The Secure Access Service Edge (SASE) market represents a shift in networking and security, combining cloud-delivered security services with the network infrastructure of Software-Defined Wide Area Network (SD-WAN), providing an all-round solution for improving both security and performance of a business network. Couple this with a managed service to form managed SASE and businesses can nowadays find an all-in-one solution that handles every network need and issues, all overseen by a provider, offering the key benefit of little to no responsibility overheads for the leveraging business. This guide equips resellers and end users with the necessary insights into managed SASE, what it is, how to utilise it, how the different SASE solutions on the market differ and what makes each reseller programme standout. We’ve combined our knowledge of SASE’s inner working, industry trends and technical requirements to highlight the benefits of SASE reselling, whether that be for a prospective reseller or an end user interested in finding a reseller of their ideal SASE vendors.
SASE (pronounced "sassy") is a cloud-native networking framework that converges networking and security functions into a unified platform. Whilst not invented by them, the term SASE has been recognised as initially coined by Gartner in 2019, with SASE representing a clear strategic shift away from traditional centralised network architectures to a more distributed model - something which has become all the more necessary since 2019, addressing remote, mobile and hybrid workstyles, the needs of cloud-first organisations and the ever-growing Internet of Things (IoT) and edge computing.
What is SASE? SASE services combines SSE security and SD-WAN's access (A) for improved network performance to produce a SASE platform.
SASE builds upon the markets previous offering of network Security Service Edge (SSE), getting its “A” by adding network access capabilities through the merger of SD-WAN infrastructures. While SSE focuses exclusively on security features, SASE provides both security and efficient network connectivity through a globally distributed cloud service infrastructure, therefore providing a more complete network solution.
SASE integrates several critical networking and security technologies:
SD-WAN (Software-Defined Wide Area Network): The networking foundation of SASE that intelligently routes traffic across multiple transport mediums (MPLS, broadband, LTE) based on the best available path. SD-WAN simplifies network management, facilitates direct cloud access from branch offices and improves application performance.
Secure Web Gateway (SWG): Ensures user safety on the internet by, providing URL filtering, malicious content blocking and web traffic monitoring to safeguard against web-based threats.
Cloud Access Security Broker (CASB): Provides access management capabilities and protection when utilising the cloud. This is especially important for businesses leveraging SaaS platforms such as Office365 and Salesforce, as CASB offers greater visibility into user behaviour and the security of data as it moves from the business network to cloud services.
Zero Trust Network Access (ZTNA): Implements the "never trust, always verify" security strategy, requiring authentication and authorisation for every connection attempt before granting access to resource - significantly boosting your business network’s security by ensuring everyone is who they say they are and has the authorisation to do what they’re doing. ZTNA provides granular, least-privilege access based on user identity rather than network location, an absolute must for businesses utilising remote workforces.
Firewall-as-a-Service (FWaaS): Delivers cloud-based firewall capabilities that eliminate the need for physical hardware at each location, providing consistent protection for all users regardless of if they’re at home, on the road or in the office.
However, these aren't the only capabilities that SASE vendors necessarily have to offer, with SASE vendors often offering the likes of remote browser isolation, edge computing protection and many other integrated systems. It's therefore important to consider the full benefits that the market of SASE vendors have to offer and how they best suit business requirements.
When SASE is therefore outsourced to a managed provider, each of these functionalities can be tailored specifically to the business, simplifying onboarding, updates, policy changes and, if the provider offers 24/7 monitoring, can ensure proactive threat remediation.
Benefits:
If you haven’t yet been sold on the idea of SASE, we’ve also covered the numerous strategic advantages for organisations that switching to SASE can provide.
Why SASE platforms are beneficial for network performance and improving security infrastructure (through cloud-delivered firewall appliances, policy management and managed detection services to help secure sensitive data).
By consolidating networking and security functions into a unified framework, SASE reduces complexity and costs, eliminating the need for numerous appliances and licences while decreasing administrative overhead.
Many solutions on the market now offer globally distributed Points of Presence (PoPs), dedicated global backbones that reduce latency and enable direct cloud access, ensuring consistent performance regardless of location.
Due to being a cloud-native architecture, SASE allows for more effortless scalability without running the risk of over-provisioning. By limiting resources to only whats being used, SASE helps keep operational costs and resource requirements in check, whilst providing consistent security policies across all users, devices and locations and, arguably most important for many sectors, simplifies and improves regulatory compliance efforts.
However, we'd stress that the key benefit of leveraging a managed SASE solution is that it not only combines everything network(s) into one solution but it also dramatically decreases the burden on internal IT and network administration teams by transferring the responsibility for deployment, maintenance and monitoring to specialised service providers. This not only alleviates in-house IT personnel of the need to gain expertise in a vast range of different products but can also allow them to focus heavily more so on future improvements rather than day-to-day security operations. This leaves the managed service provider to handle the more complex tasks, such as policy updates, threat intelligence integration and security incident response, freeing up valuable internal resources. Further to this, and unlike self-managed solutions, managed SASE services often come with contractual Service Level Agreements (SLAs) that guarantee specific performance metrics and system availability. These SLAs typically cover network uptime, incident response times, threat detection capabilities and application performance thresholds.
