10 Best Managed SD WAN Providers & Solutions

How to compare Managed SD WAN

Over the last 3 years, I've been researching numerous managed SD WAN providers for the Netify marketplace. In this article, I've listed the 10 best providers and their solutions which will fit the needs of most US and UK national and multinational companies. If you want to find the best option for your specific business, please use our free assessment tool to create an SD WAN & SASE/SSE Cybersecurity shortlist.

Comparing Managed SD WAN requires comparison of cost, support, SLA, SASE & SSE security, network underlay, reporting, remote access and cloud. The 10 best managed SD WAN providers and solutions which should make your shortlist are:

  1. Cato
  2. Aryaka
  3. Masergy
  4. BT
  5. AT&T
  6. COLT
  7. GTT
  8. Lumen
  9. Open Systems
  10. TATA
Who is the best Global SD WAN provider?

Netify nominates Cato Networks as the best Global SD WAN provider. Cato Networks offers a cloud-native SD WAN-as-a-service solution with a complete set of networking and security features delivered from the cloud. Cato operates a private backbone spanning over 65 PoPs, across all industry verticals.

Please complete the Netify SD WAN assessment to learn whether Cato is a good fit for your business.

Create your own SD WAN shortlist

Take our quiz to get your own SD WAN managed service provider suggestions.

Compare the market

1. Cato Networks

Cato_Networks_Logo

Who is Cato Networks?

Cato Networks is an Israeli company founded in 2015 to deliver cloud-based, unified networking and security solutions. The company's SD-WAN and SASE offerings are provided as a fully managed and co-managed cloud service over a POP-based independent global backbone extending six (6) continents, with multiple connectivity options to integrate SaaS, PaaS, and IaaS environments.

How does Cato Networks fit your business needs?

Cato Networks' flagship product is Cato SASE with SSE 360, an end-to-end security and networking solution delivered as a cloud-based, single-vendor platform. This solution is provisioned over a global private backbone that securely connects branch offices, data centers, remote users, and clouds. Branch offices connect to the nearest Cato PoP via the Cato Socket edge device, while the Cato vSocket connects multiple public clouds via IPsec tunnels. Similarly, clientless and client-based remote access for mobile users is available via Cato ZTNA.

Built directly into Cato SASE Cloud is Cato SSE 360, providing consistent security policy enforcement across all edges and traffic.

The company offers a 99.999% uptime SLA and around-the-clock global NOC and SOC support.

Who are Cato Networks' main competitors?

Cato Networks' main competitors include Palo Alto Networks, Fortinet, Versa Networks, Aryaka, VMWare, Cisco Meraki, and Aruba Networks.

What are Cato Networks' main SD WAN and SASE features?

Cato Networks' SD-WAN solution is delivered over a global private backbone interconnected via over seventy-five (75) points of presence (POPs) and fully managed by Cato. Cato Networks' SD-WAN provides bandwidth optimization and resiliency through link aggregation and active-active or active-passive load balancing, increasing network capacity and minimizing downtime. Similarly, Cato Networks' dynamic path selection and policy-based routing allow customers to prioritize mission-critical traffic, routing business-critical applications over high-speed circuits and non-business traffic over low-speed links. Other standard SD-WAN features offered by Cato Networks include application identification via deep packet inspection, QoS, BGP> integration, and PoP-based packet loss mitigation via automatic link failover.

 

Cato Networks' top SASE/SSE features include:

What are the benefits (pros) and drawbacks (cons) of Cato Networks?

Benefits (pros)

Drawbacks (cons)

Fully managed cloud-native solution delivered via a single-vendor unified networking and security stack

Limited security feature set compared to similar enterprise-grade solutions.

Highly scalable and fault-tolerant via zero-touch SD WAN edge devices and link aggregation.

Limited integration with third-party identity providers

Centralized management via a user-friendly and simplified web user interface

Relatively new solution that is still gaining popularity amongst the IT community


How has Cato Networks evolved from previous models or releases to provide improvements, address issues, or help customers make a purchase decision?

Cato Networks' core network architecture has not seen dramatic changes since the company's first product launch in 2016. The company's initial product offering consisted of cloud-native security capabilities featuring NGFW, URL filtering, remote access VPN, and application control, all delivered via a POP-based network backbone to which customers connected via encrypted links using Cato Sockets (for remote sites), vSockets (for public clouds), and software clients (for mobile users).

The company has since introduced additional security capabilities, including a threat hunting service fully contained within Cato's private global backbone and offered to Cato customers automatically at no cost. Other security capabilities introduced by Cato include a cloud access security broker built directly into the Cato SASE Cloud and a managed detection and response (MDR) platform.

Key choices in how Cato Network has been designed and their effect on the users

Cato Networks is a cloud-native, unified networking and security solution with extensive global coverage. The solution's PoP-based architecture ensures minimal latency between branch offices and the nearest Cato PoP, resulting in better network stability and performance than traditional WAN architectures.

The solution is highly scalable; the Cato Socket, Cato's SD-WAN edge gateway, allows customers to turn up remote sites quickly with minimal effort, significantly increasing time-to-market. Cato's link aggregation and load balancing are among the solution's most valuable features, offering increased end-to-end WAN and cloud traffic optimization and considerably reducing network downtime via link failover without a performance impact. Cato's built-in security stack allows clients to secure Internet, cloud, and internal traffic without additional security appliances.

Key decision-making factors for the product's category and how the product performs in those vital decision-making areas

Coverage

Cato Networks offers worldwide coverage via 75+ POPs deployed across six continents. The company provides follow-the-sun global NOC and SOC support services and a self-service customer portal for customers to monitor, manage, and troubleshoot network and security issues.

Deployment Agility

Cato Networks' initial deployment is straightforward and quick. The Cato Socket's plug-and-play architecture allows branch offices to be turned up and connected to the Cato SASE Cloud in minutes without requiring an experienced IT professional.

Network Security

Cato Networks' SSE 360 offers a complete, single-vendor security stack built directly into Cato SASE Cloud, featuring the key SSE security capabilities, including ZTNA, NGFW, and SWG.

Service Levels and Uptime

Cato Networks guarantees a 99.999% overall monthly service availability metric, with up to 9% monthly fees credited back to customers when SLAs fall below 96.9%.

Cloud Connectivity

Cato Networks connects to cloud-based data centers (i.e., Amazon Web Services, Microsoft Azure) via the Cato vSocket virtual gateway.

Additional Resources

Purchase Intent Data for Enterprise Tech Sales and Marketing - TechTarget

Cato Networks Reviews

How much does Cato Networks cost?

Cato Networks' pricing varies based on several factors, including total bandwidth per connection, the number of mobile users, and the SD-WAN edge device form factor (physical vs virtual).


2. Aryaka

Aryaka Logo-1

Who is Aryaka?

Aryaka is a North American company founded in 2009 to deliver software-defined network connectivity across wide-area networks. The Company offers managed SD-WAN and SASE solutions using proprietary network and security technology over a cloud-first POP-based global network backbone extending six (6) continents and branching out to multiple public clouds.

How does Aryaka fit your business needs?

SmartConnect is Aryaka's signature product, a single-vendor, all-in-one managed SD-WAN (or SD WANaaS) solution providing end-to-end network connectivity between hub locations, branch offices, and multiple clouds globally, with guaranteed SLAs and uptime up to 99.999% and deterministic network performance and latency. Complementing its SD WANaaS solution are Prime EZ and Prime Pro, Aryaka's cloud-first SASE platforms designed as a single-vendor security stack delivered from the cloud.

Who are Aryaka’s main competitors?

VMWare, Versa Networks, Cato Networks, Aruba Networks, and Cisco Meraki are among Aryaka's top competitors.

What are Aryaka’s main SD WAN and SASE features?

Aryaka SD-WAN solution is delivered over a Layer 3 and Layer 2 private backbone with varying fixed bandwidth tiers for maximum flexibility and cost-effectiveness. The solution offers multiple cloud connectivity options, including IaaS-SDCI, SaaS peering (add-on), cloud security connector to integrate with third-party cloud security providers, and cloud transport networks to extend connectivity to public clouds, such as Microsoft Azure and Amazon Web Services (AWS). Aryaka's standard SD-WAN features include multiple traffic steering and link optimization options, including path preference, selection, replication, packet loss recovery, de-jitter, and load balancing.

Aryaka’s top SASE features include:

  • Layer 3, 4, and 7 (application) stateful inspection firewall with optional managed or hosted NextGen firewalls.
  • Micro-segmentation
  • Private access is an add-on to Prime EZ and Prime Pro offerings.
  • Secure web gateway (SWG) for branch users with an option to cover remote and mobile users, featuring URL filtering, malware protection, SSL inspection, and L3/L4 stateful inspection firewalls for Internet breakouts.

What are the benefits (pros) and drawbacks (cons) of Aryaka?

Benefits (pros)

Drawbacks (cons)

Fully managed, end-to-end SD-WAN solution, including first and last-mile procurement and management.

