VeloCloud SD WAN & SASE Cybersecurity Solutions

Sector, Company Type, and Location:Healthcare  |  Retail  |  Financial Services  |  Government  |  Construction  |  Vendor  |  Europe  |  Asia  |  UK  |  North America
Tags & Search Filters:SD WAN  |  XDR  |  CASB  |  ZTNAand 13 more tags  |  DIY SD WAN services  |  Co-managed SD WAN services  |  SASE Cybersecurity  |  Managed SD WAN services  |  MDR  |  FWaaS  |  SWG  |  Security service edge  |  Cloud workload protection  |  On-premises/Private cloud  |  SaaS  |  Next-Generation Firewalls  |  Featured on Gartner

VMware SD WAN enables the use of wired or wireless broadband Internet with or without traditional MPLS to create enterprise grade wide area networks with increased bandwidth, high performance access to cloud, service insertion and extensive network visibility.

VeloCloud SD WAN & SASE Cybersecurity Solutions

VeloCloud SD WAN and SASE Solution: Comparisons, Review, Benefits, Use Cases, Pros & Cons

Author:Netify Research Team

If you have questions about VeloCloud and how their capability is aligned to your needs, email the Netify research team. UK: North America:

(Please use the UK email for ROW - Rest of the World - questions or inquiries)

Resources and Downloadable Content

Request the very latest VeloCloud SD WAN & SASE sales PDF directly from your local account team. Please check your junk folder if not received.

Complete your details to arrange a demo of VeloCloud. You will receive contact requesting available dates and times - please check your junk folder if not received.

Request your local in-country sales contact. You will receive details as soon as possible - please check your junk folder if not received.


Netify Review

One of VeloCloud by VMware's key features is that they are one of the only vendors to offer a global network of private SD WAN gateways - ideal for global enterprises and companies requiring high performance for access to cloud and SaaS applications and private data centres. Their WAN Edge is hypervisor-capable, allowing clients to chain multiple Virtualised Network Functions (VNFs), removing the need for multiple single-function appliances.

The solution is PCI DSS (Payment Card Industry Data Security Standard) certified - making VeloCloud a strong option for clients in industry verticals such as retail*, financial* and E-commerce.

VeloCloud is good for remote workers as their solution (Workspace ONE) is fully integrated with SASE (See, What is the VeloCloud SASE Security Solution?) and makes use of the company's SD WAN gateways. 

However, caution should be taken as VeloCloud offer SASE via an OEM agreement with another company. Those looking for a complete solution from a single-vendor may not be suitable for this product. 

*for more information on solutions for retail and financial industry verticals please see our sector pages.

Marketplace Assistance

Are you an IT decision maker building your own SD WAN or SASE Cybersecurity shortlist?

Take our 90 second assessment quiz to find out which top 3 vendors or managed providers are a match for your answers.


About VeloCloud

VeloCloud was founded in 2012 by Sanjay Uppal as a cloud networking company. In 2017, the business was acquired by IT giant VMware (a subsidiary of Dell Technologies) for $449 million. The acquisition allowed VMware (who primarily focused on the deployment and management of Virtual Machine (VMs) -based and container-based applications in hybrid and multi-clouds) to expand their Software-Defined Networking (SDN) product portfolio to include SD WAN. 

As of June 2022, semiconductor and infrastructure software manufacturer Broadcom is currently in the process of acquiring VMware for a proposed $61 billion. Although this has caused concern for some current VMware clients due to Broadcom's history of creating changes to their acquisition's pricing, customer support and product development, VMware's product and feature set is strong and therefore it is predicted that Broadcom will keep the company the same. 

VeloCloud are headquartered in Palo Alto, California, NA and offer SD WAN and SASE solutions to small, medium and large enterprises.

Pros & Cons

What are the pros and cons of VeloCloud SD WAN & SASE Cybersecurity?

List of the pros and cons associated with VeloCloud SD WAN and SASE security.


  • Boasts numerous global public gateways connected to multiple Tier-1 ISPs, making them a good choice for global companies with delay sensitive applications. 
  • Offers 5G priority for applications - avoiding blackouts and brownouts (See, Performance Based Key Features: Cellular).
  • Offers integrated cloud-based features and relationships with AWS, Azure and Google Cloud Platform. 
  • According to customer reviews, VeloCloud services are straightforward to use. 
  • Can accommodate small - medium size enterprises as well as large multinational corporations with 1,000+ branches.


  • SASE security solution is via an OEM agreement with Menlo Security - not suitable for those requiring a single vendor solution.
  • Creating an end-to-end VeloCloud solution would require the use of multiple different VeloCloud products, potentially raising costs.
  • Broadcom are currently looking to buy VMware (VeloCloud's parent company) which could potentially cause changes to VeloCloud's offerings. 