Ideal Use Cases:
SASE can be seen as particularly valuable for organisations supporting remote workers, with over 38% of Britons now working from home at least weekly, by providing secure access to corporate resources without the performance bottlenecks associated with traditional VPNs, utilising the benefits of SASE's SD-WAN integration. When considering hybrid workforces, SASE enforces identical protection standards regardless of location or device type, supporting flexible work arrangements without compromising security posture or user experience.
Whilst enterprises that are cloud-centric and make use of multiple SaaS applications, which is also often the case in remote settings, are arguably a second good use case. With the average organisation now using nearly 1,000 SaaS apps, cloud-focused enterprises gain substantial advantages from SASE's direct, secure connectivity to cloud services and CASB capabilities.
How the SASE model has improved operational efficiency for a cloud native approach.
In a similar fashion, companies with widely distributed enterprise networks spanning numerous branch offices, retail locations or manufacturing sites can also benefit from SASE due to the ability to implement uniform network security and policies (ZTNA, CASB, SWG, FWaaS) across all facilities with minimal complexity.
Finally, multinational organisations can often benefit significantly from certain SASE vendors offerings if they include globally distributed Points of Presence. These PoPs provide optimal performance and consistent security compliance across different geographic regions with varying regulatory requirements.
Why SASE is Replacing Traditional Network Models
As more and more workforces move to either a remote or hybrid work style, we're seeing that traditional network perimeters continuously dissolve, with heightened adoption of cloud services. Whilst this suits workforces, traditional networks can't necessarily keep up with demand, often running the risk of security blindspots (such as unprotected cloud connectivity or lack of strict firewalls in the home) and therefore by shifting to SASE, these issues are eliminated.
Gartner predicts that most large enterprises will migrate towards a SASE solution of some form by the end of 2025, highlighting its growing importance, as well as the phasing out of legacy systems, such as VPNs and MPLS due to their limitations in today's environment. Traditional firewalls present additional challenges, lacking identity-based policies and struggling with effective cloud traffic inspection.
SASE addresses these gaps through identity-driven access that bases policies on user and device identity rather than simplistic IP addresses, alongside Zero Trust principles that implement continuous verification and least-privileged access models to minimise risk exposure whilst maintaining productivity and connectivity across increasingly distributed business operations.
Evaluation Criteria for Buyers
Enterprises should assess SASE solutions using these key factors:
wdt_ID
wdt_created_by
wdt_created_at
wdt_last_edited_by
wdt_last_edited_at
Criteria
Key Considerations
1
hyelland
06/05/2025 09:32 AM
hyelland
06/05/2025 09:32 AM
Architecture
Cloud-native vs hybrid - prioritise globally distributed PoPs for low latency if business practices rely on this.
2
hyelland
06/05/2025 09:32 AM
hyelland
06/05/2025 09:32 AM
Security Compliance
Support for a range of regulatory frameworks (GDPR, HIPAA, PCI-DSS), unified policy enforcement across edges
3
hyelland
06/05/2025 09:32 AM
hyelland
06/05/2025 09:32 AM
Integration
Compatibility with existing tools (including cloud services, such as Azure and Okta)
4
hyelland
06/05/2025 09:32 AM
hyelland
06/05/2025 09:32 AM
Management
Single-pane visibility and automated threat response
5
hyelland
06/05/2025 09:32 AM
hyelland
06/05/2025 09:32 AM
User Experience
Latency optimisation and self-healing network capabilities
Reseller Opportunities in SASE
The SASE market presents substantial business potential for channel partners, with projected revenue reaching £12.5 billion by 2027, greatly improved by accelerating cloud adoption and the continued shift toward remote work models.
One of the key opportunities for resellers is that they can benefit from subscription-based revenue streams that generate predictable, recurring income through managed services and ongoing customer relationships - an easy way to ensure your businesses revenue for the length of a given contract.
The bulk of the lesser-tapped opportunity lies in where partners can create meaningful competitive differentiation via value added services - bundling SASE offerings with complementary technologies that the reseller also has in their portfolio, providing more complete solutions that address broader customer requirements.
To effectively capitalise on these opportunities, resellers should invest in developing expertise through Zero Trust certifications and vendor-specific credentials from market leaders and whichever SASE offerings/network and security solutions they offer in their portfolio.
Further to simply reselling, partners can develop better service delivery models ranging from white-label SASE offerings to co-managed deployments that leverage vendor technical support.
Provider Comparison
Here at Netify, we've compared the managed SASE market, highlighting the ins and outs of each provider and what their reseller programme entails.
Virgin Media Business
Virgin Media O2
Virgin Media Business is a well-known broadband provider and, over the past decade, has expanded from broadband and leased line services to a full suite and leader of converged networking and security solutions. Virgin Media has been able to offer a SASE solution since 2021 through their partnership with Zscaler.
Managed SASE Solution Overview
Virgin Media Business takes a slightly vendor agnostic approach, delivering a hybrid SASE solution that combines their SD-WAN underlay with a choice of SASE overlays from leading vendors, such as Versa Networks and VMware VeloCloud.
Virgin Media’s SASE solution provides all of the typical functionality, such as a unified networking and security stack, with built-in firewalls, intrusion detection/prevention and Zero Trust Network Access (ZTNA).
The importance of the partnership with Zscaler’s Zero Trust Exchange further strengthens the security offerings, providing cloud-native security services such as SWG, cloud sandboxing, CASB and data loss prevention, all delivered as-a-service and boosting the overall solution to be a complete security offering.