Many desirable capabilities, such as SaaS peering, ZTNA, and SWG, are available as upgrades or optional add-ons.

Aryaka’s SD WAN service is available in regions where few providers operate, such as China.

The current product offering does not offer CASB and DLP capabilities.

Centralized co-management and self-service capabilities are available via the MyAryaka customer portal.

Limited coverage in South America and Africa with a single PoP location in each continent.


How has Aryaka evolved from previous models or releases to provide improvements, address issues, or help customers make a purchase decision?

Aryaka's latest product improvements include a complete re-design and re-engineering of its global backbone, Aryaka Flexcore, to deliver connectivity over L2 and L3 network backbones. With Aryaka Flexcore, customers can connect sites with MPLS-like performance and reliability requirements via Aryaka's fiber-connected L2 backbone and opt for a more cost-effective L3-based connectivity option for locations with Internet and public cloud connectivity requirements.

Aryaka also introduced AppAssure to help customers gain more visibility and control over their applications' performance through application deep packet inspection (DPI), classifications, steering, and optimization.

Lastly, in Q4 2020, Aryaka launched Aryaka SmartSecure Private Access, a predictable and flexible Zero-Trust Network Access (ZTNA) solution allowing remote users to connect to enterprise applications regardless of device and location. By leveraging Aryaka's L2 backbone and globally distributed PoPs, SmartSecure Private Access offers superior and deterministic application performance, eliminating common connectivity issues often seen in solutions that rely on best-effort Internet transports.

Key choices in how Aryaka has been designed and their effect on the users

Aryaka SmartConnect is a single-vendor, cloud-based unified networking and security solution with global coverage, available as a fully managed or co-managed subscription service. Aryaka's SmartConnect and Prime SASE offerings rely on Aryaka's L2 and L3 PoP-based, multi-cloud core backbone network. Branch offices and data centers connect to Aryaka's nearest PoP via the Aryaka Network Access Point (ANAP) device with minimal latency (sub 30 ms). Furthermore, Aryaka's core backbone network provides on-ramp access to cloud-based data centers via direct connections, IPSec tunnels, and leading SaaS providers via co-location sites.

Aryaka's turnkey SD-WAN solution includes optional procurement and management of first and last-mile circuits, allowing customers to outsource carrier management responsibilities.

Key decision-making factors for the product's category and how the product performs in those vital decision-making areas

Coverage

Aryaka offers worldwide coverage via more than forty (40+) PoPs distributed across six (6) continents. The Company provides 24x7 global network monitoring and service orchestration and a customer portal, MyAryaka, for essential self-service monitoring, reporting, troubleshooting, and management.

Agility

The Aryaka Network Access Point (ANAP) is Aryaka's plug-and-play SD-WAN edge device enabling connectivity between branch offices and Aryaka's FlexCore backbone network. Aryaka's zero-touch deployment model allows customers to turn up new sites quickly with minimal technical effort.

Network Security

SmartConnect includes standard built-in security features. More advanced security capabilities are available in Aryaka Prime SASE, natively and via integrations with leading third-party security vendors, such as Zscaler and CheckPoint.

Service Levels and Uptime

Aryaka guarantees a 99.999% overall monthly service availability> metric for the SmartConnect EZ service package and 99.99% for SmartConnect Pro.

Cloud Connectivity

Aryaka extends network connectivity to leading public clouds (IaaS/PaaS) and SaaS providers. The former is achieved through direct connections or private links and IPSec tunnels to the major cloud providers. The latter requires using Aryaka's Virtual Office (VO) solution consisting of a virtual site that routes traffic from Aryaka's PoPs to the nearest SaaS co-location site.

Additional Resources

Dell’Oro Group Research Recognizes Aryaka as Delivering SASE with Unified Security and Network Connectivity

How much does Aryaka cost?

Aryaka's pricing varies based on service type (SmartConnect EZ vs SmartConnect Pro) and total bandwidth per connection, with six fixed bandwidth tiers available from which to choose.


3. Masergy (Comcast Business)

Masergy Logo

Who is Masergy?

Masergy is a North American company headquartered in Plano, Texas, founded in 2000 to deliver software-defined networking solutions. The company offers managed and co-managed, best-of-breed SD-WAN and SASE solutions through integrations with leading networking and security vendors delivered over a global network comprising fifty-one (51) points of presence. Comcast acquired Masergy in 2021, but the company has been operating independently since the acquisition.

How does Masergy fit your business needs?

Masergy offers managed and co-managed SD-WAN using an Internet-only model, overlying the solution over any private and public network. With this model, customers can "bring their own network" or opt for Masergy's private or public connectivity options, creating an ideal, low-cost alternative for customers with long-term network contracts.

Masergy's SD-WAN edge device is a Fortinet product with built-in standard and advanced security features. Masergy also addresses the work-from-home use case with a lightweight Fortinet SD-WAN device installed in users' home offices to boost the performance of residential Internet circuits.

From a SASE/SSE standpoint, Masergy offers tiered security services ranging from standard unified threat protection to fully managed security services.

Who are Masergy’s main competitors?

Hughes Network Systems, MetTel, AT&T, and Lumen are Masergy’s top competitors.

What are Masergy’s main SD WAN and SASE features?

Masergy's SD-WAN solution is delivered over a global network of fifty-one (51) points of presence (POPs). The solution integrates artificial intelligence via AIOps to predict and self-heal network performance issues and outages by evaluating and automatically redeploying network policies before user impact is experienced. Masergy's most innovative managed SD-WAN feature is Masergy Performance Edge, a propriety technology that boosts network performance across low-cost broadband connections, increasing stability and minimizing packet loss.

Masergy’s SASE/SSE features include:

What are the benefits (pros) and drawbacks (cons) of Masergy?

Benefits (pros)

Drawbacks (cons)

Masergy offers co-managed SD-WAN services for customers who need to retain control of network and security policy management.

Masergy does not currently have a ZTNA solution integrated into its SASE offering.

Masergy's IA-integrated SD-WAN solution helps predict outages and cloud application performance issues through the continual evaluation of network policies, bandwidth utilization, and application usage.

Masergy offers SASE security capabilities through integration with third-party security vendors rather than natively via a single-vendor stack.

Masergy offers a unified web portal enabling customers to manage, monitor, and troubleshoot network, security, and application performance issues from a single pane of glass.

 

Masergy offers competitive SLAs with 100% committed uptime for SD WAN sites deployed with high availability.

 


How has Masergy evolved from previous models or releases to provide improvements, address issues, or help customers make a purchase decision?

Masergy has introduced significant enhancements to its service line over the last decade, the most innovative being AIOps and Performance Edge.

Masergy launched AIOps in 2019 as the industry's first network, security, application optimization and self-healing technology powered by artificial intelligence. Masergy Performance Edge was introduced in 2021 as a proprietary technology designed to increase application performance over public broadband circuits by minimizing packet loss. Together with AIOps, Masergy Performance Edge intends to transform the low-cost Internet circuit into a high-quality service.

Masergy also offers three-tier SD-WAN and SASE/SSE security services, including Unified Threat Management (lowest tier), Threat Monitoring and Response, and Managed Security Services (most complete level).

Key choices in how Masergy has been designed and their effect on the users

Masergy's SD-WAN and SASE services have been designed for affordability, security, flexibility, and ease of management. The company's Internet-only approach, paired with Masergy's Performance Edge proprietary technology, delivers a low-cost, high-performing solution for customers with low-quality broadband links. Furthermore, Masergy's direct connectivity with the leading public cloud and SaaS providers offers improved public cloud application performance for on-premises and remote users.

Masergy's SD-WAN solution embeds standard and advanced security features into edge SD-WAN devices, allowing companies to provide a turnkey branch office solution without additional security appliances.

For customers seeking a co-managed SD-WAN solution, Masergy's customer portal provides a single location from where all SD-WAN edge devices are managed, allowing customers to push new configurations to multiple devices with minimal effort.

Key decision-making factors for the product's category and how the product performs in those vital decision-making areas

Coverage

Masergy offers worldwide coverage via fifty-one (51) POPs deployed across five (5) continents, with limited availability in Africa. The company has NOCs and SOCs on three continents, providing monitoring and technical support in a follow-the-sun model. Moreover, customers opting for Masergy's co-managed SD-WAN solution benefit from a self-service portal for real-time monitoring and management of networking and security policies.

Deployment Agility

Masergy's Fortinet SD-WAN edge devices are automatically provisioned upon connecting to Masergy's customer cloud portal, where security and network policies are configured. The zero-touch provisioning approach speeds up the initial deployment and subsequent moves and changes.

Network Security

Masergy offers standard SD-WAN security capabilities built directly into the Fortinet SD-WAN edge device. Masergy's SASE offering is limited (no support for ZTNA) and requires multi-vendor integration.

Service Levels and Uptime

Masergy offers one of the most competitive SLAs in the industry, committing to 100% service availability for SD-WAN sites configured with high availability and direct cloud connections deployed with redundancy.

