Who’s selling SASE and what do you get?

SASE rolls networking and security into a cloud service, making it easier for enterprises to provide simple, secure access to corporate resources. Many vendors offer SASE services, but what they actually provide and how they provide it varies widely.

1 2 Page 2
Page 2 of 2

Cloudflare began as a content delivery network provider. Today, its Cloudflare One solution offers ZTNA, SWG, and FWaaS along with remote browser isolation, DNS filtering, DDoS protection and other threat and data protections using a single management interface.

Cloudflare acquired Vectrix, a CASB company, in February and it partnered with VMware, Aruba, and Infovista for the SD-WAN piece in 2021.


iboss offers a containerized zero-trust service that's deployed in more than 100 PoPs globally. It provides SWG, CASB, ZTNA, FWaaS, remote browser isolation, anti-malware, and anti-phishing features. It doesn’t offer SD-WAN but says it integrates with all major SD-WAN solutions.

According to the company, its zero trust platform differs from that of other vendors because it covers both Internet-facing and internal network edges with the same security edge, while other companies have different edges for Internet and private connections, resulting in different levels of protection and visibility.

Gartner says iboss SASE customers automatically receive a license for the ZTNA product, instead of having to pay separately for the zero-trust feature. That makes the pricing more attractive and increases the overall value of the iboss SASE platform.


Gartner says Lookout appears less frequently on shortlists but has strong data security capabilities and a strong sales strategy for a relatively small vendor.

Lookout’s SASE offering is called Lookout Security Platform, and the company partners with HPE, VMware, and Versa for its SD-WAN.

The Lookout Security Platform has CASB, ZTNA, SWG, user and entity behavior analytics, data loss prevention, and enterprise digital rights management. FWaaS is not offered.


Netskope is considered a leader in Gartner’s Magic Quadrant for SSE and appears frequently on clients’ shortlists. Netskope’s SASE offering is called the Netskope Intelligent Security Service Edge.

Netskope Intelligent SSE offers security components including SWG, CASB, ZTNA, cloud security posture management, FWaaS, data loss prevention, and user and entity behavior analytics. SaaS security posture management and remote browser isolation were also introduced in the last year.

Netskope doesn’t offer SD-WAN, but it says it can integrate seamlessly with SD-WAN technologies.

Perimeter 81

Perimeter 81’s SASE product, the Cybersecurity Experience Platform, was developed in-house and includes ZTNA, FWaaS, and SWG. CASB is in their product roadmap. The company has over 2,200 customers, over 40 global points of presence, and its growth has been 400% year over year.

Perimeter 81’s cloud-delivered ZTNA was recently recognized by Forrester as a zero trust leader. The analyst firm called it the best option for smaller enterprises that need a ZTNA service because they can sign up quickly and onboard dozens of applications in less than a month using its self-service portal.


Zscaler is a leader in Gartner’s Magic Quadrant for SSE and is frequently seen on shortlists. In the past year it’s improved its CASB offering by introducing API integrations with more SaaS applications, integrating remote browser isolation, and improving data security features.

Zscaler offers SWG, CASB, FWaaS, and ZTNA and has a global presence through more than 150 of its data centers. Gartner estimates that it has a large share of the market for cloud-based SWGs and ZTNA.

The company is missing the SD-WAN piece but offers it through partners including Silver Peak, Viptela, and VMware. According to Gartner, it has stronger partnerships with tighter integrations than other vendors.

Join the Network World communities on Facebook and LinkedIn to comment on topics that are top of mind.

Copyright © 2022 IDG Communications, Inc.

1 2 Page 2
Page 2 of 2