Due to Virgin Media’s SASE overlay partnerships, both VMware VeloCloud and Versa Networks, alongside Virgin Media’s expansive fibre UK network, Virgin Media can provide cloud-optimised connectivity to cloud applications and services, which can be particularly beneficial for businesses leveraging SaaS applications.
Further to this, Virgin Media’s SASE solution offers Zero-touch provisioning for improved scalability, allowing for quicker deployment across distributed environments.
Target Market
Being a UK-focused provider, Virgin Media Business’s managed SASE solution is tailored for the UK market.
Typical target resellers include managed service providers and telecoms partners looking to bundle networking and security solutions for their customers alongside any broadband offerings they may also be reselling.
End users are often mid-market to large enterprises with distributed workforces and cloud-first strategies (owing to the solutions cloud access strength), especially those requiring connectivity for multiple sites or remote employees.
Reseller Programme Details
Virgin Media Business has implemented a partner programme comprising of three distinct tiers: Approved, Gold and Platinum.
Each of these tiers are based on sales volume, offering varying levels of support and commercial advantages, making the programme suitable for both small and large resellers. However it should be noted that Virgin Media also offers their UltimateFlex option, which allows for anytime cancellation and zero installation charges for end customers.
Partners gain access to Virgin Media Business’s network and security portfolio, therefore widening the product portfolio that resellers can harness, beyond SASE and cloud security.
Whilst Approved tiers have access to a partner success team that provides assistance throughout the service lifecycle, Gold and Platinum tiers build on this, with these partners receiving dedicated account management support. Technical support provides a certification programme and pre-sales support for complex deployments and is complemented by a 24/7 dedicated partner support desk that operates independently from end-user support channels.
Unique Selling Points
Virgin Media’s SASE solution is particularly well-suited for multi-site, remote and hybrid cloud deployments due to the utilisation of VMware VeloCloud and Versa Networks SASE vendors. Offering end-to-end service ownership, with Virgin Media managing both the network underlay (broadband, leased lines) and the SASE overlay, their SASE solution is ideal for businesses looking to reducing overhead complexity.
For resellers, being able to market a solution that leverages Virgin’s high-speed broadband and leased line infrastructure can be a very powerful marketing tool, with the majority of people in the UK recognising the brand name. Virgin’s network is also ideal for ensuring optimal performance and reliability for cloud-centric operations, which is further backed by cloud-native security and Zero Trust access capabilities to reinforce connectivity with security.
BT
BT Logo
In 2024, BT expanded its managed SD-WAN portfolio by launching a new SASE solution powered by Fortinet. This move is aimed at supporting UK businesses and public sector organisations, particularly as cloud adoption and remote work uptake continues to accelerate within the UK. BT’s SASE offering not only leverages BT’s extensive UK network for optimised performance capabilities but through their partnership with Fortinet, BT have gained a recognised leader in SD-WAN and security services. This is backed up by Fortinet’s position as a Leader in the 2024 Gartner Magic Quadrant for SD-WAN and their long history of security-driven products, therefore offering underlay that competes with Virgin Media’s and a more security-focused overlay.
Managed SASE Solution Overview
By integrating Fortinet-powered SSE with BT’s managed SD-WAN capabilities, BT are able to offer a cloud-native,
Offering all of the typical core SASE features, such as cloud access security broker for visibility and control over cloud applications, enforcing security policies and compliance, SWG for filtering web traffic/block malicious content, firewalls, data loss prevention and zero trust network access capabilities.
Target Market
BT targets resellers such as UK-based Managed Service Providers (MSPs) and public sector specialists and their SASE solution is best suited for enterprises with both strict performance and security capabilities, such as those in finance, logistics and healthcare environments.
Reseller Programme Details
The BT reseller programme utilises tiers, splitting resellers into Select, Advanced, Premier and Commercials tiers.
wdt_ID
wdt_created_by
wdt_created_at
wdt_last_edited_by
wdt_last_edited_at
Tier
Typical Requirements
Benefits & Features
Target Resellers
1
hyelland
06/05/2025 09:41 AM
hyelland
06/05/2025 09:41 AM
Select
Entry-level, minimal requirements
Basic access to BT products and services, standard commissions
New or smaller resellers
2
hyelland
06/05/2025 09:41 AM
hyelland
06/05/2025 09:41 AM
Advanced
Some sales history, moderate requirements
Higher commissions, additional training, support resources
Growing resellers
3
hyelland
06/05/2025 09:41 AM
hyelland
06/05/2025 09:41 AM
Premier
Proven track record, higher sales targets
Top commission rates, priority support, marketing resources
BT pays commissions to partners based on a percentage of the Sales Order Value (SOV) for contract terms of 24, 36, or 60 months. When considering BT, we'd recommend considering the commission rates for each type of contract, with higher commissions paid for new business or competitive winbacks, upgrades receiving moderate commissions and contract resigns (renewals without technology or speed change) receiving the lowest commissions. However, partners can in fact increase their commissions by bundling value-added services on top of managed SASE, such as McAfee Virus Scanning.
Resellers are support by BT through dedicated technical account managers, as well as a Security Operations Center (SOC) integration, with services for threat monitoring and response.
Unique Selling Points
BT’s SASE solution is optimally designed for secure, compliant access for remote and public sector teams, with protected cloud migration that can be a perfect fit for the likes of financial institutions, the NHS and other regulated industries.
