Table of Contents
| The top 10 SD-WAN vendors and providers we recommend are Fortinet, Cisco Catalyst, Aryaka, Meraki, Aruba EdgeConnect, Cato, VeloCloud, Palo Alto Prisma, Barracuda, and Versa. IT decision-makers need to consider capability across configuration, deployment, managed services, SASE network security, underlay support, and cost. Additional key factors include application performance optimisation, cloud on-ramps, Zero Trust Network Access (ZTNA), AI-driven automation, scalability, high availability, security integration, edge and IoT readiness, WAN optimisation, and granular policy control. |
Our team has tested, reviewed and compared the best SD-WAN vendors and managed service providers which fit the needs of most UK and North American businesses, with national and global requirements.
Software Defined Wide Area Network (SD-WAN) solutions offer a significant improvement to network performance, scalability and security features when compared with traditional WAN networks. However, choosing the best SD-WAN provider can be a difficult task, especially given how many different features and requirements your business might have.
We’ve assessed and compared SD-WAN platforms for their performance across every area IT decision makers should consider: management interface, application performance, network security, network resilience, support, features, reporting and overall capability. The best SD-WAN vendors and providers made the cut for this guide, and we have applied ratings across each key area.
Vendor Analysis Overview
Best SD-WAN Vendor Features Comparison Matrix
| wdt_ID | wdt_created_by | wdt_created_at | wdt_last_edited_by | wdt_last_edited_at | Feature | Fortinet | Cisco Catalyst | Aryaka | Cisco Meraki | HPE Aruba EdgeConnect | Cato | VeloCloud | Prisma (Palo Alto) | Barracuda | Versa Networks |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | hyelland | 27/01/2025 10:22 AM | hyelland | 27/01/2025 10:22 AM | Cloud Integration | – Supports public, private, and hybrid cloud environments. | – Offers integration with various cloud platforms. | – Provides cloud-native solutions. | – Integrates with multiple cloud services. | – Supports seamless cloud integration. | – Cloud-native architecture. | – Designed for cloud integration. | – Offers cloud integration capabilities. | – Provides cloud integration features. | – Supports cloud environments. |
| 2 | hyelland | 27/01/2025 10:22 AM | hyelland | 27/01/2025 10:22 AM | Multi-cloud Connectivity | – Enables connectivity across multiple cloud platforms. | – Facilitates multi-cloud connections. | – Offers multi-cloud connectivity solutions. | – Supports connections to various cloud providers. | – Provides multi-cloud connectivity features. | – Designed for multi-cloud environments. | – Enables multi-cloud connectivity. | – Supports multi-cloud environments. | – Offers multi-cloud connectivity. | – Provides solutions for multi-cloud connectivity. |
| 3 | hyelland | 27/01/2025 10:22 AM | hyelland | 27/01/2025 10:22 AM | SASE Integrations | – Integrates with Secure Access Service Edge frameworks. | – Offers SASE integration capabilities. | – Provides SASE solutions. | – Supports SASE frameworks. | – Integrates with SASE architectures. | – Built on a SASE framework. | – Offers SASE integration. | – Provides SASE solutions. | – Supports SASE integrations. | – Designed for SASE frameworks. |
| 4 | hyelland | 27/01/2025 10:22 AM | hyelland | 27/01/2025 10:22 AM | NGFW Integrations | – Integrates with Next-Generation Firewalls. | – Offers NGFW integration capabilities. | – Provides NGFW solutions. | – Supports NGFW frameworks. | – Integrates with NGFW architectures. | – Built with NGFW features. | – Offers NGFW integration. | – Provides NGFW solutions. | – Supports NGFW integrations. | – Designed for NGFW frameworks. |
| 5 | hyelland | 27/01/2025 10:22 AM | hyelland | 27/01/2025 10:22 AM | IDS and IPS Integrations | – Supports Intrusion Detection and Prevention Systems. | – Offers IDS and IPS integration capabilities. | – Provides IDS and IPS solutions. | – Supports IDS and IPS frameworks. | – Integrates with IDS and IPS architectures. | – Built with IDS and IPS features. | – Offers IDS and IPS integration. | – Provides IDS and IPS solutions. | – Supports IDS and IPS integrations. | – Designed for IDS and IPS frameworks. |
| 6 | hyelland | 27/01/2025 10:22 AM | hyelland | 27/01/2025 10:22 AM | ZTNA Integrations | – Integrates with Zero Trust Network Access solutions. | – Offers ZTNA integration capabilities. | – Provides ZTNA solutions. | – Supports ZTNA frameworks. | – Integrates with ZTNA architectures. | – Built with ZTNA features. | – Offers ZTNA integration. | – Provides ZTNA solutions. | – Supports ZTNA integrations. | – Designed for ZTNA frameworks. |
| 7 | hyelland | 27/01/2025 10:22 AM | hyelland | 27/01/2025 10:22 AM | AI for Network Optimisation | – Utilises AI for network optimisation and analytics. | – Employs AI for predictive analytics and policy management. | – Leverages AI for network performance. | – Uses AI for network optimisation. | – Integrates AI for network management. | – Built with AI-driven features. | – Offers AI-based network optimisation. | – Provides AI-driven analytics. | – Supports AI for network optimisation. | – Designed with AI capabilities. |
| 8 | hyelland | 27/01/2025 10:22 AM | hyelland | 27/01/2025 10:22 AM | Real-time Monitoring and Reporting | – Provides real-time monitoring and customisable reporting. | – Offers performance dashboards and reporting tools. | – Delivers real-time network insights. | – Supports real-time monitoring features. | – Integrates monitoring and reporting tools. | – Built with real-time monitoring capabilities. | – Offers performance dashboards. | – Provides monitoring and reporting solutions. | – Supports real-time monitoring and reporting. | – Designed with monitoring features. |
| 9 | hyelland | 27/01/2025 10:22 AM | hyelland | 27/01/2025 10:22 AM | Zero Touch Provisioning and Deployment | – Supports Zero Touch Provisioning for ease of deployment. | – Offers ZTP capabilities for various environments. | – Provides ZTP solutions. | – Supports ZTP frameworks. | – Integrates ZTP for deployment. | – Built with ZTP features. | – Offers ZTP integration. | – Provides ZTP solutions. | – Supports ZTP integrations. | – Designed for ZTP frameworks. |
| 10 | hyelland | 27/01/2025 10:22 AM | hyelland | 27/01/2025 10:22 AM | Managed Services and Support | – Offers fully managed services with SLAs and 24/7 support. | – Provides managed services and customer support. | – Delivers managed service options. | – Supports managed services frameworks. | – Integrates managed services and support. | – Built with managed service features. | – Offers managed service integration. | – Provides managed service solutions. | – Supports managed service integrations. | – Designed for managed service frameworks. |
| Feature | Fortinet | Cisco Catalyst | Aryaka | Cisco Meraki | HPE Aruba EdgeConnect | Cato | VeloCloud | Prisma (Palo Alto) | Barracuda | Versa Networks |
| wdt_ID | wdt_created_by | wdt_created_at | wdt_last_edited_by | wdt_last_edited_at | Vendor Name | Best Use Case |
|---|---|---|---|---|---|---|
| 1 | hyelland | 20/12/2024 03:53 PM | hyelland | 20/12/2024 03:53 PM | Fortinet | Best for Network Security |
| 2 | hyelland | 20/12/2024 03:53 PM | hyelland | 20/12/2024 03:53 PM | Cisco Catalyst | Best for Large Enterprises/Complex Use Cases |
| 3 | hyelland | 20/12/2024 03:53 PM | hyelland | 20/12/2024 03:53 PM | Aryaka | Best for Managed Services & Coverage in China |
| 4 | hyelland | 20/12/2024 03:53 PM | hyelland | 20/12/2024 03:53 PM | Cisco Meraki | Best Value |
| 5 | hyelland | 20/12/2024 03:53 PM | hyelland | 20/12/2024 03:53 PM | HPE Aruba EdgeConnect | Best for Medium-Sized Enterprises |
| 6 | hyelland | 20/12/2024 03:53 PM | hyelland | 20/12/2024 03:53 PM | Cato | Best for Ease of Use |
| 7 | hyelland | 20/12/2024 03:53 PM | hyelland | 20/12/2024 03:53 PM | Velocloud | Best for Cloud Integrations |
| 8 | hyelland | 20/12/2024 03:53 PM | hyelland | 20/12/2024 03:53 PM | Prisma (Palo Alto) | Best for Advanced AI Networking |
| 9 | hyelland | 20/12/2024 03:53 PM | hyelland | 20/12/2024 03:53 PM | Barracuda | Best for Microsoft Azure Integrations |
| 10 | hyelland | 20/12/2024 03:53 PM | hyelland | 20/12/2024 03:53 PM | Versa Networks | Best for Enterprises Managing Multiple Entities |
| Vendor Name | Best Use Case |
Detailed Vendor Reviews
The following reviews detail the top SD-WAN providers in order to best-place their use case. Features, customer opinions and price insights are provided to assist navigation of the SD-WAN market.