Cloud Connectivity

Masergy offers direct connections to the leading public cloud vendors, including Microsoft Azure, Amazon Web Services, and Google Cloud Platform. Direct connectivity to SaaS and PaaS is also available, including for Salesforce and SAP.

Additional Resources

https://www.masergy.com/about-us

https://files.masergy.com/hubfs/Conversational SD WAN 2-7-18.pdf

https://f.hubspotusercontent40.net/hubfs/5410995/Product Sheets/Masergy Solution Brief - SD WAN Secure.pdf

https://www.masergy.com/solution-brief/managed-SD WAN

How much does Masergy cost?

Cost details or pricing/licensing structure is not publicly available.


4. BT

BT-Endorsement-PremierPartner-CMYK-1

Who is BT?

BT is a British telecommunications company headquartered in London and the largest provider of telephony services in the United Kingdom. The company offers managed and co-managed SD-WAN solutions from prominent third-party vendors with BT's public and private backbone as the transport, which extends to more than one hundred and ninety-eight (198) countries, connecting to eight (8) public cloud providers in seventy-four (74) cities.

How does BT fit your business needs?

BT offers managed SD-WAN solutions from Cisco Meraki, Cisco Viptela, Nuage, Fortinet, and VMWare, with BT's global backbone network as the underlay. BT's universal CPE supports multiple virtual network functions (AFVs) and can be deployed as a virtual CPE in the cloud or a physical edge device. All SD-WAN solutions are delivered as managed and co-managed services. BT also offers a SASE solution based on the VMWare SASE platform.

BT's subsidiary in China, BT China Communications Limited, is licensed to operate in China and deliver VPN and Internet services in the region.

Who are BT's main competitors?

BT's main competitors include AT&T, Vodafone, Verizon, Tata Communications, NTT Communications, Singtel, China Telecom Global, and Colt.

What are BT's main SD WAN and SSE features?

BT's SD WAN features vary based on the SD WAN vendor:

  • BT with VMWare SD-WAN provides dynamic multi-path optimization using VMWare's Dynamic Path Optimization technology and many virtual network functions, including NextGen firewalls, WAN optimization, and traffic acceleration. 
  • BT with Cisco Meraki SD-WAN offers application prioritization, dynamic path selection, and failover via multiple access methods. 
  • BT with Nuage SD-WAN introduces support for remote workers and mobile users. 
  • Cisco Viptela SD-WAN allows customers to deploy secure SD-WAN on BT's hybrid underlay, benefitting from intelligent routing and improved application performance.

BT SSE features, powered by the VMWare SASE Platform, include:

  • Next-generation cloud firewall
  • URL classification and web content filtering
  • Inline CASB
  • Malware protection
  • ZTNA via VMWare Secure Access Service Edge Platform

What are the benefits (pros) and drawbacks (cons) of BT SD WAN?

Benefits (pros)

Drawbacks (cons)

BT's global backbone network offers excellent coverage in all regions.

Long lead times for new site deployments.

BT's uCPE provides customers with more SD-WAN vendor choices.

 

BT is licensed to operate in China and can offer in-country services with local billing.

 


How has BT evolved from previous models or releases to provide improvements, address issues, or help customers make a purchase decision?

BT's service model has evolved by extending customers' choice of SD-WAN technologies. In 2018, BT launched BT Connect Cisco SD-WAN, a global managed SD-WAN service based on Cisco and BT's orchestration capabilities, followed by VMWare SD-WAN with universal CPE built on DELL Technologies in 2020, offered as a managed and co-managed service.

In 2021, BT introduced a new managed SD-WAN service based on Fortinet to enhance its Managed Firewall offering with Fortinet Secure SD-WAN. The most recent enhancements include a turnkey, managed SASE solution based on VMWare SASE.

Key choices in how BT has been designed and their effect on the users

BT's managed SD-WAN service is designed around universal hardware capable of running virtualized SD-WAN solutions from leading vendors. This allows customers to choose the SD-WAN vendor that best fits their needs. The versatile CPE edge device offers a common platform to deliver SD-WAN services across multiple sites, consolidate hardware, and choose networking, monitoring, and security applications.

Key decision-making factors for the product's category and how the product performs in those vital decision-making areas

Coverage

BT's global backbone network consists of over five thousand (5,000) PoPs distributed across more than one hundred and ninety-eight (198) countries and territories. The company provides 24x7x365 support services worldwide, with local language support and a single point-of-contact model for troubleshooting.

Deployment Agility

BT's SD-WAN service can rapidly be installed with zero-touch deployments and mobile or customer Internet basic connectivity delivered within five (5) business days.

Network Security

BT continuously monitors its global backbone network for anomalies and cyberattacks and adheres to a systematic patch management process to keep devices updated with the latest security updates.

Service Levels and Uptime

BT aims to provide 100% service availability, with a twenty (20) milliseconds or less guaranteed average round-trip-time for connections within the UK core network.

Cloud Connectivity

BT partners with VMWare to provide connectivity to public clouds using VMWare's cloud gateway infrastructure, including AWS, Google Cloud, and Microsoft Azure. BT also offers cloud connections to HP and Salesforce.

Additional Resources

https://www.bt.com/about/bt

https://www.globalservices.bt.com/en/solutions/solution/SD WAN-solutions#:~:text=SD%2DWAN%20(or%20software%2D,internet%2C%20and%204G%20%2F%205G.

https://www.globalservices.bt.com/en/aboutus/news-press/bt-launches-new-global-managed-service

https://investors.delltechnologies.com/news-releases/news-release-details/bt-expands-its-dynamic-network-services-dell-technologies-onsite

https://business.bt.com/content/dam/bt/business/v2/PDF/broadband-internet/btnet_sla.pdf

How much does BT cost?

Unable to find pricing information.


5. AT&T

AT&T Logo

Who is AT&T?

AT&T is an American telecommunications company headquartered in Dallas, Texas, with a global presence in more than two hundred (200) countries and the largest share of managed SD-WAN locations in the North American market. The company offers managed SD-WAN and SASE solutions from prominent third-party vendors. The solutions are carrier-agnostic and can run over AT&T's MPLS and Internet backbone or as an over-the-top solution.

How does AT&T fit your business needs?

AT&T offers managed SD-WAN solutions based on Cisco, Aruba, VMWare, and Palo Alto Networks and SASE solutions from Cisco, Fortinet, Palo Alto Networks, and VMWare, managed by the AT&T Cybersecurity division. AT&T also offers the FlexConnect platform, AT&T's own managed SD-WAN service running on universal hardware and centrally managed from a cloud-based orchestrator. FlexConnect is also available as a self-managed service.

Who are AT&T's main competitors?

AT&T's top competitors include Cato, Masergy, Aryaka, Versa, Cisco, GTT, Lumen, Palo Alto, and Globalgig.

What are AT&T's main SD WAN and SSE features?

AT&T's main SD-WAN features include dynamic path selection, dynamic routing, WAN aggregation, and near real-time performance monitoring, enabling optimal traffic delivery across different network transports.

What are the benefits (pros) and drawbacks (cons) of AT&T?

Benefits (pros)

Drawbacks (cons)

AT&T's balanced SD-WAN portfolio offers prominent vendor technologies and deployment options, including hybrid, network-based, and over-the-top.

AT&T technical support is fragmented, often leading to long lead times to resolve customer issues.

AT&T offers its own SD-WAN solution, FlexConnect, based on a universal compact SD-WAN edge device

 

AT&T's site-by-site flexibility allows customers to combine SD-WAN and non-SD WAN sites on the same network

 


How has AT&T evolved from previous models or releases to provide improvements, address issues, or help customers make a purchase decision?

AT&T's service portfolio has evolved from point-to-point private networks and network-based SD-WAN to delivering managed SD-WAN solutions from leading third-party vendors.

In 2020, AT&T began offering managed SD-WAN services based on Cisco SD-WAN technology to customers worldwide with integrated security features consistently deployed across branch office locations and clouds. The company later announced its introduction of AT&T SD-WAN with Cisco's Teleworker solution in 2022, allowing companies to quickly set up virtual offices for remote employees by leveraging employees' home internet access.

AT&T also introduced AT&T SD-WAN with Cisco - FISMA, a FISMA-compliant, managed SD-WAN service for the public sector. Lastly, AT&T now offers a co-managed SD-WAN solution based on Cisco SD-WAN.

Key choices in how AT&T has been designed and their effect on the users

AT&T's managed SD-WAN services have been designed with flexibility and operational simplicity at the forefront, offering customers the most diverse portfolio to meet their needs. AT&T's managed SD-WAN services run over AT&T's backbone and partner networks, with an option to deploy proprietary SD-WAN edge devices from third-party vendors or universal hardware running virtual network functions (VNFs). With FlexWare, AT&T's universal CPE, customers can deploy various applications from different vendors. These include virtual SD-WAN from VeloCloud, Viptela, and Silver Peak, virtual firewall software from Fortinet, Check Point, and Palo Alto, and WAN optimization virtual appliances from Riverbed and Silver Peak.