Resellers marketing BT’s SASE solution can emphasise Fortinet’s Threat Intelligence capabilities, such as real-time, AI-powered threat detection and proactive data protection, (which leverages Fortinet’s global threat intelligence), making their offering appeal far more to industries with heavy security requirements
Another key benefit is BT’s Nationwide Network SLAs. These High-performance, resilient connectivity options (both in fixed and 5G access forms), are backed by service-level agreements across the UK, reassuring businesses of uninterrupted connectivity.
Aryaka
Aryaka Logo
Aryaka, founded in 2009 and headquartered in Santa Clara, California, is a well-known provider of SD-WAN and cloud-first networking solutions. Given this, in 2024, Aryaka built on their SD-WAN solution by launching their Unified SASE as a Service. This combines their global private backbone with 14 integrated security engines, setting Aryaka as a leader in secure, high-performance enterprise connectivity.
Managed SASE Solution Overview
Aryaka’s SASE is a cloud-native solution built on the OnePASS architecture, which unifies networking and security functions into a single, efficient workflow.
Offering all of the typical key SASE features, including unified next-generation firewall, secure web gateway, anti-malware protection, zero trust access enabled via SSL decryption, deep packet inspection and adaptive QoS. Further to this, the OnePASS approach ensures that all security and networking policies are enforced in one process, eliminating the traditional trade-off between performance and security.
Target Market
Aryaka targets global managed service providers (MSPs) who serve multinational enterprises, especially those with complex, cross-border networking requirements.
Ideal end users include enterprises requiring low-latency, reliable and secure access across 100+ countries, such as those with distributed workforces, global manufacturing or legal operations.
Reseller Programme Details
Aryaka’s IGNYTE reseller programme is Aryaka’s dedicated reseller initiative within the Accelerate Global Partner Program. IGNYTE specifically targets VARs and SIs globally, with a higher focus on EMEA and is structured into Registered, Advanced and Elite tiers, offering increasing benefits and support.
wdt_ID
wdt_created_by
wdt_created_at
wdt_last_edited_by
wdt_last_edited_at
Registered
Advanced
Elite
1
hyelland
06/05/2025 09:48 AM
hyelland
06/05/2025 09:48 AM
- Entry-level
- Higher sales targets or certifications
- Highest requirements (revenue, certifications, business planning)
2
hyelland
06/05/2025 09:48 AM
hyelland
06/05/2025 09:48 AM
- Basic access to sales tools, training and resources
- Improved incentives (higher margins and rebates)
- Maximum incentives and margins
3
hyelland
06/05/2025 09:48 AM
hyelland
06/05/2025 09:48 AM
- Limited incentives and support
- Priority access to marketing resources
- Co-marketing/co-selling opportunities
4
hyelland
06/05/2025 09:48 AM
hyelland
06/05/2025 09:48 AM
- Self-paced online training and certification available for all partners
- Greater sales and technical support
- Dedicated account management
5
hyelland
06/05/2025 09:48 AM
hyelland
06/05/2025 09:48 AM
- Additional sales incentives and marketing alignment for higher tiers
- Early access to new solutions and programs
6
hyelland
06/05/2025 09:48 AM
hyelland
06/05/2025 09:48 AM
- Strategic account mapping, dedicated support, and co-investment in marketing
Resellers can earn margins between 20–30%, with potential for higher returns (up to 35%) based on deal size and volume-based rebates. On top of this, Aryaka offers additional incentives such as free months of service for end customers and white-label/co-management options for partners - which when offered through an “as a service” model, minimises complexity and speeds up time to market.
There are no upfront investment or revenue commitments required, reducing risk for partners, which is also backed up by the MyAryaka portal providing self-configuration and co-managed service options, allowing partners to determine their level of expertise commitment.
Partners interested in joining can engage directly with Aryaka’s channel team or through the company’s partner portal to initiate the application process and access programme resources.
Unique Selling Points
Aryaka’s strengths lie in their real-time collaboration tools and secure SaaS capabilities, which can be ideal for both manufacturing/engineering environments (where cloud-based CAD is used) or legal and professional services firms.
Their single-pass architecture eliminates performance-security trade-offs, ensuring high performance and security simultaneously, whilst a global private backbone with over 40 points of presence delivers sub-30ms latency to 95% of the world’s business population. Finally, an all-in-one subscription model eliminates capital expenditures and hardware replacement costs.
Cato Networks
Founded in 2015 by Shlomo Kramer (co-founder of Check Point and Imperva) and Gur Shatz, Cato Networks pioneered SASE by combining networking and security into a cloud-native platform. This style of architecture predated Gartner's formal SASE definition (2019), with operational deployment since 2016, therefore offering arguably the first SASE solution.
Target Market
Cato targets resellers such as security-focused MSPs and channel partners, which has seen recent improvements to their support network through a revamped partner program (launched 2023) and improvements to onboarding. Ideal resellers include MSPs integrating Cato’s platform with other services or delivering it as their primary offerings, partners that provide telecom and unified communications alongside SD-WAN solutions, as well as distributors adding integration services to Cato’s offerings, particularly outside the U.S.
For end users, Cato’s SASE solution is best suited to mid-market enterprises with hybrid cloud environments, branch locations and distributed workforces. We'd argue that Cato has recently become vastly more suitable for retailers given that they became the first SASE platform to achieve PCI DSS v4.0 compliance in February 2025.