Fortinet SD-WAN
What is Fortinet best for?
Fortinet is a good general solution for most requirements. However, they are best known for strengthened Network Security services.
We are particularly impressed by Fortinet’s potential for scalability and cost-efficiency in enterprise environments, noting that in large deployments of over 1000+ units, Fortinet could offer substantial savings in comparison to separate firewall and SD-WAN architectures. Further to this, when combining Next Generation Firewall and SD-WAN at the edge, Fortinet offers better functionality and cost than other solutions.
The GUI design of Fortinet is well-optimised for businesses with internal expertise. Whilst Fortinet’s solution does require significant technical know-how to implement properly, the GUI interface is intuitive for experienced networking professionals. Despite posing quite a notable learning curve, we’d stress that this is not primarily due to the complexity of the interface but rather due to Fortinet’s extensive SD-WAN feature set.
However, for businesses also looking to maximise their network performance, it’s worth considering that Fortinet lacks true full-mesh topology with always-on dynamically discovered tunnels, like some of the other vendors in this list. On a more positive note, Fortinet utilises custom-built ASICs (Application-Specific Integrated Circuits) that enable high-performance networking alongside integrated security, making the solutions ideal for businesses prioritising both speed and security.
Given the security focus of Fortinet, it can be important for businesses across many sectors to understand any security limitations that may be present. And with that in mind, the majority of Fortinet’s vulnerabilities are within SSL VPN functionality, although Fortinet has depreciated this capability. Given that it has been disabled in newer models, unless businesses absolutely require SSL VPN, Fortinet still offers a solution, via their IPsec VPN capabilities.
Use Cases
For industries that are heavily regulated where sensitive data is used, such as healthcare and financial services, utilising an SD-WAN vendor with advanced security capabilities is a must.
One of the best showcases for this is Nuffield Health, a healthcare provider that chose to implement Fortinet’s SD-WAN solution. They gained improved performance for their Electronic Health Record (EHR) systems, with improved network security through encryption and segmentation and AI-driven diagnostic capabilities. The implementation of Fortinet at Nuffield reduced operational costs and improved scalability to meet industry demands.
In a similar fashion, CEC Bank who have over 1000 locations and 7000 employees, achieved a 50% reduction in application response times and significantly improved network reliability.
Pricing Insights
| wdt_ID | wdt_created_by | wdt_created_at | wdt_last_edited_by | wdt_last_edited_at | Hardware | Licensing |
|---|---|---|---|---|---|---|
| 1 | hyelland | 20/12/2024 09:17 PM | hyelland | 20/12/2024 09:17 PM | FortiGate-40F: £950 (3-year support). | Annual licenses for SD-WAN features starting at $540. |
| 2 | hyelland | 20/12/2024 09:17 PM | hyelland | 20/12/2024 09:17 PM | FortiGate-60F: £1,250 (3-year support). | Mixed licensing bundles can reduce costs by up to 50%. |
| 3 | hyelland | 20/12/2024 09:17 PM | hyelland | 20/12/2024 09:17 PM | FortiGate-100F: £5,350 (3-year support). | |
| 4 | hyelland | 20/12/2024 09:17 PM | hyelland | 20/12/2024 09:17 PM | FortiGate-200F: £12,250 (3-year support). |
| wdt_ID | wdt_created_by | wdt_created_at | wdt_last_edited_by | wdt_last_edited_at | About | Fortinet |
|---|---|---|---|---|---|---|
| 1 | hyelland | 27/01/2025 11:15 AM | hyelland | 27/01/2025 11:15 AM | Case Study | Nuffield Health adopted a Fortinet SD-WAN solution in order to integrate their numerous healthcare facilities, providing a seamless and secure connection for their electronic health record (EHR) systems. Integrating Nuffield’s EHR systems has been integra |
| 2 | hyelland | 27/01/2025 11:15 AM | hyelland | 27/01/2025 11:15 AM | Telco Partnerships | Middle East e& UAE (formerly Etisalat) launched a managed secure SD-WAN service, building on their partnership since 2015 Partnerships with du, Ooredoo, and Zain to provide managed SD-WAN and security capabilities for enterprises Europe Telefónica Tech e |
| 3 | hyelland | 27/01/2025 11:15 AM | hyelland | 27/01/2025 11:15 AM | Comparative Overview | Core Strenghts – Security, advanced routing and self-healing SD-WAN features. Target Audience – Large enterprises, managed service providers, managed security service providers |
| About | Fortinet |
Cisco Catalyst SD-WAN
Key Features |
Application-Aware Routing, Cloud OnRamp, WAN Optimisation, Cloud Vendor Integration, Identity Based Firewall, App Path Insights |
For large organisations with thousands of sites, typically this means that operations are distributed across multiple geographical regions. One of the key benefits of Cisco SD-WAN is it’s connectivity capabilities, branded as Cisco Multi-Region Fabric, designed for utilising multiple network underlays. This can include premium middle mile, cloud provider’s backbone, Multiprotocol Label Switching (MPLS) or even internet.
One of the best ways that organisations can save on operational costs is via leveraging public clouds, which necessitates simplified cloud connectivity and implementation within any chosen SD-WAN solution. Cisco Catalyst is particularly beneficial for organisations due to automated cloud integration offerings – supporting common public clouds such as Amazon Web Services (AWS), Microsoft Azure and Google Cloud Platform, allowing for quicker cloud migrations.
And, whilst Fortinet is our recommendation for entirely security-focused organisations, Cisco Catalyst also offers its own advanced security offerings. This comes in the form of native integrations for Cisco’s Talos, designed for securing large networks through threat intelligence and detection. Similar to the Talos integrations, Cisco Catalyst’s modularity with other Cisco products means that organisations can maintain compatibility across legacy and new systems whilst upgrading their network capabilities
Unfortunately tailoring of Cisco SD-WAN for complex environments has, in turn, garnered a more complicated experience for the end user. From difficulties in initial setup to the general interface, Cisco is often noted for being harder to work with and entry-level support staff can be left confused (especially for those new to Cisco).
Arguably the most important observation we’ve made with Cisco Catalyst is that the underlying systems have extensive features that very few but the largest networks will ever use, therefore non-large enterprises often don’t feel the full benefit from the feature set. Given the high licensing costs of Cisco and the significant initial investment required in order to get it up and running, we would only really recommend Cisco SD-WAN for larger organisations or businesses with complex requirements.
Use Cases
Being one of the more complex SD-WAN providers, the use cases tend to be across the vast majority of industries, with the size/complexity of the network requirements primarily determining the return on investment that Cisco Catalyst can provide.
According to Cisco themselves, NASA has reported that “the Catalyst 9000 has exceeded NASA’s mission-critical requirements for security and segmentation…and at twice the performance”. This isn’t the only positively reported case study for the Catalyst 9000 though, with Bath Spa University deploying both Catalyst 9136 series Wi-Fi 6E access points and Catalyst 9000 Series Switches to enable new learning models.
Pricing Insights
Whilst features, support levels and costs are all dependent on the hardware and license tier, we’ve given an overview of different product and licensing tier costs to assist in your evaluations, however service providers and partners may provide more tailored pricing or potential discounts for solutions.
| wdt_ID | wdt_created_by | wdt_created_at | wdt_last_edited_by | wdt_last_edited_at | Hardware | Licensing |
|---|---|---|---|---|---|---|
| 1 | hyelland | 20/12/2024 09:15 PM | hyelland | 20/12/2024 09:15 PM | 8500 Series (High-Performance): $34,954 to $251,250 | Essentials: 3-Year Term: Approximately $354.87 5-Year Term: Approximately $1,064.60 |
| 2 | hyelland | 20/12/2024 09:15 PM | hyelland | 20/12/2024 09:15 PM | 8300 Series (Branch Office Deployments): $4,955 to $9,975 | Advantage: 3-Year Term: Approximately $1,064.60 5-Year Term: Approximately $1,774.33 |
| 3 | hyelland | 20/12/2024 09:15 PM | hyelland | 20/12/2024 09:15 PM | 8200 Series (Small to Mid-Size Branches): ~$1,425 USD | Premier: 3-Year Term: Approximately $1,064.60 5-Year Term: Approximately $1,774.33 |
General Customer Feedback
The switches are praised for being easy to configure, set up, and install. They also offer excellent documentation and technical support.