Comparison: VeloCloud vs Palo Alto vs HPE Aruba vs Versa Networks SD WAN & security

Consider the points below to compare VeloCloud vs Palo Alto (CloudGenix) vs HPE Aruba (Silver Peak) vs Versa Networks SD WAN and SASE security.


  • VeloCloud are a suitable choice for Small-Medium Businesses and large multinational corporations with over 1,000 sites. 
  • VeloCloud SD WAN is fully cloud-based, leveraging VMware SD WAN gateways globally. 
  • VeloCloud accesses cloud vendors via VMware SD WAN gateways, with full integration for AWS, Azure natively built-in and connectivity for Google Cloud. 

Palo Alto (CloudGenix)

  • Palo Alto are a good choice for client's looking to migrate from legacy architectures with cloud-integrated technology. 
  • Palo Alto SD WAN connects all branch offices to the cloud with machine learning to simplify network operations. 
  • Palo Alto provides connectivity to AWS, Azure and Google Cloud with options for managed cloud security via a partnership with Telus. 

HPE Aruba (Silver Peak)

  • HPE Aruba offer complex solutions for clients with complex requirements. 
  • HPE Aruba's SD WAN solution has a strong focus on WAN optimization for improved performance. It also supports hybrid WAN.
  • HPE Aruba offers connectivity to AWS, Azure, Google Cloud and Oracle Cloud. 

Versa Networks

  • Versa Networks have strong offerings for small-medium enterprises with their Versa Titan solution. 
  • Versa Networks' SD WAN offering comes in two offerings; Versa Classic for large enterprises and Versa Titan for Small-Medium Enterprises. 
  • Versa connects to cloud vendors via their network of cloud gateways. They offer connectivity to DELL Technologies, AWS, Azure and Google Cloud. 


Similar Vendors

Top 3 similar SD WAN Vendors

Click the vendor logo to find out more about each respective SD WAN solution.


What is the VeloCloud SD WAN Solution?

VeloCloud’s SD WAN solution stands out as it leverages VMware's global network of SD WAN gateways and is completely cloud-delivered. This allows the solution to feature a Transport Independent Architecture, offering a choice of any combination of link-types (Broadband, MPLS and Cellular, for example). Further, VeloCloud's cloud-delivered design makes zero-touch deployment easy, with the ability to spin up new locations in minutes with no need for IT staff on-site. 

 The solution is comprised of three main components which are licensed to be sold as one software bundle:

  • VMware SD WAN Gateways: A network of public gateways are deployed at cloud datacenters globally, which are designed to optimize data paths to all applications, branches and datacenters.  
  • VMware SD WAN Edge: Optimizes the VeloCloud SD WAN service by offering secure and efficient connectivity to private, public and hybrid applications as well as compute and virtualised services. Application recognition, application and packet steering, performance metrics and end-to-end QoS are also included in the offering, improving network speeds. 
  • VMware SD WAN Orchestrator: VeloCloud’s cloud-based management platform. Data flow is orchestrated through their cloud network, alongside centralized and company-wide installation, configuration and real time monitoring. This enables one-click provisioning of virtual services, in the cloud, branch or data center. 

Configuration-Based Key Features:

  • Zero-Touch Deployment: Allows clients to remotely configure network connectivity and cloud-based business and security policies in a new location, without the need for an IT Team - ideal for expanding businesses or those with remote locations. 
  • Edge Computing and Internet of Things (IoT): Designed to help devices at the edge optimize throughput for the high amounts of data that they produce. Devices would usually backhaul the data - however, this consumes both time and bandwidth. VeloCloud offer edge computing, which allows for processing to be done locally, meaning that only actionable data is transmitted.
  • Hybrid Cloud: This provides clients with increased agility when workloads cross multi-cloud environments (including public and private clouds). Security and integrity are ensured for components that remain in the data center whilst clients access important cloud provider services such as big data analytics. This ensures an efficient and secure solution for enterprises needing to cross multi-cloud platforms. 
  • Gateway Federation: This allows SD WAN gateways to be federated into individual networks, globally, which connects service providers and enterprise networks as well as the cloud. This is ideal for a global workforce that is largely comprised of remote workers (such as home-based or mobile enterprise workers) as it connects them with multiple network providers, clouds and data centers worldwide. 

Security-Based Key Features:

  • Multi-Cloud Strategy (SaaS, PaaS, IaaS): Using a combination of SaaS, PaaS and IaaS multi-cloud allows clients to access each cloud’s unique services. This is valuable because it means clients do not have to rely on a single cloud provider, which reduces the risk of localized failure and improves security. 
  • SASE: See, What is the VeloCloud SASE Security Solution?

