
CloudGen WAN for Azure (virtual)
CloudGen Access
CloudGen Firewall (physical and virtual)
be.SDx Corp (Base, Controller, Visualizer)
SDE-c (cloud edge appliance)
be.SAFE Smart
be.SAFE Premium
Cloud integration Oracle SD-WAN Edge service integrates with Microsoft Azure via Microsoft Virtual WAN and IPSec tunnels and can also be deployed in Oracle Cloud Infrastructure (OCI) and AWS.
Oracle integrates with OCI via IPSec tunnels and service gateways.
Citrix integrates with the major public cloud providers (Microsoft Azure, AWS, and Google Cloud Platform) via direct connects and ICA connections Juniper integrates with the major public cloud providers (Microsoft Azure, AWS, Google Cloud Platform) via IPsec tunnels  Barracuda's SD-WAN solution integrates directly with Microsoft Azure via Azure Virtual WAN. Barracuda also integrates with AWS and GCP via TINA, a modified version of the IPSec protocol. Teldat integrates with the major public cloud providers via IPsec tunnels
Value statement Oracle provides DIY, managed, and co-managed SD-WAN and SASE services integrating solutions from leading security vendors, such as Zscaler and Check Point.   Citrix offers DIY and managed SD-WAN and SASE services with integration with leading security vendors, such as Palo Alto and Lookout, and AI-driven threat intelligence curated from 10+ threat engines Juniper AI-driven SD-WAN provides better visibility into end-user and application experiences by identifying issues across the network stack that impact user experience and reducing the meantime to repair.   Barracuda's SD-WAN and SASE solutions run as native SaaS services in Microsoft Azure, using the Microsoft Global Network as their primary backbone. These solutions can also be deployed in GCP and AWS. Teldat's SD-WAN solutions offer the best price-performance ratio through a per-pay-use security model.
Coverage Oracle offers global coverage, with on-premises and cloud-based deployments in the major public clouds.  Globally distributed PoPs (100+), servicing customers of all sizes and across all verticals Juniper provides coverage in North America, EMEA, and APAC regions. Barracuda provides coverage in North America, Europe, the Middle East, and Africa Teldat offers global coverage through carries and managed services providers (MSPs), focusing in Western Europe and Latin America, with a stronger customer concentration in Latin America
Backbone type Private (MPLS, point-to-point) and public (broadband, satellite, 3G/4G) backbones  MPLS, LTE, Satellite, Broadband Public (Broadband, wireless legacy, xDLS, 4G/LTE) and private (dedicated, MPLS) backbone Private backbone (Microsoft Global Network)  Private (MPLS) and public (Internet) backbones
Differentiators Oracle's SD-WAN solution includes session-based security via a Session Border Controller to protect against attacks beyond the protocol (IP) layer. Furthermore, Oracle integrates with leading security vendors to provide SWG and firewall capabilities.   Citrix SD-WAN solution offers secure and reliable connectivity with an integrated security stack capable of classifying and securing traffic for more than 4,500 applications Juniper AI-driven SD-WAN, powered by Mist AI, is based on a tunnel-free, session-based architecture, with APIs that enable automation and integration of network and security operations across all sites Barracuda's SASE solution was jointly developed with Microsoft and is offered as a service.  Teldat offers competitive pricing compared to its competitors.
Alignment Oracle's SD-WAN and SASE solutions are best suited for multinational organizations with heavy investments in Oracle's cloud (OCI). Citrix SD-WAN and SASE solutions are best suited for multinational organizations seeking DIY or managed SD-WAN/SASE services. Juniper's solutions are best suited for multinational enterprises seeking DIY or managed SD-WAN/SASE solutions Barracuda's SASE and SD-WAN solutions are best suited for organizations with heavy investments in Microsoft Azure products and services. Teldat solutions are best suited for mid-size enterprises in Europe and Latin America, seeking to minimize technology adoption risks.
Architecture Oracle's SD-WAN architecture consists of physical or virtual gateways at the branch office with DIA, interconnected via public or private backbones SASE:
Device agents and branch appliances connected to a cloud-delivered Secure Internet Access security services stack, managed centrally through a unified management portal

SD-WAN:
Branch office appliances with local Internet breakouts connected to a cloud-delivered security services stack.
Juniper's Secure Edge architecture consists of agentless on-ramp access to cloud resources through SSO portals and globally dispersed public cloud PoPs

Juniper's SD-WAN architecture consists of hubs and spokes, with gateways at spoke sites and virtual or cloud-based firewall appliances at the hub sites.
Barracuda's SASE architecture consists of
device agents (CloudGen Access App), SaaS proxies (CloudGen Access Proxy), and a management console (CloudGen Access Console)