A significant criticism involves Cisco’s power supply design choices. Each new switch model comes with modified power supply units, forcing customers to purchase new PSUs rather than using existing compatible ones.
Some users note that newer switch models feel lighter and less sturdy compared to older versions, suggesting a potential decrease in material quality.
| wdt_ID | wdt_created_by | wdt_created_at | wdt_last_edited_by | wdt_last_edited_at | About | Cisco Catalyst |
|---|---|---|---|---|---|---|
| 1 | hyelland | 27/01/2025 11:14 AM | hyelland | 27/01/2025 11:14 AM | Case Study | New Wave Group is a European growth company that produces corporate goods, sports and leisure items and gifts and home furnishings. They needed to rapidly connect new sites across Europe while improving their cloud access and by replacing their outdated M |
| 2 | hyelland | 27/01/2025 11:14 AM | hyelland | 27/01/2025 11:14 AM | Telco Partnerships | North America Verizon has deployed multiple Cisco SD-WAN solutions including Cisco Viptela Middle East du (UAE) launched Enterprise Plus built on Cisco Catalyst SD-WAN solution for UAE businesses Europe Orange Business Services works with Cisco on ‘Flex |
| 3 | hyelland | 27/01/2025 11:14 AM | hyelland | 27/01/2025 11:14 AM | Comparative Overview | Core Strenghts – Enterprise-grade security, advanced routing capabilities, and resilient, self-healing SD-WAN powered by Cisco Catalyst technologies. Target Audience – Large enterprises, managed service providers, managed security service providers |
| About | Cisco Catalyst |
Aryaka SD-WAN
Key Features |
Application-Aware Routing, Unified SASE, WAN Optimisation, Multicloud Support, Simple Management, Global PoP Network |
By utilising a managed approach, Aryaka focuses on managing everything about your network for you, reducing the complexity of internal administrator workloads. However this service can be quite expensive, especially when utilising higher bandwidth and therefore the Return on Investment (ROI) should be evaluated to determine if lessened network responsibilities are worth the increased price.
One of the more common criticisms of Aryaka’s SD-WAN solution is that it lacks functionality in comparison to other vendors on this list. We’d argue that this is primarily within the security department, with other managed offerings like Cato outperforming Aryaka on this front. However there is a saving grace for Aryaka’s security, with native edge security support meaning that businesses don’t have to send all traffic to a gateway, allowing for security in edge-based architectures like Internet of Things (IoT) and mobile workforces.
Given that other systems provide better security and managed services, we’d therefore focus attention onto Aryaka for businesses that have sites that are more geographically distributed, especially across Asia. Further to this, Aryaka Network-as-a-Service (NaaS) may be more relevant for performance-sensitive internal applications and private networks due to its ability to significantly reduce jitter and latency, therefore showing a clear indication of Aryaka’s commitment to performance.
Use Cases
The optimisation of network communications, combined with our pre-existing knowledge of Aryaka’s global backbone of Points of Presence (PoPs), leads us to recommend Aryaka for sectors requiring global connectivity (such as manufacturing and retail), especially those operating within the China region.
An example of Aryaka being used for manufacturing is a medium-sized industrial manufacturer (name blinded to protect their confidentiality) resolved application performance issues for remote users in China and Singapore. The primary benefit of implementing Aryaka SD-WAN was that Microsoft 365 access performance was greatly improved and it reduced their Total Cost of Ownership (TCO) for the network by between 10-25%, therefore showing the potential savings involved with using Aryaka.
Another great example is NVIDIA, who utilised Aryaka to accelerate performance by 80% globally and 10X in China. This, in turn, led to increased productivity and improved collaboration among end-users as a result of stable, reliable connectivity for end-users and enabled quicker deployment of new sites. Further to these benefits, NVIDIA’s IT organisation saved both time and money by moving to Aryaka:
Saved an estimated 25-50% of administrator time, allowing the team to focus on other priorities
Decreased their network total cost of ownership through reduced staffing and training costs and lessened time spent on incident resolution
Pricing Insights
| wdt_ID | wdt_created_by | wdt_created_at | wdt_last_edited_by | wdt_last_edited_at | Hardware Costs | Licensing |
|---|---|---|---|---|---|---|
| 1 | hyelland | 20/12/2024 09:12 PM | hyelland | 20/12/2024 09:12 PM | No additional hardware costs | Entry-level options starting at $150 per site per month (including connectivity, security, and management.) |
Customer Feedback
Primary billing vector is bandwidth through their backbone and any traffic not through the backbone has very limited visibility.
| wdt_ID | wdt_created_by | wdt_created_at | wdt_last_edited_by | wdt_last_edited_at | About | Aryaka |
|---|---|---|---|---|---|---|
| 1 | hyelland | 27/01/2025 11:12 AM | hyelland | 27/01/2025 11:12 AM | Case Study | Spire Healthcare, implemented Aryaka SD-WAN to address challenges related to network performance and security. The enhanced network capabilities allowed Spire Healthcare to offer more reliable and secure healthcare services, leading to better patient care |
| 2 | hyelland | 27/01/2025 11:12 AM | hyelland | 27/01/2025 11:12 AM | Telco Partnerships | North America Jenne Inc. – Technology solutions distributor and cloud services brokerage Middle East & Africa Orixcom – Operator providing connectivity and cloud services for MEA region SDN Africa – Provider serving sub-Saharan Africa Vodafone Fiji – Lea |
| 3 | hyelland | 27/01/2025 11:12 AM | hyelland | 27/01/2025 11:12 AM | Comparative Overview | Core Strenghts – Cloud-first architecture, fully managed SD-WAN services, and built-in network security for seamless global connectivity. Target Audience – Enterprises with global operations, cloud-driven organisations, and businesses seeking simplified, |
| About | Aryaka |
Meraki SD-WAN
Key Features |
Zero Touch Provisioning, CCTV Support, Sensor Integration, SASE Integration, Application Control |
The ease of the dashboard makes Meraki an excellent choice for organisations seeking a more straightforward deployment process or for greater operational efficiency when it comes to network management. With how intuitive Meraki’s dashboard is, port configuration is an easy task and overall it really is well put together for smaller businesses.
One of the smaller benefits of managing a Meraki solution is that software patching is easier than other solutions in this list, making updates and immediate remediations processes a breeze for network administrators.
Meanwhile the cloud-first approach significantly improved cloud service connectivity and this makes it the ideal choice for businesses utilising cloud platforms for Software-as-a-Service (SaaS) applications.
When compared to Cisco’s other product, Cisco Catalyst, it’s clear that Meraki is limited in its feature set. To make matters worse, public forums and general consensus suggest that Meraki’s support is lacking with simple problems being left unresolved and technicians reported to have a lack of understanding. This can be largely put down to switches lacking important features and, as some reports highlight, basic functions can be broken on some models. These issues don’t make for good reading as Meraki is generally much more expensive in comparison to other SD-WAN vendors.
On the upside though, we were very impressed by the scalability of Cisco Meraki. Deployment of new locations is simple and saves both time and cost in comparison to other vendors. We’d therefore suggest that this scalability will enable small businesses to grow into large enterprises, utilising a network architecture that comfortably grows to meet the changes in demands.
Use Cases
Meraki SD-WAN is specifically designed for small to medium-sized enterprises with lean IT operations.
Therefore, it seems obvious why the Lake District National Park Authority deployed Meraki SD-WAN across their 13 sites. The solution allowed them to simplify their network management, become PCI compliant via improved security and upgrade their remote management capabilities. To top it all off, during implementation, a minimal downtime of just 10 minutes per site was experienced, highlighting just how easy the switchover was.
Within a healthcare environment, Sage Dental implemented Meraki SD-WAN across 60 locations, resulting in zero downtime compared to previous daily outages, improved network resilience with no impact during regional internet outages, improved performance of cloud-based practice management tools and successful standardisation of network policies, procedures and architectures across all locations for quicker management.