Reseller Programme Details
Operating a 100% channel-centric sales model, Cato offers multiple engagement methods, including resale, MSP models (Cato Partner MSASE), and referral programmes, selling their subscription service through partners globally. Cato doesn't deal with end users directly, preferring to work in the channel and this is highlighted by the amount of support Cato provides - offering the likes of free training and certification courses through their Academy.
The program includes two tiers, Professional and Premium, catering to varying levels of reseller engagement and expertise.
The Professional Partner model is designed for solution providers selling SD-WAN as an MPLS replacement, secure branch internet access or optimised global connectivity. This includes access to on-demand training and certifications, free demo licenses, equipment and marketing development funds (MDF) to support lead-generation efforts.
Whereas Premium Partners offers further benefits such as a new discount layers for partners who actively engage in pipeline activities and joint selling efforts with Cato Networks. Premium partners are typically more integrated with Cato's services, placing Cato offerings directly on their paper
Resellers can progress deals independently without requiring vendor approval for discounts, which can assist with the sales process. Partners gain access to free demo licenses, equipment and market development funds to support their sales efforts, with partners reportedly winning 80% of deals after completing a proof-of-concept.
To join the Cato SASE reseller programme, prospective partners should register on the Cato Networks partner portal, which will provide a structured onboarding process that includes required training and certifications.
Unique Selling Point
Cato’s global private backbone with over 70 PoPs, ease of deployment and recognition as a market leader highlights their capability to cater a wide range of businesses.
Cato also provides the more unique capability of Internet of Things (IoT) security, providing full traffic inspection for connected devices that don't have built-in security measures.
We also ranked Cato Networks as the easiest to use SD-WAN solution (which forms part of their SASE offering) in the Netify 2025 SD-WAN Vendor Comparison Matrix, which emphasises just how focused Cato are on simplified management.
Globalgig
Globalgig Logo
Globalgig launched Managed SSE in November 2024 using Palo Alto Networks Prisma Access and further improved in March 2025 following a strategic partnership with Palo Alto Networks that strengthened their managed SASE portfolio, building on their prior offerings of Cisco Catalyst and Cisco Meraki. Customers can choose between fully managed or co-managed deployment options, all backed by 24/7 SOC support.
It's worth noting that Globalgig's managed services are structured into Essential, Plus and Premier tiers, offering escalating levels of service from basic monitoring to full device management and enhanced analytics.
wdt_ID
wdt_created_by
wdt_created_at
wdt_last_edited_by
wdt_last_edited_at
Feature/Service Area
Essential
Plus
Premier
1
hyelland
06/05/2025 09:51 AM
hyelland
06/05/2025 09:51 AM
Hardware & Circuit Monitoring
Included
Included
Included
2
hyelland
06/05/2025 09:51 AM
hyelland
06/05/2025 09:51 AM
Reporting & Troubleshooting
Included
Included
Enhanced with advanced analytics and intelligence
3
hyelland
06/05/2025 09:51 AM
hyelland
06/05/2025 09:51 AM
Device Management & Configuration
Not included
Included
Included
4
hyelland
06/05/2025 09:51 AM
hyelland
06/05/2025 09:51 AM
Network & Flow Intelligence
Not included
Not included
Included (AI-driven analytics, application visibility)
5
hyelland
06/05/2025 09:51 AM
hyelland
06/05/2025 09:51 AM
Application Visibility & Reporting
Not included
Not included
Included
6
hyelland
06/05/2025 09:51 AM
hyelland
06/05/2025 09:51 AM
Enhanced Troubleshooting
Not included
Not included
Included
7
hyelland
06/05/2025 09:51 AM
hyelland
06/05/2025 09:51 AM
24/7 SOC & Real-Time Threat Response
Not included
Not included
Included (with proactive security support and incident response)
Globalgig's target market strategy focuses on niche MSPs and channel partners, with an implied emphasis on compliance-sensitive sectors through their ZTNA implementations and GDPR use cases. Their end customer base primarily consists of global enterprises requiring secure access solutions for hybrid workforces, IoT deployments and multi-site operations.
Reseller Programme Details
The multi-tiered (essential, plus, premier) service approach enables resellers to target different customer segments-from basic monitoring to fully managed, intelligence-driven services, which offers increasing average revenue per user (ARPU) as clients move up tiers.
wdt_ID
wdt_created_by
wdt_created_at
wdt_last_edited_by
wdt_last_edited_at
Tier
Key Features
1
hyelland
06/05/2025 09:54 AM
hyelland
06/05/2025 09:54 AM
Essential
Basic hardware and circuit monitoring, reporting and troubleshooting.
2
hyelland
06/05/2025 09:54 AM
hyelland
06/05/2025 09:54 AM
Plus
Includes all Essential features, plus full device management and configuration.
3
hyelland
06/05/2025 09:54 AM
hyelland
06/05/2025 09:54 AM
Premier
Includes all Plus features, plus additional network and flow intelligence, application visibility and improved reporting/troubleshooting capabilities.
Partners can also benefit from access to Orchestra's white-labeled portal for usage monitoring and API integration, whilst the managed and co-managed models allow resellers to offer value-added services, such as ongoing management, analytics and compliance support, which can be further monetised for more premium offerings.