Key decision-making factors for the product's category and how the product performs in those vital decision-making areas

Coverage

AT&T's managed SD-WAN solutions are available in more than two hundred (200) countries and territories. The company provides a 24x7x365 global help desk and level-3 expert support.

Deployment Agility

AT&T's managed SD-WAN solutions provide significant deployment flexibility with zero-touch SD-WAN edge devices controlled from a central management console, allowing customers to add new sites or scale down existing locations quickly.

Network Security

AT&T's managed SD-WAN and SASE solutions are integrated with AT&T's Alien Vault Lab Threat Intelligence Platform.

Service Levels and Uptime

AT&T offers varying SLAs based on CoS (class of service), with a guaranteed 99.95% packet delivery rate for real-time CoS and 99.5% for non-critical low CoS.

Cloud Connectivity

AT&T's NetBond for Cloud connects AT&T's MPLS and Internet backbone to major public cloud providers.

Additional Resources

https://www.business.att.com/content/dam/attbusiness/reports/frost-radar-north-american-managed-SD WAN-services-market-report.pdf

https://www.business.att.com/content/dam/attbusiness/briefs/internet-and-networking-SD WAN-network-based-product-brief.pdf

https://newsroom.cisco.com/c/r/newsroom/en/us/a/y2020/m07/at-t-expands-its-SD WAN-offering-with-cisco-to-help-businesses-with-distributed-workforces-digitize-faster-with-advanced-security.html

https://about.att.com/story/2021/att_sdwan_cisco_expands.html

How much does AT&T cost?

AT&T's managed SD-WAN solution starts at $219 per month per site.


6. COLT

COLT MPLS Services

Who is Colt?

Colt is a British company headquartered in London, founded in 1992 as a telecommunications service provider. The company offers managed and co-managed SD-WAN and SASE solutions through integrations with leading third-party SD-WAN and security providers. Colt SD-WAN and SASE offerings are delivered over Colt's fully-owned public and private backbone network, the Colt IQ Network, which extends to four continents.

How does Colt fit your business needs?

Colt offers managed SD-WAN solutions based on Versa Networks and VMWare, overlayed on its own global private and public backbone network. The company has a significant presence and infrastructure across Europe and the Asia Pacific, with limited coverage in South America, Central America, and Africa. With over five hundred (500) data centers distributed across forty-eight (48) European cities, Colt is an ideal candidate for companies operating out of Europe. 

Colt also offers co-managed SD-WAN White Label solutions with a customized client portal.

Who are Colt’s main competitors?

Colt’s main competitors include Orange Business Services, AT&T, Verizon, NTT, BT, and Telefonica.

What are Colt’s main SD WAN and SASE features?

Colt's managed SD-WAN solution offers standard and advanced SD-WAN capabilities delivered as network function virtualization (NFV) modules in a single branch office device. The standard features include basic application traffic steering and layer 3/4 stateful inspection firewall. The basic application traffic steering feature allows customers to route application traffic via different links based on IP address, network port, protocol, and network performance metrics, such as jitter, latency, and packet loss.

Advanced SD-WAN capabilities include deep packet inspection of over 2,600 applications, dynamic multi-path routing based on URL, and layer 7 firewalls with DDoS protection. Colt also offers WAN optimization using packet cloning and Forward Error Correction (FEC) to speed-up mission-critical application traffic over low-quality circuits.

Lastly, Colt's SASE/SSE features include a secure web gateway based on Versa SASE.

What are the benefits (pros) and drawbacks (cons) of Colt?

Benefits (pros)

Drawbacks (cons)

Colt offers a co-managed SD-WAN White Label, allowing network service providers to resell Colt's SD-WAN service globally.

Colt's backbone network has minimal coverage in South America, Central America, and Africa.

Colt offers multiple SD-WAN edge device options, including pre-configured COTS servers, universal CPEs, and SD-WAN edge devices by Versa and VMWare.

Colt offers limited security capabilities at the branch office compared to its competitors.

Colt supports VoIP over SD-WAN through VoIP traffic prioritization.

 


How has Colt evolved from previous models or releases to provide improvements, address issues, or help customers make a purchase decision?

Colt's first SD-WAN service was launched in 2016 across thirteen (13) European countries, offering an SD-WAN solution based on Versa Networks, connected via Colt's global private and public network backbone. Since then, Colt has expanded its service globally and introduced significant enhancements and technological advances to address customers' changing network landscape.

Colt launched SD-WAN 2.0 in 2020, introducing new features designed to enhance cloud application access via an improved WAN optimization suite. SD-WAN 2.0 also added support for network segmentation and DoS protection at the network edge, improved visibility into network traffic with AI/ML, and increased scalability via zero-touch CPE devices.

In 2021, Colt introduced Colt SD WAN Remote Access, underpinned by Versa Secure Access (VSA), to address the remote worker use case.

In June 2022, Colt announced its fully integrated SASE solution based on Versa SASE, offering secure Internet and public cloud application access for on-premises and remote users.

Key choices in how Colt has been designed and their effect on the users

Colt SD-WAN solution has been designed to provide high-performing and high-bandwidth connectivity over Colt's global backbone network. The solution relies on network function virtualization (NFV) to deliver different functions within a single CPE device, including firewall, application monitoring, and router. Using NFVs, Colt can integrate SD-WAN solutions from leading vendors using its edge hardware.

For customers requiring higher availability levels, Colt offers a dual CPE solution that can operate in active-active or active-passive mode, increasing bandwidth while minimizing the impact of circuit outages.

While Colt manages all aspects of the network underlay and CPE devices, customers can manage network and security policies across multiple CPE devices and gain visibility into network and application analytics from a single web portal.

Lastly, Colt's CPEs are designed with dual IPv4 and IPv6 stacks, allowing customers to deploy or migrate to IPv6 networks.

style="letter-spacing: 0px; background: var(--df-editor-background);">Key decision-making factors for the product's category and how the product performs in those vital decision-making areas

Coverage

Colt's private and public backbone network, Colt IQ Network, connects more than two hundred (200) cities in twenty-eight (28) countries across North America, Europe, and Asia, including fifty-one (51) metropolitan areas. The company has multiple technical support centers in Europe, Asia, and North America and offers 24x7x365 NOC support.

Deployment Agility

Colt's SD WAN edge devices ship pre-configured with a basic configuration, enabling quick site activation and turn-up without requiring technical resources onsite.

Network Security

Beyond the basic and advanced firewall and DoS features built into SD-WAN edge devices, Colt offers a fully integrated SASE solution based on Versa SASE. The solution includes SWG and ZTNA powered by Versa Secure Web Gateway and Versa Secure Access (VSA).

Service Levels and Uptime

Colt offers guaranteed SLAs up to 99.99% for different services, including installation, availability, repair, and network performance.

Cloud Connectivity

Colt peers with the leading public cloud provider from data centers and enterprise locations using Cloud On Demand, enabling direct connectivity into Microsoft Azure, Amazon Web Services, and Google Cloud Platform.

Additional Resources

https://www.sdxcentral.com/articles/news/colt-rolls-SD WAN-13-european-countries/2016/10/

https://www.colt.net/resources/colt-launches-multi-cloud-connectivity-underpinned-by-its-award-winning-SD WAN-offering/

https://www.colt.net/resources/colt-launches-SD WAN-2-0-creating-a-superior-SD WAN-experience/

https://www.colt.net/resources/colt-launches-global-SD WAN-white-label-solution/

How much does Colt cost?

Cost offers two pricing models, Flex and Traditional. The Traditional model allows customers to pay a fixed monthly rate, plus standard installation charges, over the contract term, which can range from twelve to thirty-six months. Conversely, the Flex model allows customers to pay per hour without entering into a long-term commitment.


7. GTT

GTT

Who is GTT?

GTT is a North American telecommunications provider headquartered in McLean, Virginia, operating a Tier-1 IP backbone spanning more than six hundred (600) points of presence across one hundred and forty (140) countries in six (6) continents. The company offers managed and self-managed SD-WAN and SASE solutions based on third-party vendors underpinned by GTT's global MPLS and Internet backbone.

How does GTT fit your business needs?

GTT's SD-WAN portfolio includes managed and self-managed solutions based on Aruba Silver Peak, VMWare VeloCloud, and Fortinet technology. GTT offers two specific service plans based to meet its customers' needs, including:

  • DIY SD-WAN with GTT circuits, a solution that runs on GTT's Tier 1 Internet backbone, allowing the customer to choose the SD-WAN technology and network access at every location and manage user and application-level policies
  • Managed SD-WAN, a turnkey, fully managed SD-WAN solution with GTT as the transport network.

Both service packages leverage GTT's network-based SD-WAN gateways (universal CPEs) running many virtual network functions (VNFs).

GTT offers a managed, single-vendor SASE solution, Secure Connect, unifying SD-WAN with cloud-based security.

Who are GTT's main competitors?

GTT's main competitors include Tata Communications, AT&T, Orange Business Services, BT, Masergy, Verizon, Lumen, and Vodafone.