Pricing Insights
Whilst we can’t offer insights into every hardware cost, some examples are detailed below. Every Meraki hardware component requires a cloud license to be managed, with license periods available in 1, 3, 5, 7 and 10 year terms.
| wdt_ID | wdt_created_by | wdt_created_at | wdt_last_edited_by | wdt_last_edited_at | Hardware Costs | Licensing |
|---|---|---|---|---|---|---|
| 1 | hyelland | 20/12/2024 09:18 PM | hyelland | 20/12/2024 09:18 PM | MS220-8 switch: $985.00 | Entry-level deployment: $17,000 for a 3-year Enterprise License covering three sites with redundancy. |
| 2 | hyelland | 20/12/2024 09:18 PM | hyelland | 20/12/2024 09:18 PM | MS220-8P switch: $1,255.00 | Advanced Security License: $23,000 for three locations with redundancy over 3 years. |
| 3 | hyelland | 20/12/2024 09:18 PM | hyelland | 20/12/2024 09:18 PM | MS220-48FP switch: $5,935.00 | Enterprise deployment: Approximately $98,000 for licensing, support, and redundancy over 3 years. |
Customer Feedback
Customers have a generally good experience but find that they outgrow Meraki’s security options. This may mean that businesses will need to consider security solutions that can be bolted on, as and when the network requirements necessitate it.
| wdt_ID | wdt_created_by | wdt_created_at | wdt_last_edited_by | wdt_last_edited_at | About | Cisco Meraki |
|---|---|---|---|---|---|---|
| 1 | hyelland | 27/01/2025 11:18 AM | hyelland | 27/01/2025 11:18 AM | Case Study | Bupa Healthcare is a leading international healthcare company providing private health insurance, care homes, and health services. To improve their network reliability and security across multiple locations, Bupa deployed Cisco Meraki SD-WAN, which ensure |
| 2 | hyelland | 27/01/2025 11:18 AM | hyelland | 27/01/2025 11:18 AM | Telco Partnerships | Africa MTN Business partners with Cisco to deliver Meraki and Viptela SD-WAN solutions Vodacom Business partnered with Cisco Meraki to launch SD-WAN Express for SMEs Asia Pacific Maxis provides managed SD-WAN services running on Cisco Meraki technology i |
| 3 | hyelland | 27/01/2025 11:18 AM | hyelland | 27/01/2025 11:18 AM | Comparative Overview | Core Strengths: Cloud-managed, security features and intuitive SD-WAN. Target Audience: Small to medium-sized businesses, distributed enterprises, and organisations prioritising ease of deployment and management. |
| About | Cisco Meraki |
Aruba EdgeConnect SD-WAN
Key Features |
Application-Aware Routing, Dynamic Path Selection, Zero Touch Provisioning, Unified SASE, WAN Optimisation, Cloud Vendor Integration, Enhanced Monitoring |
One of the best ways that Aruba offers improved efficiency is through its de-duplication, compression and traffic acceleration capabilities. Whilst the GUI doesn’t make these as easy as other vendors to harness, once implemented the performance benefits are substantial.
In a similar theme, we noted that deployment was more difficult than with other vendors, however the integrations with SASE and traffic engineering capabilities were ideal for improving the confidentiality, integrity and availability of networked systems.
The overall take away from Aruba is that Aruba can be more complex and costly than other solutions in this list but, when paired with internal expertise with the know-how of getting it up and running, Aruba can be considered better value for money, especially for medium-sized enterprises.
Use Cases
We’d argue that Aruba is designed to fit most medium-sized enterprise use cases.
Assessing HPE Aruba within a manufacturing environment, we look to its implementation at a global power solutions manufacturer. By deploying EdgeConnect SD-WAN across all physical locations and cloud environments (AWS, Azure, Google Cloud), the manufacturer gained:
Sub-millisecond failover between redundant connections
Secure local internet breakout through bolt-on Zscaler integration
Reduced equipment maintenance costs by consolidating network infrastructure
More flexibility to deploy WAN on-demand for specific projects
And for a global real estate organisation, Cushman & Wakefield, improvements were needed for their outdated network architecture. With 50,000 employees across 400 offices in 60 countries, Cushman & Wakefield implemented EdgeConnect, deploying 377 EdgeConnect appliances across 220 business locations, such as all their branch offices, eight data centres in four global regions and applying dual broadband links in order to replace the costly, legacy MPLS circuits they previously used. This meant that they too gained sub-millisecond failover between links for continuous application availability, with improved application performance and user experience, global collaboration capabilities and more efficient customer service delivery across geographical regions.
Pricing Insights
Pricing varies based on bandwidth requirements, hardware model and license tier, pricing examples are displayed below:
| wdt_ID | wdt_created_by | wdt_created_at | wdt_last_edited_by | wdt_last_edited_at | Hardware | Licensing |
|---|---|---|---|---|---|---|
| 1 | hyelland | 20/12/2024 09:11 PM | hyelland | 20/12/2024 09:11 PM | EC-10104 (For small branches): $1,099.00 | Foundation: Value-centric option with essential SD-WAN and NGFW features |
| 2 | hyelland | 20/12/2024 09:11 PM | hyelland | 20/12/2024 09:11 PM | EC-10108 (For small to medium branches): $2,599.00 | Advanced: Maximum performance with advanced SD-WAN and NGFW features (recommended for most customers) |
| 3 | hyelland | 20/12/2024 09:11 PM | hyelland | 20/12/2024 09:11 PM | EC-S-P (For large branches): $8,313.54 | On-Premise: Maximum performance for on-premise deployment |
| 4 | hyelland | 20/12/2024 09:11 PM | hyelland | 20/12/2024 09:11 PM | Monthly pricing typically ranges from $100 to $300 per month |
| wdt_ID | wdt_created_by | wdt_created_at | wdt_last_edited_by | wdt_last_edited_at | About | HPE Aruba EdgeConnect |
|---|---|---|---|---|---|---|
| 1 | hyelland | 27/01/2025 11:17 AM | hyelland | 27/01/2025 11:17 AM | Case Study | The Financial Institution Service Corporation (FISC), which services 60 community banks with data processing and information services leveraged HPE Aruba EdgeConnect. Bank branch locations were previously connecting to FISC applications using a hub and s |
| 2 | hyelland | 27/01/2025 11:17 AM | hyelland | 27/01/2025 11:17 AM | Telco Partnerships | Asia Pacific Korea Telecom (KT) selected HPE Aruba Networking EdgeConnect SD-WAN platform to provide edge-to-cloud integration with AWS Cloud WAN. Epsilon (Singapore) partnered with Aruba to expand its data services portfolio with EdgeConnect SD-WAN platf |
| 3 | hyelland | 27/01/2025 11:17 AM | hyelland | 27/01/2025 11:17 AM | Comparative Overview | Core Strengths: Unified SD-WAN edge platform, advanced routing and security and application-aware performance optimisation for hybrid and multi-cloud environments. Target Audience: Enterprises, managed service providers (MSPs), and organisations focused |
| About | HPE Aruba EdgeConnect |
Cato SD-WAN
Key Features |
Application-Aware Routing, Global PoP Network, Zero Touch Provisioning, Unified SASE, SASE Integration, Templated Configuration, Enhanced Monitoring |
For businesses looking for a simplified management system and perhaps do not have a dedicated network management expert, Cato is an ideal contender.
Cato Networks integrates SD-WAN with a comprehensive suite of security services, utilising a cloud-native architecture and providing security and performance improvements. Particularly suited for businesses moving towards a secure, distributed cloud model, Cato’s selling point is its user-friendly interface for management and configuration of the network. By moving everything to a single cloud native platform, Cato offers customers with full insights into network traffic for heightened control and improved understanding of network congestion areas.
Particularly beneficial to cloud and performance-focused businesses, the backbone and last mile optimisations to all directions of traffic including SD-WAN to SaaS (for publicly hosted applications) is a standout feature for Cato Networks. This means packet-loss mitigations for applications like Microsoft Teams, Zoom and other real-time services, making sure your business no longer drops out of all important calls due to metrics like network latency and jitter.
Whilst we have little negative comments to make about Cato’s solution itself, we have noted that generally the documentation can be slightly lackluster. Further to this, some customers have reported that customer support is poor in comparison to other solutions, with slow response times and expectation that customers have to handle some work themselves, which introduces inefficiencies.
As Cato is fully managed, it does mean that control is largely taking away from business’ internal IT teams, therefore if greater control is a requirement for your business, Cato is not necessarily the ideal solution for you. We’ve seen customers report their desire to PXE boot with Cato, which would work far easier with other solutions on this list, such as Cisco Catalyst SD-WAN being more ideal for provisioning of custom edge devices.