Performance-Based Key Features:

  • Traffic Steering Services: Leverages VeloCloud’s cloud-based transport independent WAN architecture. The independent architecture allows the cloud-based WAN to connect to any combination of MPLS, broadband and 4G LTE. This allows the platform to automatically recognize links and measure bandwidth. Traffic steering services leverage this, as traffic is parsed and steered in the most economical way, in accordance with business and security policies. 
  • Cellular: VeloCloud have the ability to offer their clients the option to prioritize applications over cellular networks. Should bandwidth speeds drop, applications will be diverted over 4G/5G avoiding instances of blackouts and brownouts.
Service Providers

Which managed service providers offer VeloCloud?

Filter by tag, location, and service type:
(Select any number of tags)

EuropeAsiaUKNorth AmericaSD WANXDRCASBZTNADIY SD WAN servicesCo-managed SD WAN servicesSASE CybersecurityManaged SD WAN servicesMDRFWaaSSWGEndpoint protectionFile analysisIoT securitySecurity and complianceMobile threat defenceSecurity service edgeCloud workload protectionManaged securityIntegrationsAnalyticsNetwork firewallsWAN Edge infrastructureReporting and statistics (SD WAN)On-premises/Private cloudSaaSCompliance reporting

What is the VeloCloud SASE security solution?

VeloCloud offer clients their SASE security solution via an OEM agreement with Menlo Security. The solution provides secure access to applications via their Secure Web Gateway Functionality platform and next generation firewalling for securing corporate traffic. 

The SASE Solution is designed to combine both cloud security and cloud networking, providing secure access to applications via 150+ global VMware SD WAN Gateways, with IaaS interconnect providing secure access to various cloud providers including; AWS, Azure, and Google Cloud Platform. Zero Trust Network Access (ZTNA), Secure Web Gateways (SWG) and Cloud Access Security Broker (CASB) functions are also available. 

SASE is also available to remote users, as the platform is powered by the VMware Workspace ONE Solution, which is designed to allow those working out of office to securely access enterprise applications. Workspace ONE is now integrated with SASE, meaning that out of office workers can access SASE PoPs remotely.


Funding Rounds

Cloud Vendors

How does VeloCloud access cloud vendors?

VeloCloud accesses cloud vendors through VMware SD WAN Gateways. The gateways are deployed on premises by service providers or deployed worldwide at cloud data centers. The VeloCloud offering allows for secure global access to the cloud and network services via service insertion.

VeloCloud’s offering is fully integrated with AWS, supports access to Google Cloud and Azure, natively built into the VeloCloud solution via an Azure branch IPsec partnership and Integrated Virtual Hub NVA partner. This supports enterprise ability for dynamic scaling with the flexibility of a network-as-a-service offering.

Cloud Access

Cloud Access

Amazon Web Services30
Microsoft Azure40
Google Cloud30
WAN Acceleration and Optimization

Does VeloCloud offer WAN acceleration and optimization?

VeloCloud’s Dynamic Multipath Optimization (DMPO) enhances the flow of data traffic between any SD WAN components dealing with forward data traffic. It also offers application acceleration services and has a number of key features:

WAN Optimization: 

  • Automated Bandwidth Discovery: Establishes DMPO tunnels between SD WAN gateways, whilst running bandwidth tests to select the most efficient path to the gateway. The software is also able to bypass network address translation (NAT) and port address translation (PAT) devices.
  • Continuous Path Monitoring: Continuously monitors performance metrics (jitter, loss, latency) on each packet traveling between two DMPO endpoints, using active and passive monitoring approaches. This means that DMPO is quick to react to change in underlying WAN condition, further protecting against brownouts and blackouts.
  • On-Demand Remediation: Error correction software that is deployed when there is a disruption on multiple links, or when traffic flow cannot be steered onto a better link.
  • Class of Service (CoS) Marking: Manages traffic in a network by grouping similar types of traffic together (such as voice, video, large documents). Each group is classed with it’s own level of service priority.  
  • Policing Traffic Class: Allows IT managers to closely monitor high-priority business collaboration traffic, ensuring that service-provider SLA’s are honored. 

Application Acceleration: 

  • Application-Aware Per-Packet Steering: This allows customers to prioritize up to 3,000 applications without impacting data flow. This protects against blackouts and brownouts as traffic flow is steered away from applications, protecting active flow and user experience.
  • Quality of Service (QoS) Scheduling: VeloCloud allows clients to prioritize applications at different times. This is achieved by their product feature called QoS Scheduling. 
  • Multiprotocol Label Switching Class of Service (CoS): Designed for private links that have a CoS agreement, as DMPO can take CoS agreements into account in both monitoring and application steering decisions. This allows for granular, application-aware decisions for private links with CoS agreements.
  • Bandwidth Aggregation: If an application requires more bandwidth, DMPO will perform per-packet load balancing, using available links to deliver all packets of a single flow to a destination. 
  • Forward Error Correction (FEC): Corrects errors on real-time applications, such as voice and video flows.  
  • Negative Acknowledgment (NACK): Used for transmission control protocol (TCP) applications such as file transfer, this allows DMPO to monitor packet detection and retransmit any missing packets. This protects end applications from detecting packet loss.
  •  Application-Aware Overlay Quality of Service (QoS): Out of the box, it is able to create policies based on hundreds of known applications and apply QoS.
Remote Users

How does VeloCloud support remote users?