What are GTT's main SD WAN and SSE features?

GTT's main SD-WAN features include application-based dynamic path selection, allowing customers to prioritize mission-critical applications and latency-sensitive traffic. The company also provides a client portal where customers can configure policies and gain insights into network performance and bandwidth utilization per application, location, and user.

GTT's Secure Connect SASE solution offers NextGen FWaaS, malware protection, SWG, and CASB.

What are the benefits (pros) and drawbacks (cons) of GTT?

Benefits (pros)

Drawbacks (cons)

GTT is a Tier-1 Internet service provider with worldwide coverage.

GTT’s financial future may be uncertain after the company filed for bankruptcy under Chapter 11 in 2021.

GTT offers a selection of network access options, including EoC, DSL, cable, Ethernet over fiber, and 3G/4G

GTT's network coverage is limited to Latin America and Asia.


How has GTT evolved from previous models or releases to provide improvements, address issues, or help customers make a purchase decision?

GTT has broadened its SD-WAN service portfolio by adding multiple vendor platforms, offering customers more product choices, better network performance, and integrated security features.

In 2020, GTT introduced an SD-WAN solution based on Fortinet Secure SD-WAN, offering a built-in next-generation firewall and threat management capabilities. The company also launched a managed SD-WAN solution based on Silver Peak technology for the North American market.

The latest enhancements brought by GTT include the Secure Co-Manage feature available in the EtherVision portal, providing customers with increased network security visibility and real-time network and security policy configuration.

Key choices in how GTT has been designed and their effect on the users

GTT's SD-WAN solution is underpinned by its network-based SD-WAN gateways deployed as a collection of virtualized network functions (NVFs) on commodity hardware with a selection of SD-WAN technologies from leading vendors deployed as virtual appliances, reducing upfront and ongoing maintenance costs.

Key decision-making factors for the product's category and how the product performs in those vital decision-making areas

Coverage

GTT's Tier-1 IP backbone extends to over one hundred and forty (140) countries across six (6) continents, with over six hundred (600) global PoPs and three thousand (3,000) regional access partners. The company manages over one hundred thousand (100,000) operational SD-WAN devices, providing 24x7x365 NOC and SOC services for continuous end-to-end monitoring.

Deployment Agility

GTT's SD-WAN gateways are zero-touch. The company also offers 3G/4G wireless-based Internet access to turn up new locations quickly.

Network Security

GTT provides a network-based firewall integrated into the SD-WAN edge device. Additionally, GTT offers optional advanced security services for Internet-based traffic and SaaS applications, including web content filters and DDoS protection.

Service Levels and Uptime

GTT guarantees a 99.999% monthly service availability.

Cloud Connectivity

GTT offers direct connectivity to the major public cloud providers, including AWS, Microsoft Azure, IBM Cloud, and Oracle Cloud.

Additional Resources

https://www.gtt.net/us-en/services/secure-networking/sase-secure-connect

https://www.gtt.net/us-en/services/secure-networking/sase-secure-connect/firewall-as-a-service-fwaas

https://www.gtt.net/us-en/services/secure-networking/sase-secure-connect/secure-web-gateway-swg

https://www.gtt.net/us-en/services/secure-networking/sase-secure-connect/cloud-access-security-broker-casb

https://www.gtt.net/media/1427/SD WAN-data-sheet.pdf

https://learn.gtt.net/rs/561-UET-799/images/GTT-Corporate-Brochure-US.pdf

https://www.fortinet.com/ru/corporate/about-us/newsroom/press-releases/2020/gtt-expands-SD WAN-portfolio-by-adding-fortinet-secure-SD WAN

https://www.gtt.net/us-en/media-center/press-releases/gtt-expands-managed-SD WAN-service-offering-in-americas

How much does GTT cost?

GTT offers managed SD-WAN devices with a built-in firewall at a fixed monthly cost. Additionally, GTT offers flat-rate, burstable, and aggregate billing options.


8. Lumen

Lumen Netify vendor listing

Who is Lumen?

Lumen is a North American telecommunications company headquartered in Monroe, Louisiana, offering self-managed, co-managed, and managed SD-WAN and SSE solutions from leading third-party vendors. Lumen's SD-WAN solutions run over its global private and public backbone network extending to over twenty-two hundred (2,200) public and private data centers, with direct connectivity to the leading public cloud providers in thirty-three (33) cities.

How does Lumen fit your business needs?

Lumen offers a large selection of SD-WAN and SSE technologies, including solutions from Fortinet, Versa Networks, Cisco Viptela, Cisco Meraki, and VMWare. Customers can choose from self-managed, co-managed, or fully managed service models, the latter available through authorized channel partners and system integrators. Customers can deploy Lumen SD-WAN based on Versa Networks and Cisco Meraki on any number of locations, while solutions based on VMWare and Cisco Viptela require at least a ten (10) site deployment.

Furthermore, Lumen SD-WAN with Meraki does not currently have global availability. All SD-WAN options are available with Lumen's private and public backbone network as the transport or as an "over-the-top" solution.

Lumen's SD-WAN edge devices can be deployed as virtual machines in the cloud and on-premises or as virtual network functions (VNF) running on universal CPE.

Lumen's SSE solutions are currently available from Fortinet and VMWare, with deployment options in AWS, Microsoft Azure, Google Cloud Platform, and Alibaba Cloud.

Who are Lumen's main competitors?

Lumen's main competitors include Tata, AT&T, Vodafone, Verizon, Comcast, Masergy, BT, and GTT.

What are Lumen's main SD WAN and SSE features?

Lumen's standard SD-WAN capabilities include performance-, application-, and user-aware routing with WAN optimization and dynamic path selection for minimal latency, maximum performance, and high availability.

Lumen SSE features include:

  • FWaaS, including NextGen and L4 stateful inspection firewall with URL content filtering, malware protection, IDS/IPS, DoS protection, DNS security, and DLP
  • ZTNA
  • SWG with DLP, application control, URL filtering, and malware protection

What are the benefits (pros) and drawbacks (cons) of Lumen?

Benefits (pros)

Drawbacks (cons)

Lumen offers various managed and self-managed SD-WAN and SSE solutions from leading vendors.

Lumen's backbone network has limited reach in Africa and the Middle East.

Lumen's SD-WAN solutions are available with Lumen as the underlay or as over-the-top solutions.

Lumen does not have network connectivity in Latin America but partners with Cirion to deliver the region's digital infrastructure and technology solutions.

Lumen integrates with six (6) public cloud providers across thirty-three (33) cities.

 


How has Lumen evolved from previous models or releases to provide improvements, address issues, or help customers make a purchase decision?

Lumen's service evolution comes through partnerships with leading third-party security and networking vendors to deploy SASE solutions on Lumen's infrastructure. In 2020, Lumen partnered with VMWare to deliver an SD-WAN solution integrated with VMWare technologies, followed by the Lumen Edge Gateway in 2021, designed to provide virtualized network functions on universal CPE, increasing hardware refresh cycles.

In 2022, Lumen launched the Lumen Marketplace, an online market for customers to buy and manage SASE solutions.

Key choices in how Lumen has been designed and their effect on the users

Lumen's SASE solutions have been designed with flexibility at the forefront, allowing customers to choose from various SD-WAN technologies, CPE devices, network transports, and operational models to meet their needs. Furthermore, the newly released Lumen Marketplace introduces a simplified approach for customers to purchase SD-WAN and SSE solutions from Lumen's partners, complemented by the Control Center portal and Lumen SASE Manager for centralized site, location, and user configuration, orchestration, monitoring, and alerting.

Key decision-making factors for the product's category and how the product performs in those vital decision-making areas

Coverage

Lumen offers worldwide coverage for three SD-WAN offerings, with Lumen as the transport or an over-the-top solution. The company provides follow-the-sun global NOC and SOC support services and a self-service customer portal for customers to monitor, manage, and troubleshoot network and security issues.

Deployment Agility

Lumen's SD-WAN edge devices are zero-touch, with centralized management and orchestration through a cloud portal.

Network Security

Lumen offers multi-vendor security functions, including Fortinet and Palo Alto, delivered as network function virtualizations on a universal CPE device.

Service Levels and Uptime

Lumen offers varying SLAs based on five (5) service tiers, including bronze, silver, gold, platinum, and platinum-managed service. The SLAs range from 99.5% for the bronze service tier to 100% for the platinum managed service tier.

Cloud Connectivity

Lumen integrates with AWS, Microsoft Azure, Google Cloud, IBM Cloud, Oracle, and Alibaba Cloud, available in North America, Europe, Latin America, and Asia-Pacific regions.