Use Cases
For the TAG Heuer Porsche Formula E Team, implementing Cato was ideal as it allowed the race team to reduce their network equipment footprint at race events. With such a heavy reliance on networking at these events, ensuring that interruptions from latency, jitter and packet loss were minimised was essential due to the intricacies of racing. Once implemented, Cato reduced the packet loss that Porsche Formula E experienced to below 1% from a previous 5%. Whilst on paper this doesn’t sound that impressive, for the team this was a significant improvement and helped to achieve their business goals. Further to this, Cato enabled the team to gain faster file transfers and more responsive application experiences, as well as simplified security management (with built-in XDR capabilities) to offer all-round network improvements.
Within a manufacturing environment, Haulotte, a global equipment manufacturer experienced a 50% reduction in network costs compared to MPLS, improved Microsoft Teams performance after Office 365 migration and simple plug-and-play deployment across locations. This meant that they could deploy to 300 home users in less than a day during COVID-19 for increased agility.
Pricing Insights
Cato’s licensing structure includes various components, such as site bandwidth licenses, security add-ons (e.g: Threat Prevention, Cloud Access Security Broker) and support services. Each component may have its own pricing model, often based on factors like bandwidth allocation, number of users or specific service requirements.
| wdt_ID | wdt_created_by | wdt_created_at | wdt_last_edited_by | wdt_last_edited_at | Hardware Cost | Annual Costs |
|---|---|---|---|---|---|---|
| 1 | hyelland | 20/12/2024 09:15 PM | hyelland | 20/12/2024 09:15 PM | No additional hardware costs | Average $36,500 |
Customer Feedback
Given the cloud-native architecture of Cato, we’d argue that the following quote best summarises customer feedback on Cato: “For anybody who is looking into Cato is to consider their environment. If they have a scenario where it is 80% cloud-based and 20% internal traffic, then Cato is a good choice. If on the other hand, they have internal applications with a data centre then other solutions may make more sense.” – Alexander Asimov, IT Manager at Diamond Braces
| wdt_ID | wdt_created_by | wdt_created_at | wdt_last_edited_by | wdt_last_edited_at | About | Cato |
|---|---|---|---|---|---|---|
| 1 | hyelland | 27/01/2025 11:14 AM | hyelland | 27/01/2025 11:14 AM | Case Study | A major Asia-Pacific healthcare provider, Fullerton Health, implemented Cato’s SASE solution to address connectivity and security challenges across their 550 facilities in nine countries. Fullerton’s network had fallen behind primarily due to growth and |
| 2 | hyelland | 27/01/2025 11:14 AM | hyelland | 27/01/2025 11:14 AM | Telco Partnerships | North America US Signal Windstream Enterprise BCN Europe Horizon Telecom (Netherlands) BT Orange Telefonica Asia Pacific KDDI (Japan) |
| 3 | hyelland | 27/01/2025 11:14 AM | hyelland | 27/01/2025 11:14 AM | Comparative Overview | Core Strengths: Converged SASE platform with integrated SD-WAN, advanced security, and cloud-native architecture for optimised global connectivity. Target Audience: Enterprises seeking simplified network and security convergence, global businesses, and |
| About | Cato |
VeloCloud SD-WAN
Key Features |
Application-Aware Routing, App Path Insights, Global PoP Network, Cloud Vendor Integration, Multicloud Support, Application Control |
The global backbone and easy-to-use management system liken this solution to Cato and Aryaka, however the ability to implement external security services and multiple cloud environments provides this solution a wider range of functionality (albeit at the cost of greater management complexity).
This means that the VeloCloud SD-WAN solution is far easier to setup and the GUI is much better than many of the other vendors on this list. Whilst we wouldn’t class it as easy as Cato, we would suggest that it’s designed to fit all industries, rather than specialising in a single one.
Due to this, we’d argue that VeloCloud’s strong point is its cloud integration capabilities, which enables easy connectivity for multiple cloud environments. This is backed up by VeloCloud’s asymmetric routing capabilities enabling connections to cloud services using multiple internet service providers (ISPs) or paths.
Unfortunately VeloCloud is very much dependent on its cloud and has a more basic feature set in comparison to other vendors. This means that the solution lacks the in-depth control that other solutions offer, with no next-generation firewall or Unified Threat Management (UTM) capabilities pre-packaged with the base SD-WAN solution.
For security, VMware SASE offers access to their global network of POP locations (VMware edge gateways) with VMware’s Unified Endpoint Management (UEM) server, which enforces the required profiles and configurations. This defines specific access policies for allowed and blocked websites, which demonstrated the ability of VMware SASE to block access to certain websites as per the configured policies to secure branch-offices and remote users.
More worryingly than the lack of features, we’ve noted reports of customers suggesting that path rules don’t always work, which we haven’t experienced ourselves but suggests that path rule configurations are more difficult to setup for complex use cases. Therefore, organisations should consider this factor prior to selecting the SD-WAN provider to use.
Use Cases
We’d recommend VMware SD-WAN to businesses seeking a solution with a trade-off between usability and functionality.
Redmond, a leading sea salt brand in the United States, were expanding and had an increased need to operate voice and multiple virtual desktops at once. They chose VMware as their SD-WAN solution to replace ageing branch infrastructure. As a result, they achieved high-quality Voice over Internet Protocol (VoIP) calls and virtual desktops company-wide, increased performance for internet-bound traffic by 50% and significantly reduced Operating Expenses (OpEx).
Pricing Insights
| wdt_ID | wdt_created_by | wdt_created_at | wdt_last_edited_by | wdt_last_edited_at | Hardware | Bandwidth Costs (1yr Subscription) | Other Capabilities |
|---|---|---|---|---|---|---|---|
| 1 | hyelland | 20/12/2024 09:20 PM | hyelland | 20/12/2024 09:20 PM | Edge 710: Supporting up to 1 Gbps throughput | 50 Mbps: $1,299.26 200 Mbps: $3,081.15 500 Mbps: $5,345.36 1 Gbps: $7,336.93 | Work From Home Options: Basic WFH subscription: £468.60/year. WFH Pro subscription: £1,428.20/year |
| 2 | hyelland | 20/12/2024 09:20 PM | hyelland | 20/12/2024 09:20 PM | Edge 4100/Edge 5100: Supporting up to 30 Gbps and 100 Gbps throughput respectively | 2 Gbps: $9,007.39 10 Gbps: $22,818.64 |
Customer Feedback
Since being bought by Broadcom, customers have complained that the Velocloud support department has been significantly affected and customer experience has suffered greatly.
| wdt_ID | wdt_created_by | wdt_created_at | wdt_last_edited_by | wdt_last_edited_at | About | Velocloud |
|---|---|---|---|---|---|---|
| 1 | hyelland | 27/01/2025 11:20 AM | hyelland | 27/01/2025 11:20 AM | Case Study | The retailer Brook Brothers chose VeloCloud SD-WAN to address issues with loading times and timeouts due to insufficient bandwidth resources. After implementing VeloCloud SD-WAN, branches could directly and securely access cloud-based corporate resources |
| 2 | hyelland | 27/01/2025 11:20 AM | hyelland | 27/01/2025 11:20 AM | Telco Partnerships | North America Lumen Technologies partnered with VMware VeloCloud for managed SD-WAN portfolio Hughes Network Systems integrated VeloCloud into their managed SD-WAN portfolio Middle East Etisalat by e& partnered with VeloCloud to enhance their managed SDW |
| 3 | hyelland | 27/01/2025 11:20 AM | hyelland | 27/01/2025 11:20 AM | Comparative Overview | Core Strengths: Cloud-delivered SD-WAN with application-aware routing, multi-cloud connectivity, and integrated security for optimised network performance. Target Audience: Enterprises, service providers, and organisations focused on application perform |
| About | Velocloud |
Palo Alto Prisma SD-WAN
Key Features |
Application-Aware Routing, Unified SASE, Zero Touch Provisioning, Strong Cloud Management |
Prisma’s AI-driven management, reduces the workload for network administrators and assists with deployment, enabling enterprises to quickly deploy large scale networks with complex performance and security needs.
For businesses focused on network performance capabilities, one of the ways that Prisma can meet performance demands is through its private backbone and last mile offerings. This is essential for ensuring consistent and reliable connectivity for your most important applications.
The customer experience for Palo Alto Network’s solution is mixed, with Virtual Appliances having very good customer responses, whilst others reporting that they find the solution more difficult to deploy, configure and maintain than other SD-WAN infrastructures.
Often pitted against Fortinet for large, security-focused enterprises, Palo Alto’s solution is more expensive and complex than security-focused alternatives like Fortinet’s all-in-one solution. The need to have both Palo Alto NGFW and an ION for on-premises solutions or IONs to Prisma Access to enable internet traffic breakouts also show the limitations of the base solution. On top of this, customers have seen sharp price increases, with reports of firewall pricing up 18% in 2021 and 24% in 2024.