Barracuda's SD-WAN architecture consists of direct Internet and cloud access from branch offices through edge gateways (CloudGen WAN) connected to a private cloud backbone (Microsoft Global Network). 
Teldat's SD-WAN architecture consists of direct Internet and cloud access from branch offices through edge gateways.
Cybersecurity Oracle's SD-WAN Edge offers native stateful zone-based firewalls and integration with Zscaler's SWG and Palo Alto's NGFW. Oracle also offers SD-WAN Security Gateway Solution: the Check Point CloudGuard Edge virtual firewall embedded into its Oracle Talari E100 SD-WAN platform featuring application control, web content filtering, IPS/IDS, antibot and malware protection, and SSL inspection. SASE:
Citrix SASE solution offers ZTNA, SWG, NGFW, CASB, and AI-powered forensics, delivering adaptive authentication and access, remote browser isolation, malware protection, single Sign-on, DLP, sandbox

SD-WAN:
Citrix's partnership with Palo Alto Networks adds an industry leading NGFW to branch office local Internet breakouts, delivered as a phyisical appliance or cloud-deliver PoP via Palo Alto's Prisma Access and managed via Palo Alto NEtworks Panorama
Juniper's Secure Edge solution offers FWaaS, featuring application visibility and control, IPS, malware protection, web content filtering, user identity and dynamic user segmentation, DNS security, SSL inspection, and advanced threat protection

Juniper AI-driven SD-WAN offers firewall, web content filtering, and IDS/IPS.
Barracuda's SASE solution includes SD-WAN, ZTNA (CloudGen Access) SWG, and NGWFaaS, featuring web content filtering, advanced threat protection with sandboxing, SSL inspection, IPS/IDS, malware protection, NGFW, network segmentation, and real-time monitoring. Teldat partners with Check Point to provide branch office firewall capabilities. Furthermore, Teldat incorporates cybersecurity capabilities through be.SAFE Smart and be.SAFE Premium, featuring SWG, Sandbox, antispam, email filtering, NGFW, Shadow IT control, DoS prevention, SSL decryption, IDS/IPS, DNS security, SSL inspection, malware protection for SaaS, cloud storage, and webmail.
Management Oracle offers DIY, managed, and co-managed SD-WAN and SASE services via Oracle's SD-WAN Orchestration Cloud service hosted in Oracle's cloud. Citrix offers DIY and managed SD-WAN and SASE services through certified partners. DIY deployments are managed and orchestrated centrally via the cloud Juniper offers managed SD-WAN and SASE solutions with a single point of contact. Barracuda offers managed and co-managed SD-WAN solutions via partnerships with MSPs. For DIY deployments, Barracuda provides centralized network, security, and SD-WAN management via the CloudGen WAN management portal Teldat offers a fully managed SD-WAN solution through carrier and MSP partnerships. Furthermore, Teldat's SD-WAN solution is centrally managed through Teldat's Base management and orchestration platform. 
Gartner status At the time of this writing, Oracle's SD-WAN and SASE solutions do not appear on any Gartner Magic Quadrant. Gartner places Citrix's solution in the WAN Edge Infrastructure market. As of September 2021, Citrix appears as a Challenger Gartner's WAN Edge Infrastructure magic quadrant. Gartner places Juniper Networks' solution in the WAN Edge Infrastructure market. As of September 2021, Juniper Networks appears as a Visionary on Gartner's WAN Edge Infrastructure magic quadrant. Gartner places Barracuda's solution in the WAN Edge Infrastructure market. As of September 2021, Barracuda appears as a niche player in Gartner's WAN Edge Infrastructure magic quadrant. Gartner places Teldat solution in the WAN Edge Infrastructure market. Teldat appeared as a Niche player in Gartner's 2020 WAN Edge Infrastructure Magic Quadrant. However, as of September 2021, Teldat does not appear in Gartner's WAN Edge Infrastructure magic quadrant. It was dropped because it failed to meet the inclusion criteria.

Suggested Posts

Search for Articles

Looking for something specific? Enter your search below to find information from all of Netify.

Explore Topics

Popular Article Topics

Find articles and helpful resources about any of the following:

Subscribe to Notifications

The Netify Learning Center

Provider and Vendor comparison advice across SD WAN, MPLS, UCAAS and Cloud Voice.

See All Articles

Netify Forbes member logo

For Global IT Decision Makers

The Global SD WAN & Cybersecurity Playbook

Download our vendor and managed service provider guide to the top 10 SD WAN & top 10 SASE cybersecurity solutions for Global companies.