Additional Resources

https://www.lumen.com/en-us/about.html#:~:text=Lumen%20is%20a%20multinational%20technology,4th%20Industrial%20Revolution%20(4IR).

https://www.lumen.com/en-us/marketplace/security/secure-access-service-edge-fortinet.html

https://www.lumen.com/en-us/marketplace/security/secure-access-service-edge-fortinet.html

https://news.lumen.com/2022-08-30-Lumen-launches-the-first-intuitive,-all-digital-experience-for-buying-and-managing-Secure-Access-Service-Edge-SASE

https://news.lumen.com/Lumen-VMware-global

https://news.lumen.com/2021-12-01-Lumen-Edge-Gateway-extends-the-Lumen-platform-to-deliver-IT-applications-and-virtualized-services-on-the-edge

How much does Lumen cost?

Lumen's self-managed SASE with Fortinet starts at $129 per month per location, with the pro-managed plan starting at $279 per month per location. Both service offerings require a twelve (12) months commitment.


9. Open Systems

Opensystems logo-1

Who is Open Systems?

Open Systems is a cybersecurity-as-a-service company founded in 1990 in Zurich, Switzerland, with main offices in Silicon Valley, California. The company's core offerings include carrier-agnostic managed secure SD-WAN, cloud-native SSE, and managed detection and response services delivered to more than one hundred and eighty (180) global markets.

How does Open Systems fit your business needs?

Open Systems is ideal for companies seeking managed, unified networking and security solutions with flexible service options. 

Open Systems' flagship service is SASE+, a turnkey, cloud-delivered security and networking solution connecting any edge, remote user, and public cloud over a carrier-agnostic overlay. The solution is available in three flexible service packages, including core SD-WAN features, 24x7 level-3 support and monitoring, and technology and hardware management. The Secure SD-WAN solution, available as a standard offering across all service tiers, interconnects branch offices and data centers via encrypted tunnels, with local Internet breakouts for optimal Internet and public cloud application performance. SSE features are only available in higher-end service tiers. 

Open Systems manages all aspects of the solution, including SD-WAN edge device provisioning, orchestration, and patching, with around-the-clock networking and security monitoring. 

Who are Open Systems' main competitors?

Open Systems' main competitors include Cato Networks, Masergy, Orange Business Services, AT&T, Lumen, and Colt.

What are Open Systems' main SD WAN and SSE features?

Open Systems managed SD-WAN runs on top of any public and private backbone. The solution is purpose-built to deliver policy-based application routing and per-app dynamic path selection, mission-critical application prioritization via bandwidth control, and automatic encryption of all user and application traffic with site-to-site IPsec tunnels.

Open Systems offers a complete cloud-based SSE solution that includes DNS filtering, zone-based FWaaS, SWG with integrated CASB, and ZTNA. More advanced security features are available as optional add-ons, including Advanced Threat Protection, Secure Email Gateway, and Cloud Sandbox

What are the benefits (pros) and drawbacks (cons) of Open Systems?

Benefits (pros)

Drawbacks (cons)

Open Systems' SASE+ is available in three flexible service tiers.

Many core SSE components are offered as optional add-ons, including ZTNA, SWG, and CASB.

Open Systems offers Managed Detection & Response services leveraging Microsoft Azure Sentinel.

 

Open Systems offers unified security and networking via a single-vendor stack.

 

Open Systems' SD-WAN edge devices support unlimited local Internet breakouts.

 


How has Open Systems evolved from previous models or releases to provide improvements, address issues, or help customers make a purchase decision?

Open Systems has introduced effective service and product enhancements through integrations with leading third-party service providers, such as Microsoft and Equinix.

In 2019, Open Systems entered into a partnership agreement with Equinix to deliver fast and secure cloud application access by integrating Open Systems Secure SD-WAN solution with Equinix Cloud Exchange Fabric. Additionally, Open Systems integrated its SASE platform with Microsoft Azure and Microsoft Azure Virtual WAN to securely deliver a solution for customers to connect to applications and services in the Azure cloud.

In 2020, Open Systems began offering cloud-native managed detection and response (MDR) services built exclusively on the Microsoft Azure Sentinel SIEM platform.

Key choices in how Open Systems has been designed and their effect on the users

Open Systems' Secure SD-WAN solution has been designed with security and flexibility at the forefront. The solution's carrier-agnostic architecture paired with zero-touch SD-WAN edge devices allows customers to deploy Secure SD-WAN over any network quickly and with minimal technical expertise.

Furthermore, Open Systems' managed SD-WAN and SSE, SASE+, is available in three flexible service tiers with multiple a-la-carte features, enabling service customization to meet customers' unique needs.

Through partnerships with Microsoft and Equinix, Open Systems' Secure SD-WAN can be extended to multiple public clouds while ensuring that all user and application traffic remains secure over encrypted tunnels.

Open Systems includes premium technical support, 24x7 security and network monitoring, and hardware lifecycle management as standard features across all service packages.

Key decision-making factors for the product's category and how the product performs in those vital decision-making areas

Coverage

Open Systems' managed SD-WAN solution is carrier-agnostic and can be overlayed over any public and private backbone network. The company provides 24x7, follow-the-sun level-3 NOC and SOC support services and a self-service customer portal allowing customers to monitor their network, request configuration changes, or submit trouble tickets.

Deployment Agility

Open Systems' SD-WAN solution is fully managed, monitored, and orchestrated. The zero-touch SD-WAN edge devices ship pre-configured with a specialized operating system running a mix of purpose-built, open-source, and third-party software with built-in orchestration, security, and management features.

Network Security

Open Systems offers a full suite of security services, including a complete SSE and extended detection & response (XDR), including MDR, EDR, NDR, and VM. The company also offers professional security services, including Microsoft security assessments and cloud security strategy development.

Service Levels and Uptime

Open Systems guarantees a 99.9% overall monthly service availability metric at larger offices and headquarters.

Cloud Connectivity

Open Systems' partnership with Equinix allows customers to connect to multiple public clouds over the Equinix backbone network via one of over thirty-five (35) global Equinix Cloud Exchange (ECX) Fabrics.

Additional Resources

https://www.open-systems.com/sase/service-plans/

https://www.open-systems.com/press-releases/

https://www.open-systems.com/press-release-open-systems-integrates-microsoft-azure-sentinel-into-its-managed-detection-and-response-security-service/

How much does Open Systems cost?

Open Systems' pricing varies based on the service package and optional add-ons. Customers can choose from three flexible packages: Business, Enterprise, and Enterprise+. Open Systems offers several a-la-carte items at an additional cost, including Line Operations Service, Multi-Cloud Connect, Partner Connect, Mobile Entry Point, ZTNA, Secure Email Gateway, CASB, Advanced Threat Protection, and Cloud Sandbox.


10. TATA

Tata_Communications_Logo-1

Who is Tata?

Tata is an Indian telecommunications company headquartered in Mumbai, with a global presence in more than two hundred (200) countries and the> largest subsea fiber optics network carrying 30% of the world's Internet routes. The company offers managed, co-managed, and self-managed SD-WAN solutions based on in-house-developed and best-of-breed third-party technology underpinned by Tata's MPLS and Internet backbone.

How does Tata fit your business needs?

 Tata's signature service is IZO SDWAN, a cloud-native SD-WAN solution based on Cisco SD-WAN and Versa Networks technology. The solution is offered globally across one-hundred and fifty (150) countries, with a cloud-based portal automating policy, user, and branch deployments. Customers can choose from managed, self-managed, and co-managed service models and use Tata's global backbone to underlay or bring their network. 

With managed IZO SDWAN, Tata oversees and manages all aspects of the solution, including design, deployment, configuration, site adds, moves, and changes.

Who are Tata's main competitors?

Tata's main competitors include Tejas Networks, Orange Business Services, AT&T, Vodafone, Lumen, Verizon, Masergy, GTT, and BT.

What are Tata's main SD WAN and SSE features?

Tata's main SD-WAN features include:

  • Dynamic application-aware routing.
  • Self-service WAN optimization.
  • Virtual network functions (VNF) service chaining.
  • Dynamic load balancing.
  • Advanced reporting.

Multiple security features are built directly into the SD-WAN edge device, including a layer-7 firewall, layer-4 stateful inspection firewall, URL filtering, and DoS protection. Additionally, cloud-based security features are available, including a secure web gateway, anti-DDoS, virtual UTMs, and CASB.

What are the benefits (pros) and drawbacks (cons) of Tata?

Benefits (pros)

Drawbacks (cons)

Tata offers a turnkey solution, managing the underlay and overlay networks.

Limited network coverage across Latin America and Europe

Tata is a Tier-1 telecommunications provider with Internet coverage across five (5) continents with over four hundred (400) PoPs across more than two hundred (200) countries.

 

Tata offers a single dashboard to manage and monitor the service.

 


How has Tata evolved from previous models or releases to provide improvements, address issues, or help customers make a purchase decision?

Tata introduced IZO SDWAN in 2016 to enable secure, seamless, and simplified network connectivity, increasing application performance and service agility. The first version of IZO SDWAN leveraged SD-WAN technology from Versa Networks delivered over Tata's global backbone. In 2019, IZO SDWAN was expanded to offer SD-WAN technology from Cisco.

Tata made significant advances to drive down SD-WAN costs, including launching IZO SDWAN Select Basic tier with low-cost CPEs for the Indian market and increasing the number of SD-WAN cloud-based gateways across Mumbai and Chennai.