For support, Globalgig offers partners with the Orchestra platform, which encompasses training on inventory management, billing operations and analytics, alongside SOC-driven threat response capabilities to ensure resellers have all the required expertise to assist end users with any troubleshooting and management.
Prospective resellers interested in joining Globalgig’s SASE reseller programme should apply via Globalgig's partners page. Once the form is submitted, a channel executive from Globalgig will reach out to discuss the programme in more detail and guide applicants through the next steps. This approach ensures that interested parties receive direct support and information tailored to their business needs, which can be essential for correctly onboarding into the Globalgig partner programme.
Unique Selling Point
Globalgig's unique selling points include specialised use cases such as GDPR-compliant data handling through DLP and CASB technologies and secure telehealth access via ZTNA and encrypted traffic monitoring.
Their key differentiators in the market include co-managed flexibility with continuous SOC support, real-time traffic monitoring through Orchestra Insight's AI-driven dashboards and multi-vendor SD-WAN/SASE support that effectively reduces vendor lock-in concerns for customers.
Comcast Business
Comcast Business Logo
In 2021 Comcast Business acquired Masergy, a software-defined networking pioneer that was founded in 2000. With Masergy recognised for early SD-WAN innovation, Comcast Business provides AI-driven SASE solutions and autonomous networking capabilities, leveraging partnerships with Fortinet and other leading vendors.
Managed SASE Solution Overview
Comcast Business offers a hybrid SASE architecture with all of the standard security services, including zero trust network access, cloud access security broker and secure web gateways.
What sets Comcast apart from other solutions on the market is that their solution leverages AI-powered analytics, where AIOps acts as a virtual network engineer to continuously optimise performance and enhance threat detection capabilities.
Customers can choose between fully managed options with end-to-end support or co-managed solutions that allow client configuration through a dedicated portal.
Target Market
Comcast's global partner program caters to Managed Service Providers, Value-Added Resellers (VARs) and system integrators looking to expand their security portfolios.
On the end-customer side, Comcast Business primarily targets Fortune 500 firms and enterprises in regulated sectors such as healthcare, finance and manufacturing that require secure global network infrastructure.
Reseller Programme Details
The reseller program is structured to accommodate various partner types, including VARs, master agents and consultants, with tiered incentives based on performance and commitment. One of these is that resellers benefit from hardware margins, monthly recurring revenue (MRR) and easy-to-add service upgrades, providing significant potential.
The programme is structured around two main tiers for resellers:
wdt_ID
wdt_created_by
wdt_created_at
wdt_last_edited_by
wdt_last_edited_at
Fully Managed Service
Co-Managed Service
1
hyelland
06/05/2025 09:58 AM
hyelland
06/05/2025 09:58 AM
Comcast Business provides the complete SASE solution, including all aspects of management and support. The reseller focuses on sales and customer relationship management, while Comcast Business handles the technical delivery and ongoing service operations
Reseller or MSP is responsible for Tier 1 and Tier 2 client support, while Comcast Business provides the underlying SASE platform and escalated support. This tier allows resellers to maintain a closer relationship with their clients and expand their servi
Resellers can participate without needing advanced technical certifications, lowering the barrier to entry and reducing training costs. To supplement this, partners benefit from dedicated account teams, comprehensive pre-sales and post-sales support and access to market development funds to drive business growth and help build expertise.
To join the Comcast Business Solutions Advisor Program, prospective partners should visit the Comcast Business partner portal and submit their application through the Solutions Advisor Program page, where they will find details on program benefits and requirements. Once accepted, resellers will gain access to the tools, training and support necessary to effectively resell Comcast Business SASE, backed by a dedicated partner management team.
Unique Selling Points
Comcast Business distinguishes itself by supporting and providing AI-enhanced threat detection with 24/7 Security Operations Centre services. Their key differentiators include application Service Level Agreements with industry-leading uptime commitments, custom AI models that deliver predictive analytics and autonomous network recommendations and support for hybrid deployments with third-party connectivity options.
NTT Global
NTT (Nippon Telegraph and Telephone Corporation) is one of the world’s largest telecommunications and ICT (Information and Communications Technology) companies, with approximately 330,000 employees and over 900 related companies operating globally.
NTT has evolved from Japan’s primary telegraph and telephone provider, now offering the likes of SASE via partnerships with leading security vendors, such as Palo Alto Networks.
Managed SASE Solution Overview
NTT Global delivers a fully managed, end-to-end SASE solution that combines its global managed network services with Palo Alto Networks’ Prisma SASE technology. This single-vendor solution unifies SD-WAN, with all of the typical SSE features and AIOps automation capabilities into a single, cloud-native service.
Target Market
In terms of target market, NTT focuses on two key sectors. For resellers, they focus on global MSPs and regional security-focused partners who can extend their reach.
Their end customers primarily comprise of large enterprises requiring simplified multi-cloud security solutions and support for hybrid workforce environments.