VeloCloud supports remote users through its VMware Secure Access service, uniting secure access with Workspace ONE. Secure Access uses a zero-trust network access service model, mapping users to individual application policies. 

 VeloCloud’s solution is cloud-hosted and is accessed through globally distributed service nodes, allowing for significant reductions in latency and hair-pinning. A high level of support is provided for remote users as the solution comes as part of  the SD WAN fabric for consistency and a high degree of performance. The Workspace ONE solution uses unified access gateway-as-a-Service to reduce overheads in comparison to legacy VPNs and improve scalability. The cloud hosted service provides congruous policy enforcement across all users.


Selection Criteria for Vendors offering SD WAN and SASE

Single-Vendor Solution for both SD WAN and SASE29%
Vendors offering Integration with Cloud Security Providers22%
Strong Network and Cloud Security Offerings24%

What Reporting and Management is available via the VeloCloud Portal?

The VeloCloud portal is encompassed by the VMware SD WAN Orchestrator (See, What is the VeloCloud SD WAN Solution?). The VMware SD WAN Orchestrator provides access to a self-service web portal for configuration of policies and  monitoring. The VMware SD WAN orchestrator is built on API-driven architecture for ease of  integration and the enterprise and service provider portals provided both use granular, role-based access. The VeloCloud portal uses a scalable control pane and provides: Network, Application, Host metrics, Quality of Experience score and Diagnostic Application reports. The management and reporting available via the VeloCloud portal allows for more efficient troubleshooting and the ability to resolve network issues faster through the analysis of network and application performance.

Years Active

Number of years trading

Palo Alto Networks17
HPE Aruba20
Versa Networks10
Service Level Agreement

What is the VeloCloud SLA?

Below is a table displaying the main focus points of the VeloCloud Service Level Agreement (SLA).


Availability Commitment 



VMware Secure Access


VMware Cloud Web Security


VMware SD-WAN Unavailability and SLA Events:

SLA Event


Data Plane Event 

Measured by VMware log files or trouble ticket, period > 1 minute in which the SD-WAN controller/gateway is unable to receive or transmit IP packets.

Control and Management Plane (CMP)

Inability of the SD-WAN orchestrator to monitor or configure edges for a period > 30 seconds.

VMware Secure Access Unavailability and SLA Events (Determined by VMware Monitoring Tools):



Login Issues

For a period > 1 minute users and admins are unable to use correct credentials to login. 

VMware Workspace ONE VEM Console Issues

For a period > 1 minute admins unable to connect to network connected and enrolled remote devices using the Workspace ONE VEM Console. 

VMware Cloud Web Security Unavailability and SLA events (Determined by VMware Monitoring Tools):



Process Request Delay

Period > 1 minute in which there is a delay of over two seconds for the system to process requests.

Management APIs/UI

Period > 30 seconds where management APIs or UI is unreachable. 

Authentication Request Delay 

Period > 1 minute in which there is a delay of over eight seconds for the authentication service to process requests.

Frequently Asked Questions
What is the VeloCloud SD WAN architecture?
Ask a question

Send your local contact from VeloCloud a message, this form will reach VeloCloud directly.

Contact VeloCloud
Complete the form to get in touch with a representative from VeloCloud.

Download the the complete guide to 10 SD WAN solutions.

The most comprehensive top 10 guide we have ever created.

Similar Companies

There are no results matching your selection.


Deployment Region

North America37%
Europe, Middle East and Africa23%
Latin America6%
Proposition Focus

Proposition Focus


Industry Coverage


Other Focus

Remote users7
Complex requirements6
List your business

List your business with Netify Learn More →


Geographic Focus


Please complete the form to ask a question or send a message directly to VeloCloud. Netify have carefully curated global sales contacts based on your IP location. If you do not receive contact, please check your junk folder.

Book a demo of the VeloCloud SD WAN and SASE security capability over Zoom or Teams. Learn about their management portal, deployment, SLA and support. You will receive an email asking for times/dates, please check your junk folder if not received.

A Netify Vendor Briefing is a 30 minute Zoom research session for IT decision makers, and an opportunity to learn about the vendors products, services and business strategies specifically or a related technology or market. We'll also discuss their competitors and which other solutions your business should consider. If you do not receive contact, please check your junk folder.

Netify is the first dedicated global SD WAN & SASE comparison marketplace.

List Your Business