Key choices in how Tata has been designed and their effect on the users

Tata's service portfolio is designed to meet a variety of customer requirements with two SD-WAN service offerings:

  • IZO SDWAN Prime is a proprietary SD-WAN solution allowing customers to migrate from traditional Cisco-based networks by introducing application-aware routing and WAN optimization.
  • IZO SDWAN Select is a solution underpinned by universal hardware running multiple virtualized network functions.

Key decision-making factors for the product's category and how the product performs in those vital decision-making areas

Coverage

Tata's MPLS and Internet backbone network extends to more than two hundred (200) countries through more than four hundred (400) points of presence (POPs). The company provides a 24x7x365 global help desk and level-3 expert support.

Deployment Agility

Tata's IZO SDWAN edge devices are zero-touch provisioned via a URL, reducing installation costs and site deployment times.

Network Security

Tata's IZO SDWAN solution provides built-in security and analytics to help detect and respond to cyber threats more quickly.

Service Levels and Uptime

Tata’s SLAs vary based on PoP type, guaranteeing a minimum 99.95% service availability for Tier-1 PoPs, 99.5% for Tier-2 PoPs, and 99.0 % for other, Tier-3 PoPs.

Cloud Connectivity

Tata's IZO SDWAN solution offers native cloud connectivity to the major cloud providers, including AWS, Microsoft Azure, Alibaba Cloud, Oracle Cloud, IBM Cloud, and Google Cloud. The company also offers Cloud OnRamp optimization to improve SaaS application performance, including Salesforce and Microsoft 365.

Additional Resources

https://www.tatacommunications.com/solutions/network/cloud-ready-networks/izo-sdwan/

https://www.tatacommunications.com/wp-content/uploads/2019/05/NS-managed-SDWAN-CISCO-brochure-v04.pdf

https://www.tatacommunications.com/wp-content/uploads/2019/09/SS-for-Internet-Access-Services-Web-Module.pdf

https://www.tatacommunications.com/resource/products-solutions/network/2019-indian-sdwan-service-provider-of-the-year-award/

https://www.tatacommunications.com/resource/corporate-resources/analyst-resources/idc-marketscape-asia-pacific-communications-sp-SD WAN-managed-services-2020-vendor-assessment/

https://www.tatacommunications.com/resource/corporate-resources/analyst-resources/2021-SD WAN-managed-services-survey/

How much does Tata cost?

Unable to find pricing information.


Managed Service Provider and Solution comparison matrix 1-5.

Managed Provider 1-5 Aryaka Cato Networks Masergy COLT Open Systems
Focus technologies SD-WAN as a service with end-to-end management and SASE for Global business. Managed and co-managed SD-WAN with SASE for Global companies. Managed SD-WAN with a robust and well-engineered backbone which includes SASE. Global low-cost managed services with hybrid connectivity across on-net metro locations. Primary product focus on Cybersecurity services with strong SD-WAN.
SASE features Aryaka has integrated their SecuCloud acquisition and now offers full SASE capability. Cato Networks provides a complete SASE solution via Cato SSE 360 built directly into Cato SASE Cloud. Masergy offers NGFW, and CASB. Colt offers an SWG from Versa Networks. Open Systems offers a complete SSE solution, including NGFW, CASB, ZTNA, and SWG.
What is their USP? SD-WAN and SASE delivered over their layer2 private backbone (Aryaka FlexCore) with last mile procurement and management. SD-WAN and SASE are delivered over a global private backbone (Cato SASE Cloud) fully managed by Cato. SD-WAN from Fortinet and multi-vendor SSE (Fortinet and Forcepoint) delivered over their private and public backbone network with last mile procurement and management or as an over-the-top solution. SD-WAN from Versa Networks and VMWare delivered over Colt's backbone network with last mile procurement and management or as an over-the-top solution. SASE (Open Systems SASE+) provide an over-the-top solution over any public and private network.
Global coverage 100+ countries over six continents served by 40 Global PoP locations. Supported languages include English, Mandarin, Hindi and others. WAN edge shipped globally with international shipping between 1 and 5 working days. 150+ countries over six continents served by 75+ PoP locations and 24x7x365 global NOC and SOC. 51+ global points of presence distributed across five continents, with limited coverage in Africa. Global coverage in 4 continents, with 500+ data centers in Europe, spread across 48 cities. Global coverage.
Differentiators WAN optimization is built into their global PoP backbone with multi-cloud support. Link aggregation and cloud-based security services are delivered via a single-vendor stack. Technology choice; "bring-your-own-network" deployment model; competitive SLAs; self-healing technology powered by AI. Co-managed SD-WAN White Label offering for wholesalers, SD-WAN edge device choice, WAN optimization suite, and dual CPE for high availability. Cloud-native solution, including SD-WAN and a complete SSE. Enhanced security services, including monitoring, response, and proactive hunting.
Ideal customer and vertical Up to 1000 sites, global, typically ten branch-offices plus. Small to mid-sized companies with a large cloud footprint. Companies with connectivity requirements in major international markets. Companies with a large concentration of sites located across Europe or Asia-Pacific. Small to mid-sized companies with a large cloud footprint.
What is the MSP a bad fit for? Small businesses with local requirements and any requirements which do not fit with their global PoP locations. Companies seeking a DIY SD-WAN solution and large enterprises requiring granular and complete feature sets often found in enterprise-level products. Masergy may be unsuitable for companies seeking a comprehensive, single-vendor SSE solution. Colt may be unacceptable for companies in South America, Central America, and Africa, where their network connectivity is limited. Companies seeking a DIY solution or who want to leverage existing network hardware.
SD WAN architecture WAN edge-based gateways, connectivity provided via a range of middle mile providers. SD-WAN edge devices (gateways) connected via IPSec or MPLS to the nearest Cato POP. SD-WAN edge devices or gateways (universal CPE) with Masergy as the underlay network or connected over any public/private network (BYON). SD-WAN edge gateways (universal CPE) connected via Colt's MPLS or the Internet via IPsec tunnels. SD-WAN edge devices are connected to cloud-based PoPs via IPSec tunnels.
What managed services are offered? End-to-end management of SASE and connectivity, which includes proactive monitoring and resolution with read/write access to make co-managed changes. Last-mile management, configuration and change management, managed threat detection and response, and site deployment assistance. End-to-end connectivity management, including procuring and managing access links, edge devices, monitoring, and day-to-day operations. Masergy also offers managed EDR, vulnerability scanning and management, and threat intelligence and hunting. End-to-end management of connectivity, including procuring and managing access links, edge devices, and day-to-day operations, with customers managing network and security policy changes. Technology stack management, including operating system and software; hardware lifecycle management, including hardware and software upgrades; log ingestion and management, ongoing monitoring, and proactive threat hunting. Open Systems does not manage the underlay.
Over the top support No Yes Yes No No
Is there a proof of concept (PoC) 2 sites, paid trial with specific problem solving included. 1:1 Demo Free PoC PoC is offered on new services only Free PoC and Demo
Is network underlay supported Yes, fully procured and managed on the customers behalf. Yes, fully procured and managed on the customers' behalf but not as standard. Yes, fully procured and managed on the customers' behalf. Yes, fully procured and managed on the customers' behalf. No.
Is the solution Opex or Capex biased? Opex with some capex. Opex with some capex. Capex. Opex with some capex. Opex with some capex.
What support is offered for cellular 4G and 5G? Aryaka technology does support cellular, including 4G/5G LTE, but they do not offer direct termination. Cato Networks supports 4G for backup connectivity. Masergy supports 4G/5G LTE. Colt supports 4G/4G+ and 5G. GTT supports 3G and 4G

Managed Service Provider and Solution comparison matrix 6-10.