Reseller Programme Details
NTT’s Global Management One (GMOne) Partner Program is structured into tiers, Expert, Professional or Leader, with partners sorted based on their annual contract value (ACV) contributions and experience levels.
wdt_ID
wdt_created_by
wdt_created_at
wdt_last_edited_by
wdt_last_edited_at
Feature/Requirement
Expert
Professional
Leader
1
hyelland
06/05/2025 10:02 AM
hyelland
06/05/2025 10:02 AM
Target Partner Size
Small to medium resellers, new to managed services
Medium resellers seeking to expand managed services expertise
Large, experienced partners with significant managed services business
2
hyelland
06/05/2025 10:02 AM
hyelland
06/05/2025 10:02 AM
Training & Certification
Basic knowledge required via online, partner-only training and materials
Higher commitment to training and certifications
Highest level of training and certifications required
3
hyelland
06/05/2025 10:02 AM
hyelland
06/05/2025 10:02 AM
Pre-sales Support
Some pre-sales support provided by NTT
Increased autonomy, with support as needed
Largely self-sufficient; minimal NTT support required
4
hyelland
06/05/2025 10:02 AM
hyelland
06/05/2025 10:02 AM
Benefits
Access to partner portal, basic benefits, some deployment resources
Improved resources and marketing collaboration. Eligible for participation in joint business development initiatives.
Eligibility for Marketing Development Funds, access to leads and dedicated sales support.
5
hyelland
06/05/2025 10:02 AM
hyelland
06/05/2025 10:02 AM
Market Focus
Specific industries and customer segments
Broader market reach
Market-leading, wide coverage
NTT places strong emphasis on co-selling opportunities and technical enablement for certified partners, which includes a variety of online training, sales and technical certifications, as well as access to partner-only materials.
Prospective resellers interested in joining NTT’s SASE reseller programme begin by submitting an application through the official partner website or by contacting NTT via the dedicated partner email address. Once the inquiry is received, NTT arranges an introductory meeting to understand the applicant’s expectations, experience, business goals and may request a proof of concept to further assess suitability for the programme. If successful, partners will undergo NTT's onboarding process, which includes a 12 week enablement programme.
Unique Selling Points
NTT’s Prisma SASE solution is tightly integrated with its proprietary Sentient Platform for Network Transformation (SPEKTRA), which unifies security, observability, AI, incident management, automation and reporting into a single managed service. NTT also operates six 24x7 Security Operations Centres staffed by over 2,000 security professionals, processing and analysing vast volumes of security data for more than 1,600 customers globally.
IBM
IBM Logo
International Business Machines Corporation (IBM), founded in 1911, are well known for having set industry standards for business computing. This history underpins IBM’s SASE solution, which leverages decades of expertise in secure infrastructure, hybrid cloud and open standards to deliver their managed SASE offering.
By integrating technologies from Zscaler, a leader in the SASE market, as well as applying its own expertise, IBM’s managed SASE has been able to become a trusted enterprise-grade solution with support for hybrid workforces, Internet of Things and 5G for mobile use cases.
Managed SASE Solution Overview
IBM’s managed SASE solution is ideal for hybrid workforce access and, on top of the typical SASE capabilities, offers multiple notable features, including third-party policy extension capabilities, merger and acquisition integration support and specialised protection for IoT/edge computing environments.
Target Market
On the reseller front, they focus on enterprise-oriented Managed Service Providers) that possess expertise in sectors such as healthcare and finance.
For end customers, IBM concentrates on regulated industries that are actively undergoing cloud migration processes or organisations engaged in merger and acquisition activities. IBM's solution is particularly well-suited for organisations managing complex mergers or deploying IoT and 5G technologies.
Reseller Programme Details
IBM's reseller programme is part of their broader Partner Plus ecosystem, offering IBM’s global technical resources, hands-on training and special pricing. The programme is open to a range of partners, including consultancies, MSPs and systems integrators, who can quickly become authorised to resell SASE solutions by joining the IBM PartnerWorld.
IBM's Partner Plus program is structured with multiple tiers, including Silver, Gold, Platinum and Blue, where each tier offers progressively greater levels of support, benefits and incentives. IBM emphasises joint solution development with partners, offering incentives specifically designed for cloud and security specialisations.
wdt_ID
wdt_created_by
wdt_created_at
wdt_last_edited_by
wdt_last_edited_at
Silver
Gold
Platinum
Blue
1
hyelland
06/05/2025 10:05 AM
hyelland
06/05/2025 10:05 AM
Entry-level tier, providing foundational access to IBM resources, training and support. Receive basic financial incentives and go-to-market support, making it suitable for new or smaller partners.
Gold partners have demonstrated higher levels of technical skill and sales success. This comes with the benefit of improved financial incentives and greater support/training resources.
Platinum is the top standard tier, reserved for partners who have achieved significant sales milestones and possess technical expertise. Platinum partners benefit from the highest levels of financial rewards, priority support and exclusive co-marketing op
Invitation-only level for partners with deep integration and strategic collaboration with IBM. Offers bespoke benefits, direct engagement with IBM leadership and co-innovation opportunities.
Unique Selling Points
The unique selling points of IBM's SASE solution include its zero-trust granularity, which effectively extends security policies to contractors and third parties.
Verizon
Verizon Logo
Verizon's SASE model capitalises on the company's extensive managed network heritage whilst leveraging partnerships with industry leaders including Versa, Cisco, Zscaler and Palo Alto.
Managed SASE Solution Overview
Verizon’s managed SASE solution differs from other SASE vendors through their complimenting Network Operations Centre (NOC) and Security Operations Centre (SOC) integrations, ensuring correct policy management and security measures are enforced and up-to-date across all network edges, assisting with the uptime of core business functions.