Use Cases
While we wouldn’t consider Prisma to be as in-depth as Cisco Catalyst, the solution does combine many advanced features into a more friendly user-interface than other complex solutions. In our opinion this was a good trade-off between detail and usability for businesses that can dedicate more resources to network management.
One example implementation of Prisma is Asana, a software company that achieved significant operational improvements, such as a 40% reduction in operating costs. By consolidating multiple work management systems, Asana were able to deploy Prisma SD-WAN to 5,800 users in under 6 months and improved cross-functional collaboration between IT, marketing and R&D teams.
Meanwhile, in the financial services industry, a global wealth management firm implemented Prisma SD-WAN to improve connectivity to their AWS cloud security infrastructure. The implementation included:
Transit Gateway integration for improved network architecture
Centralised management
Infrastructure-as-Code deployment using Terraform
Enhanced threat protection and network visibility
Pricing Insights
| wdt_ID | wdt_created_by | wdt_created_at | wdt_last_edited_by | wdt_last_edited_at | Hardware | Per Device Cost | Per Bandwidth Costs |
|---|---|---|---|---|---|---|---|
| 1 | hyelland | 20/12/2024 09:19 PM | hyelland | 20/12/2024 09:19 PM | ION-2000: For small branch deployments | This model requires a separate license for each SD-WAN device deployed at branch or data centre sites. | This model allows organisations to purchase a pooled bandwidth allocation shared across multiple sites, offering flexibility to accommodate varying network demands. |
| 2 | hyelland | 20/12/2024 09:19 PM | hyelland | 20/12/2024 09:19 PM | ION-3000/ION-5200: For large branch deployments | ||
| 3 | hyelland | 20/12/2024 09:19 PM | hyelland | 20/12/2024 09:19 PM | ION-9000: For large data centre deployments |
| wdt_ID | wdt_created_by | wdt_created_at | wdt_last_edited_by | wdt_last_edited_at | About | Palo Alto Prisma |
|---|---|---|---|---|---|---|
| 1 | hyelland | 27/01/2025 11:19 AM | hyelland | 27/01/2025 11:19 AM | Case Study | The retailer Brook Brothers chose VeloCloud SD-WAN to address issues with loading times and timeouts due to insufficient bandwidth resources. After implementing VeloCloud SD-WAN, branches could directly and securely access cloud-based corporate resources |
| 2 | hyelland | 27/01/2025 11:19 AM | hyelland | 27/01/2025 11:19 AM | Telco Partnerships | Europe Orange Business Services offers integrated Prisma SD-WAN with Prisma Access as a SASE solution BT is one of the first Europe, Middle East and Africa service providers to offer fully managed Prisma SASE |
| 3 | hyelland | 27/01/2025 11:19 AM | hyelland | 27/01/2025 11:19 AM | Comparative Overview | Core Strengths: Cloud-native SASE solution combining advanced SD-WAN, Zero Trust security, and AI-powered threat prevention for secure connectivity. Target Audience: Enterprises, cloud-first organisations and businesses prioritising secure, scalable and |
| About | Palo Alto Prisma |
Barracuda SD-WAN
Key Features |
Zero Touch Provisioning, Azure Cloud-Native, Strong Cloud Management, App Path Insights |
With many businesses moving towards a cloud-first strategy, by combining Barracuda CloudGen Firewall and SD-WAN into a single offering within Azure services, businesses can gain improved cloud application performance. Unfortunately the firewall implementation is lacking in quality in comparison to other SD-WAN providers’ security offerings on this list.
Overall, the solution is lacking in features, therefore lending itself to being primarily targeted to Microsoft Azure-focused use cases. Further to this, Barracuda have a reported history of backdoor access issues, which suggests that Barracuda isn’t ideal for businesses with a heavy security focus or operate in an industry with regulatory demands.
On the upside, Barracuda’s proprietary BPM (Barracuda Private Mesh) tunnel is a VPN technology specifically developed to address limitations commonly associated with traditional IPsec (Internet Protocol Security). This allows SD-WAN capabilities, such as dynamic multipath selection and adaptive failover for minimised latency and jitter.
Use Cases
For businesses that have a heavy reliance on Microsoft Azure Cloud Services for their daily operations, the integrations between Barracuda SD-WAN and Azure means that Barracuda must be a contender when choosing an SD-WAN solution.
Further to this, Barracuda could also be considered an ideal solution for small to medium-sized enterprises, especially when considering the low-cost that Barracuda is offered at.
One example case study is Hubo, a Belgian DIY retailer, a major retail chain with 150 shops. Hubo achieved automated deployment to reduce store setup time to minutes, improved visibility for monitoring network performance, greater Azure cloud application performance, simplified global ruleset management across all locations and strengthened VPN capabilities (especially through their BPM feature).
In a healthcare environment, Snell implemented Barracuda CloudGen Firewall and SD-WAN, resulting in centralised management, successful prioritisation of business-critical traffic, ability to use multiple uplinks simultaneously, secure and constant data centre connectivity and improved network visibility.
Pricing Insights
Pricing for Barracuda varies based on factors such as deployment scale, specific features and service levels. We’ve seen figures such as £84.69 per unit, with additional OS management available from £75 per month per host.
Further to this, as a security bolt-on, a CloudGen Firewall subscription can be purchased for $220/month.
| wdt_ID | wdt_created_by | wdt_created_at | wdt_last_edited_by | wdt_last_edited_at | About | Barracuda |
|---|---|---|---|---|---|---|
| 1 | hyelland | 27/01/2025 11:13 AM | hyelland | 27/01/2025 11:13 AM | Case Study | The Belgian DIY retail chain Hubo, with 150 shops (including 75 franchise stores) and 1,000 employees, successfully implemented Barracuda to manage multiple locations through a centralised platform. The solution helped with their poor network visibility, |
| 2 | hyelland | 27/01/2025 11:13 AM | hyelland | 27/01/2025 11:13 AM | Telco Partnerships | N/A |
| 3 | hyelland | 27/01/2025 11:13 AM | hyelland | 27/01/2025 11:13 AM | Comparative Overview | Core Strengths: Secure SD-WAN with built-in advanced threat protection, simplified deployment and integration with cloud environments. Target Audience: Small to mid-sized enterprises, distributed organisations and businesses prioritising cost-efficienci |
| About | Barracuda |
Versa SD-WAN
Key Features |
Zero Touch Provisioning, Multicloud Support, SASE Integration, App Path Insights |
Whilst the solution is ideal for lots of small sites with low bandwidth requirements, due to Versa SD-WAN having significant strength in security monitoring and reporting capabilities, Versa actually becomes an ideal candidate for enterprises managing multiple entities. Especially given that their overlay routing is BGP-based/L3VPN. This means that businesses can gain more control over advanced routing policies, making it ideal for enterprises managing multiple enterprises.
Unfortunately, we’ve found that Versa Director isn’t the best GUI to work with and this made configuration/policy management a rather difficult task. We also noted that the SASE implementation was lacking in comparison to other vendors, therefore we’d stress that Versa should really be used by businesses that have internal expertise.
Whilst we didn’t experience this issue ourselves, customers report issues with code stability and security features that don’t work as expected. We would anticipate that this is due to the complexity of Versa’s SD-WAN solution.
Use Cases
Versa can be considered one of the more in-depth solutions in this comparison, with detailed analytics that are of similar detail to both Cisco Catalyst and Palo Alto’s Prisma SD-WAN. This, alongside a unified SASE solution, provides organisations with both a high-level networking and security in a single software stack.
This makes Versa Networks SD-WAN ideal for large scale organisations and service providers where multi-tenancy support is a need, along with plenty of in-depth analysis of network telemetry or security monitoring.
Within the Healthcare Sector, BMI Healthcare, a UK private hospital network, implemented Versa SD-WAN to optimise bandwidth allocation for critical applications like patient management and telemedicine. To ensure that connections to applications didn’t drop out, Versa enhanced BMI’s redundancy and failover capabilities to ensure zero downtime for critical healthcare systems.
However, in the Financial Services sector, a Fortune 1000 enterprise with 357 sites and 10.5k+ users couldn’t offer remote users access direct connectivity to the cloud and needed to use virtual desktops to do so. With Versa SD-WAN and SASE, the enterprise implemented on-premises architecture for branches allowing remote direct connection to the closest branch from a home office. This made branches the equivalent of a gateway, with a 50x increase branch bandwidth capacity, 200% improvement in app performance, 4x reduction in blackouts and 100% compliance with regulations.