Managed Provider 6-10 Lumen BT TATA AT&T GTT
Focus technologies Managed, co-managed, and self-managed SD-WAN. Managed and co-managed SD-WAN. Managed, co-managed, and self-managed SD-WAN. Managed, co-managed, and self-managed SD-WAN. Managed, co-managed, and self-managed SD-WAN.
SASE features Lumen offers SSE from Fortinet and VMWare. BT offers SSE from VMWare SASE Platform, including NGFW, CASB, and ZTNA. Tata offers SWG and CASB. AT&T offers SSE solutions from Cisco, Fortinet, and Palo Alto Networks. GTT offers an SSE solution, Secure Connect, including NGFW, SWG, and CASB.
What is their USP? SD-WAN from Fortinet, Versa Networks, Cisco Viptela, Cisco Meraki, and VMWare is delivered over Lumen's backbone network with last-mile procurement and management or as an over-the-top solution. SD-WAN from Cisco Meraki, Cisco Viptela, Nuage, Fortinet, and VMWare and SSE (VMWare) delivered over their private and public backbone network with last mile procurement and management or as an over-the-top solution. SD-WAN based on Cisco technology (IZO SDWAN) delivered over Tata's global backbone network or as an over-the-top solution. SD-WAN from Cisco, Aruba, VMWare, Palo Alto Networks and SSE based on Cisco, Fortinet, Palo Alto Networks, and VMWare, delivered over AT&T's global backbone network with last mile procurement and management or as an over-the-top solution. SD-WAN based on Aruba Silver Peak, VMWare Velo Cloud, and Fortinet and single-vendor SSE (Secure Connect) delivered over GTT's global backbone network with last mile procurement and management.
Global coverage Dense coverage across North America and Europe, with 18+ data centers in the United States. 198+ countries, with connectivity to 8 cloud service providers in 74 cities. 400+ PoPs distributed across 200+ countries. 200+ countries and territories. 140+ countries across 6 continents, with 600+ global PoPs and 3,000 regional access partners.
Differentiators Technology choice and Lumen's Marketplace for buying and managing SASE solutions. Technology choice and license to operate in China. Optimized Internet connectivity with end-to-end SLAs and deterministic routing. Technology choice and hybrid network model connecting SD-WAN and non-SD WAN on the same network. Tier-1 IP network backbone.
Ideal customer and vertical Large multinational companies seeking managed or self-managed SD-WAN. Large international companies and organizations based out of Europe. Global companies of all sizes and any company with connectivity requirements across Africa, the Middle East, and Asia-Pacific. Companies of all sizes, regardless of location. Companies with connectivity requirements across North America and Europe. Companies with PCI DSS obligations, including retail and e-commerce.
What is the MSP a bad fit for? Lumen may be unsuitable for companies in Latin America. BT may be inappropriate for small to mid-sized companies with localized operations outside of Europe where other providers offer better coverage. BT may also be unsuitable for companies seeking to turn up sites quickly with short installation lead times. Tata may be problematic for companies with large site concentrations in Latin America and Europe, where their network connectivity is limited. AT&T may be unsuitable for companies seeking short lead times for incident resolution. GTT may be unsuitable for companies with large site concentrations in Latin America and Asia, where their network connectivity is limited.
SD WAN architecture SD-WAN edge device or gateway (universal CPE) with Lumen as the underlay or connected via any public/private backbone (BYON). SD-WAN edge gateway (universal CPE) with BT as the underlay or connected via any public/private backbone (BYON). SD-WAN edge gateway (universal CPE) with Tata as the underlay or connected via any public/private backbone (BYON). SD-WAN device or gateway (universal CPE) with AT&T as the underlay or connected via any public backbone. SD-WAN edge gateway (universal CPE) with GTT's backbone network as the underlay.
What managed services are offered? End-to-end management of connectivity, including procuring and managing access links, deployments, edge device patch management, monitoring, ongoing support, and configuration. End-to-end management of connectivity, including procuring and managing access links, edge devices, and day-to-day operations. End-to-end management of connectivity, including procuring and managing access links, edge devices, assessments, deployments, ongoing support, configuration, and change management. Tata also offers MDR. End-to-end management of connectivity, including procuring and managing access links, edge devices, and day-to-day operations. End-to-end management of connectivity, SD-WAN, and SSE, including security and application control.
Over the top support Yes, via authorized channel partners and system integrators. No. Yes, via solution partners. No. No.
Is there a proof of concept (PoC) 30-day free trial. PoC lab. Virtual and on-site PoC and demo. Free PoC. Free PoC.
Is network underlay supported Yes, fully procured and managed on the customers' behalf. Yes, fully procured and managed on the customers' behalf. Yes, fully procured and managed on the customers' behalf. Yes, fully procured and managed on the customers' behalf. Yes, fully procured and managed on the customers' behalf.
Is the solution Opex or Capex biased? Opex with some capex. Opex with some capex. Opex with some capex. Opex with some capex. Opex with some capex.
What support is offered for cellular 4G and 5G? Lumen supports 4G/5G LTE. BT supports 4G LTE for backup connectivity. Tata supports 4G/5G LTE. AT&T supports 4G/5G LTE. GTT supports 3G and 4G.


User reviews for Managed SD WAN Providers and Solutions


Service Provider

Review

Aryaka user reviews

  1. Aryaka's technical support during setup, deployment, and post-deployment is top-notch. The solution offers a user-friendly interface and a straightforward customer portal with a map displaying all available locations and devices.
  2. Aryaka's solution allows for quick and seamless moves and changes, but many advanced SD-WAN features, such as load balancing and QoS, are unavailable on Internet-based traffic.
  3. Aryaka's SD-WAN service significantly improves throughput and lowers latency for VDI users connecting between APAC and North America. The solution works exceptionally well for real-time and critical application traffic.

Cato user reviews

  1. Cato's single-platform security stack helps secure remote office locations with a single device, significantly reducing hardware footprint at sites where finding physical space may be challenging.
  2. Cato releases new features and enhancements weekly, with regular software upgrades to fix customer-reported bugs and issues. The user interface is easy to use, giving customers access to network performance details and QoS dashboards.
  3. While Cato's sales team and senior engineers are very knowledgeable, customers could benefit from better tier-1 support and technical documentation.

Masergy user reviews

  1. Masergy's solution may not be the best fit for companies operating outside large metropolitan areas where customers may need to provide the last mile.
  2. Masergy's SD-WAN solution introduces significant long-term cost savings compared to traditional MPLS.
  3. Masergy is among the most affordable SD-WAN vendors, but network bandwidth and throughput issues can turn customers away.

Colt user reviews

  1. Colt offers low-latency SD-WAN services in APAC but at a higher cost than its competitors.
  2. While Colt's offering includes managed SD-WAN solutions from various SD-WAN providers, its implementation of third-party SD-WAN products does not run the latest features and functionality offered by the SD-WAN provider.
  3. Colt provides flexible cloud connectivity options with excellent technical support after business hours, but site provisioning and turn-up are not automated.

Open Systems user reviews

  1. Open Systems offers a comprehensive suite of managed security services backed by a dedicated team of skilled and knowledgeable professionals.
  2. The reliability of Open Systems' SASE solution can help offload the internal management of WAN and VPN connection issues.
  3. Open Systems' customer portal includes many network utilities and features that allow customers to troubleshoot network issues, including collecting packet captures or running ping and traceroute commands.

Lumen user reviews

  1. Lumen offers global network connectivity, quick and easy site turn-up, and around-the-clock security operations support.
  2. While Lumen delivers exceptional network performance and throughput in areas where they operate the first, mid, and last miles, customers can experience increased latency and degraded service when connecting via low-cost circuits, such as DSL.
  3. Lumen's SD-WAN solution can help shorten network connectivity outages by automatically failing user traffic over to a backup link.

BT user reviews

  1. BT's network reliability and stability are underpinned by a highly knowledgeable and motivated technical support team providing quick incident resolution.
  2. BT's Day-1 service management and operations are satisfactory, but the company's lead times for service installation and deployment are higher than their competitors.
  3. BT offers many service levels with standard network designs to meet customers' changing network requirements.

Tata user reviews

  1. Tata offers a cost-effective, managed SD-WAN solution when deployed with the Internet as the underlay, but using MPLS as the transport can significantly increase the cost of the solution.
  2. Tata offers competitive SLAs but lacks proactivity in resolving customer link or network issues.
  3. Tata offers a stable solution with improved WAN optimization for mission-critical application traffic.

AT&T user reviews

  1. AT&T's SD-WAN service is stable and reliable, with minimal packet loss and latency, but it falls behind in innovation compared to its competitors.
  2. AT&T's pre-sales, engineering, architecture, and account management teams are excellent, but their technical support post-deployment appears disorganized, often causing delays in addressing customers' trouble tickets.
  3. AT&T's SD-WAN and Virtual Network Functions (VNF) significantly increase network scalability and flexibility with hardware virtualization and carrier-agnostic connectivity options.

GTT user reviews

  1. GTT has a solid vision, but its sales and pre-sales team may overpromise and underdeliver.
  2. GTT taps into countries and territories where few providers operate, such as China and Russia.
  3. GTT's side deployment strategy is above average, offering a streamlined process for deploying multiple sites across multiple geographies on time and within budget.

Visit the Netify SASE Cybersecurity and SD WAN marketplace.

Get the data points you need to help with your SASE Cybersecurity and SD WAN decision making process.

Learn More

Suggested Posts

Netify guides

Download our SD WAN & Cybersecurity Vendor and Service Provider research

Request a copy of our research into leading SD WAN and SASE Cybersecurity vendors and Managed Service Providers. Learn about their unique selling points, features and why they might be a good fit for your business.

Learn More

Search for Articles

Looking for something specific? Enter your search below to find information from all of Netify.

Explore Topics

Popular Article Topics

Find articles and helpful resources about any of the following:

Subscribe to Notifications

The Netify Learning Center

Provider and Vendor comparison advice across SD WAN, MPLS, UCAAS and Cloud Voice.

See All Articles

Forbes Netify Badge

COMPARE THE MARKET

Compare The SD WAN Market Now

Compare the SD WAN market, build your shortlist and find out which vendors are a match for your business needs.
Learn More