Due to taking a SASE vendor agnostic approach, Verizon places itself as a SASE provider that can utilise which vendor's offerings are best suited to a given end users needs. This can offer greater cost effectiveness, as well as helping to meet regulatory frameworks or performance SLA requirements.
Target Market
Due to the multi-vendor arsenal, Verizon can be ideal for resellers, allowing large telecommunications partners and Managed Service Providers (MSPs) to resell a range of solutions and therefore target a broader audience.
Given this, we'd therefore suggest that Verizon is ideal for a wide range of businesses across the US, where Verizon's telecommunications offerings are most prevalent.
Reseller Programme Details
Verizon’s reseller programme is structured into four tiers: Member, Silver, Gold and Platinum.
wdt_ID
wdt_created_by
wdt_created_at
wdt_last_edited_by
wdt_last_edited_at
Member
Silver
Gold
Platinum
1
hyelland
06/05/2025 10:07 AM
hyelland
06/05/2025 10:07 AM
Entry-level membership with access to basic program benefits and resources.
Offers additional training and marketing incentives.
Provides more lucrative incentives, exclusive webinar content and conference invitations.
Assigned marketing resources and joint participation at events.
Each tier is priced on a per-user basis with progressively improved security features and an incentive structure that favours partners who offer bundled Network-as-a-Service (NaaS) solutions.
Unique Selling Points
Verizon's USP comes from their multi-vendor approach, integrating each with their own global network (bundling SASE and telecommunications services into a single package) and providing both NOC and SOC support.
Lumen
Lumen Technologies Logo
Lumen Technologies, formerly CenturyLink, is a global telecommunications and enterprise technology company. Well known for offering network security, cloud solutions, voice and fibre offerings, Lumen have a strong expertise in many network products that make them ideal for SASE.
Managed SASE Solution Overview
Lumen’s managed SASE solution can be deployed via a cloud native approach, alongside premise-based alternatives for organisations with specific infrastructure requirements.
Beyond the standard SSE capabilities, Lumen’s SASE provides remote access gateways and expanded geographical coverage across EMEA and Canada, ensuring broad availability for client needs in these regions.
Lumen's SASE is also split into self-managed and pro-managed offerings:
Self-managed: Designed for organisations with in-house IT expertise who want to manage their own SASE solution. Lumen provides the design, implementation and standard tools for monitoring and integration.
Pro-managed: A fully managed option where Lumen handles everything from implementation to ongoing operations, including software and policy updates, troubleshooting and IT staff support
Target Market
Lumen has strategically targeted regional Managed Service Providers (MSPs) with a mid-market focus as its primary reseller base, focusing heavily on EMEA and Canada.
End customers in these same regions benefit most from Lumen's offerings include businesses operating with hybrid security perimeters, particularly in sectors such as retail and healthcare.
Reseller Programme Details
Lumen's Channel Partner Program invites a range of partners-including value-added resellers and managed service providers, emphasising a "grow as you go" pricing structure designed to scale with business requirements.
Unique Selling Points
Firstly, Lumen offers predictable pricing models that simplify cost structures for cloud gateways, removing budgetary uncertainties for clients. Second, Lumen has developed specialised use cases for organisations in transition from legacy MPLS infrastructure to more modern, cloud-centric network architectures, positioning itself as an ideal partner for businesses undergoing a transition from these older network architectures to SASE.
AT&T
AT&T Logo
AT&T are well known for their US fibre and mobile infrastructures, and having collaborated with Palo Alto, AT&T have been able to combine their connectivity with Palo Alto’s Prisma SASE security architecture.
Managed SASE Solution Overview
AT&T's SASE offering provides all of the common SASE capabilities, providing round-the-clock management services for ensuring continuous oversight and support, as well as consulting services to complement the technical aspects of their SASE offering.
AT&T’s Security Operations Centre analysts provide continuous monitoring, deployment, and support, acting as an extension of the customer’s IT and security teams, whilst the integration with AT&T Alien Labs Threat Intelligence improves visibility and response to threats.
Target Market
As AT&T already target the US market with their broadband solutions, it's no surprise that AT&T focus their SASE solution on US MSPs. Given their network capabilities and the security features of Palo Alto Prisma, AT&T's solution is often seen as ideal for partners specialising in government sectors.
We'd argue that AT&T's managed SASE solution is designed for global enterprises, supporting highly distributed users and devices with worldwide points of presence.
Reseller Programme Details
AT&T offers both fully managed and co-managed options for their SASE solutions, enabling partners to tailor services to customer needs.
AT&T's reseller programme allows partners to build recurring revenue, customise offers and access co-branding opportunities. Partners can resell AT&T’s managed SASE solutions as part of their portfolio, benefiting from AT&T’s expertise and global reach
Unique Selling Points
The most noteworthy selling point of AT&T's managed SASE solution is their extensive global infrastructure that can provide superior connectivity and performance. However, it should also be noted that the partnership with Palo Alto is arguably just as important and can assist with meeting regulatory compliance requirements, which can be important for state and local government entities.
Summary
SASE is redefining enterprise security by merging networking and cloud-native protection. Enterprises should prioritise vendors offering global PoPs, zero trust capabilities and centralised management. Resellers can capitalise on this shift by adopting phased rollouts (such as starting with ZTNA or SWG) and partnering with vendors providing training/certifications and significant margins.