Pricing Insights
Pricing: Licenses range from $2,065 to $81,000.
Hardware: Starts at $1,000 for small branches.
| wdt_ID | wdt_created_by | wdt_created_at | wdt_last_edited_by | wdt_last_edited_at | About | Versa |
|---|---|---|---|---|---|---|
| 1 | hyelland | 27/01/2025 11:22 AM | hyelland | 27/01/2025 11:22 AM | Case Study | BMI Healthcare, a network of private hospitals in the UK, implemented Versa Networks SD-WAN to improve the performance and reliability of their critical healthcare applications. One of the core features BMI Healthcare leveraged was Versa SD-WAN’s ability |
| 2 | hyelland | 27/01/2025 11:22 AM | hyelland | 27/01/2025 11:22 AM | Telco Partnerships | North America Telesystem partnered to bring Secure SD-WAN to small and medium-sized businesses Middle East du (UAE) signed MoU to deliver unified SASE services across UAE Europe Deutsche Telekom launched SD-WAN services in Austria, Czech Republic, Pola |
| 3 | hyelland | 27/01/2025 11:22 AM | hyelland | 27/01/2025 11:22 AM | Comparative Overview | Core Strengths – Fully integrated SASE and SD-WAN platform with advanced security, application-aware routing and multi-cloud connectivity for performance and scalability. Target Audience – Enterprises, service providers and organisations focused on secure |
| About | Versa |
Comparison Matrix
| wdt_ID | wdt_created_by | wdt_created_at | wdt_last_edited_by | wdt_last_edited_at | Vendor | Overall | Feature Set | Application Routing | Reporting | Portal | Cost | SASE Integration | Cloud Capabilities |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | hyelland | 20/12/2024 09:34 PM | hyelland | 20/12/2024 09:34 PM | Fortinet | 4★ | 5★ | 3.5★ | 4★ | 4★ | 4★ | 4★ | 4★ |
| 2 | hyelland | 20/12/2024 09:34 PM | hyelland | 20/12/2024 09:34 PM | Cisco Catalyst | 4★ | 5★ | 4.5★ | 3.5★ | 3★ | 3★ | 4★ | 5★ |
| 3 | hyelland | 20/12/2024 09:34 PM | hyelland | 20/12/2024 09:34 PM | Aryaka | 3.5★ | 3.5★ | 3.5★ | 4★ | 4★ | 3★ | 3★ | 3.5★ |
| 4 | hyelland | 20/12/2024 09:34 PM | hyelland | 20/12/2024 09:34 PM | Cisco Meraki | 4★ | 4★ | 3.5★ | 3.5★ | 4★ | 4★ | 4★ | 4★ |
| 5 | hyelland | 20/12/2024 09:34 PM | hyelland | 20/12/2024 09:34 PM | HPE Aruba | 3.5★ | 3.5★ | 3.5★ | 4★ | 3.5★ | 4★ | 4★ | 3★ |
| 6 | hyelland | 20/12/2024 09:34 PM | hyelland | 20/12/2024 09:34 PM | Cato | 4.5★ | 3★ | 4★ | 3.5★ | 5★ | 4★ | 5★ | 4★ |
| 7 | hyelland | 20/12/2024 09:34 PM | hyelland | 20/12/2024 09:34 PM | Velocloud | 3.5★ | 2★ | 2★ | 3★ | 4.5★ | 4.5★ | 3★ | 4.5★ |
| 8 | hyelland | 20/12/2024 09:34 PM | hyelland | 20/12/2024 09:34 PM | Prisma | 4★ | 4★ | 4★ | 4★ | 3.5★ | 2★ | 4★ | 3.5★ |
| 9 | hyelland | 20/12/2024 09:34 PM | hyelland | 20/12/2024 09:34 PM | Barracuda | 3★ | 2★ | 4★ | 3.5★ | 3★ | 2★ | 4★ | 4★ |
| 10 | hyelland | 20/12/2024 09:34 PM | hyelland | 20/12/2024 09:34 PM | Versa Networks | 3.5★ | 3.5★ | 4★ | 4★ | 3★ | 3.5★ | 4★ | 3.5★ |
Customer Reviews and Testimonials
At Netify, we strongly recommend that organisations consider customer testimonials when selecting a vendor. We’ve included an overview of different vendor reviews below to assist with the selection process:
| wdt_ID | wdt_created_by | wdt_created_at | wdt_last_edited_by | wdt_last_edited_at | Vendor | Review Source | Review Quote |
|---|---|---|---|---|---|---|---|
| 1 | hyelland | 20/12/2024 09:16 PM | hyelland | 20/12/2024 09:16 PM | Fortinet | Fortinet | “We had a delightful experience while the whole Fortinet SD-WAN experience. We were wonderfully surprised on the features of the product and would recommend this further across people in similar industries.” |
| 2 | hyelland | 20/12/2024 09:16 PM | hyelland | 20/12/2024 09:16 PM | Cisco Catalyst | Gartner Peer Insights | “Overall very pleased with the product. Product development has been getting much better in recent years and the support side has improved quite a bit as well. Very feature rich product and the road map looks promising as well.” |
| 3 | hyelland | 20/12/2024 09:16 PM | hyelland | 20/12/2024 09:16 PM | Aryaka | Gartner Peer Insights | “It’s been a real good partnership with Aryaka. Their sales team, pre-sales team, post sales team, and technical support teams have all been very professional with our implementation.” |
| 4 | hyelland | 20/12/2024 09:16 PM | hyelland | 20/12/2024 09:16 PM | Cisco Meraki | G2 | “I have been using Cisco Meraki SD-WAN for over a year, and it has significantly transformed our network infrastructure. The cloud-based management interface is incredibly user-friendly, allowing us to configure and monitor our entire network from a singl |
| 5 | hyelland | 20/12/2024 09:16 PM | hyelland | 20/12/2024 09:16 PM | HPE Aruba EdgeConnect | “We installed a silverpeak appliance and failed over to internet for two weeks. Everyone in the building had zero complaints and we saw a reduction of like 70% of bandwidth going on the wire. | |
| 6 | hyelland | 20/12/2024 09:16 PM | hyelland | 20/12/2024 09:16 PM | We used them in conjunction with a 4g modem on remote radiology trucks and reduced their data costs by 60% as well.” | ||
| 7 | hyelland | 20/12/2024 09:16 PM | hyelland | 20/12/2024 09:16 PM | Cato | SoftwareReviews | “Cato is a great true Cloud SASE offering, perfect for SMB. It is reliable and enhances performance, making it easy to control and strong in security functions.” |
| 8 | hyelland | 20/12/2024 09:16 PM | hyelland | 20/12/2024 09:16 PM | Velocloud | G2 | “One of the solution’s most valuable features is the VMware core automation stack at an SDDC. It includes NSX, the VMware virtualisation layer for the networks (the LAN virtualisation), which works extremely well with the VMware SD-WAN solution and is the |
| 9 | hyelland | 20/12/2024 09:16 PM | hyelland | 20/12/2024 09:16 PM | Prisma | “We essentially run midsize “coffee shop” guest only campuses. All of the app traffic is SaaS or funneled via zero trust gateways. We got dual 10 gigs with utilization ~ 5 to 10% with occasional bursts. | |
| 10 | hyelland | 20/12/2024 09:16 PM | hyelland | 20/12/2024 09:16 PM | For us the most important thing is to be able to identify the best egress/link for a given application. It does that part pretty well. We have dual 9k ions in ha pair + bypass pairs for internet links. |
Conclusion
Choosing the right SD-WAN provider is essential to achieving optimal network performance, scalability and security. This guide highlights the best options for various needs, from Fortinet’s security focus to Cisco Catalyst’s suitability for complex, large-scale enterprises. Whether prioritising ease of use, cloud integration or global connectivity, there’s an SD-WAN solution tailored to your business requirements. This analysis should assist to match your goals with the provider that best aligns with your operational needs and growth plans.
Frequently asked questions
What is SD-WAN and who are the top Vendors?
SD-WAN (Software-Defined Wide Area Networking) is a replacement for traditional network architectures that not only simplifies but optimises WAN management using centralised control for all edges.
Top vendors include: Fortinet, Cisco Catalyst, Aryaka, Cisco Meraki, HPE Aruba EdgeConnect, Cato, VeloCloud, Palo Alto Prisma, Barracuda and Versa
Vendors sell SD-WAN solutions, while managed service providers handle deployment and monitoring.
How can I compare Vendors?
When comparing SD-WAN vendors, you should consider your business needs, which can include the potential cost efficiencies provided, performance and security benefits, (multi-)cloud compatibility and support for remote workforces.
For cost-focused solutions, we would recommend solutions such as Fortinet or Aruba. For multi-cloud and remote work, Cisco or VMware SD-WAN solutions should be contenders for your shortlist.
Cisco Meraki and HPE Aruba EdgeConnect are excellent options for small to medium-sized businesses.
Cisco Meraki: Known for its intuitive, user-friendly dashboard and easy deployment process. Features such as ZTP and scalable deployment simplify network management, making it ideal for businesses with limited IT resources.
HPE Aruba EdgeConnect: While targeted at medium-sized enterprises, it offers significant benefits for small businesses planning to scale. Its features include Dynamic Path Selection, WAN Optimisation and SASE integration. The AI-powered capabilities enhance efficiency and user experience, making it suitable for businesses with limited internal expertise.
What are the most important SD-WAN Features and Capabilities?
When evaluating SD-WAN providers, the breadth of features make it difficult to differentiate solutions. By prioritising key features that align with your business goals, such as zero-trust security, zero touch provisioning or SASE integrations, your business will see the best return on investment possible for the chosen solution.
Many vendors, including Cisco, Palo Alto Networks and Fortinet offer application performance monitoring and reporting tools for detailed insights.
For distributed businesses, ensure the provider supports 5G and LTE connectivity for flexible deployment.
Look for advanced analytics, traffic prioritisation and real-time reporting, as these features are integral for optimising network performance.
Top providers like VMware and Versa Networks are particularly good for application performance monitoring, while vendors such as Palo Alto and Fortinet deliver strong security and integrated SASE capabilities.
How do I compare Cost and Pricing?
SD-WAN costs vary based on factors like bandwidth, locations, license volume and features. SD-WAN solutions typically range from $100 to $1,000 per site monthly.
Affordable options for SMEs include providers with scalable, usage-based, or pay-as-you-go pricing models - with vendors such as Aryaka, Cisco Meraki and HPE Aruba EdgeConnect.
One example of SD-WAN pricing being based on non-performance factors is VeloCloud, which charges for Work From Home optional capabilities, therefore organisations should be aware of additional costs that may apply to their chosen solution.
On the other hand, other solutions, such as Cato don't charge anything additional for hardware as this is included as part of the managed service.
How can I integrate and deploy SD-WAN?
Many SD-WAN vendors integrate many public and private cloud services, such as Microsoft Azure, AWS, and Google Cloud.
VeloCloud and Barracuda lead in cloud integration capabilities:
VeloCloud (VMware): Provides multicloud support, flexible cloud connectivity and asymmetric routing for seamless integration across cloud platforms.
Barracuda: Native to Microsoft Azure cloud, delivering improved cloud application performance and streamlined management for Azure-focused environments.
Deployment across multiple sites is made far easier than ever before with the help of automation and centralised management.
While SD-WAN can replace MPLS, hybrid models combining MPLS and internet are also available, which can combine the benefits of SD-WAN with the SLAs of traditional MPLS connectivity.
We'd recommend considering a wide range of vendors, as ease of deployment depends on vendor-specific tools and support.
What Security features are typically included with SD-WAN?
SD-WAN vendors typically offer features such as encryption, firewall integration and built-in VPNs, SASE (Secure Access Service Edge), Segmentation and AI-Driven Security Insights.
Providers such as Palo Alto Networks and Fortinet are well known within the SD-WAN market for being the most security-focused offerings, with capabilities such as zero-trust architecture being built-in to the solution.
Many solutions integrate easily with SSE or SASE, with some already coming pre-bundled as a complete SASE framework, which can be beneficial for businesses with a security focus. However it's important to note that the depth of protection varies from solution to solution and therefore vendor evaluation is critical to ensure your business get's the depth it needs.
How do I choose a solution for Performance and Reliability purposes?
For high-latency environments, SD-WAN solutions such as Cisco Catalyst and HPE Aruba offer improved reliability.
SD-WAN vendors ensure that your business receives consistent performance via dynamic path selection, link aggregation, traffic steering and quality of service (QoS) settings. These can be essential for businesses that utilise real-time applications, VoIP and video, as these capabilities enable communications with minimal latency, jitter and packet loss.
Whilst not so common, vendors do also sometimes offer global backbones and last-mile optimisations for improved performance capabilities.
Are there any Regional and Industry-Specific reasons to choose a Vendor?
In the UK, VMware SD-WAN is one of the leading vendors, especially given its integrations with BT.
Meanwhile, in North America, Cisco and Versa Networks are commonly-found vendors.
For industries that are focused on security features, Fortinet and Palo Alto Networks is ideal, especially for the likes of healthcare and finance.
For retail and manufacturing, Aryaka and Citrix focus on industry-specific needs like scalability, edge optimisation and improved performance in regions such as Asia (where manufacturers often have factories).
However if you're managing a global enterprise, Cisco Catalyst, Aryaka, and Versa Networks are ideal:
Cisco Catalyst: Tailored for large, complex networks with features like Multi-Region Fabric and advanced cloud integration.
Aryaka: Offers global coverage, particularly good in Asia and China, with Points of Presence (PoPs).
Cato: Managed service that offers a global backbone for improved connectivity between regional sites.
Versa Networks: Supports multi-tenancy and provides detailed analytics, making it suitable for enterprises managing multiple entities.
Which Vendors offer Support and Services?
SD-WAN vendors offer varying levels of support and services.
Typically vendors offer customer support through help desks, online resources and/or dedicated account teams.
Many solutions, such as those offered by VMware and Aryaka, provide managed services, allowing your business to hand over the reigns of the network to experts.
Leading vendors, including Cisco and Fortinet, offer 24/7 monitoring and support, ensuring quick issue resolution and consistent network performance.
What are the Future Trends and Recommendations for SD-WAN
Emerging SD-WAN trends include AI (both for analytics and generative AI for support), 5G integrations, Internet of Things (IoT) and Edge computing integrations, as well as built-in SSE and SASE.
Many vendors, such as Cisco and Palo Alto Networks, are leveraging AI for better performance and security.
What Are Some Vendor Specific Differences?
What is Cisco’s SD-WAN solution, and how does it differ from others?
Cisco’s SD-WAN solution, Catalyst, is designed for large, complex enterprise networks. Catalyst is particularly strong in cloud integration and multi-region connectivity, enabling simplified connections to major public clouds like AWS, Azure and Google Cloud. Further to this, Catalyst also offers Multi-Region Fabric, which allows enterprises to use premium middle-mile connections and MPLS.
However we really would stress that Cisco Catalyst is one of the more complex solutions on this list and therefore is less suitable for smaller enterprises or those without extensive internal expertise. Licensing costs are high, and v advanced features are often underutilised by smaller organisations.
How does VMware’s SD-WAN compare to Versa Networks?
VMware (VeloCloud) SD-WAN is known for supporting multiple cloud environments through asymmetric routing and is great at integrating external security services. However, its feature set is far smaller than that of Versa, lacking features such as built-in NGFW.
Versa Networks SD-WAN, on the other hand, offers a more in-depth solution for enterprises managing multiple entities, due to its multi-tenancy capabilities and advanced analytics. However, Versa requires significant internal expertise and its GUI and SASE implementation are less user-friendly than VMware’s.
Is Fortinet SD-WAN better for security-focused deployments?
Yes, in our opinion, Fortinet's SD-WAN solution is the best for security on the market. This makes it an excellent choice for highly regulated industries, such as healthcare and financial services. However, it should be noted that Fortinet requires significant technical expertise to manage effectively.
What makes Palo Alto Prisma SD-WAN unique?
Palo Alto Prisma SD-WAN stands out for two main reasons:
- AI-driven management and analytics, which reduce administrative workload
- Out-of-box advanced security with features such as AI-powered threat prevention
We'd argue that Palo Alto Prisma is easier to work with than Fortinet but at the trade-off of less broad security features.
Are smaller SD-WAN vendors like Aryaka worth considering?
Yes, smaller vendors (such as Aryaka) can be worth considering, particularly for organisations with specific needs as these solutions often cater to more niche requirements. For example, Aryaka offers:
- Improved connectivity in Asia and China through its network of Points of Presence (PoPs).
- Managed services, enabling your business to hand over the responsibility of administrative burdens to a team of experts.
What are some Practical Use Cases for different solutions?
Solutions such as Palo Alto Prisma and Fortinet are the best for security-based use cases.
For hybrid and multi-cloud environments, VMware and Cisco are best for cloud integrations and improved connectivity options.
For businesses operating in Asia (and more specifically China), Aryaka should the go-to vendor.
