Magic Quadrant for Single-Vendor SASE
Gartner defines single-vendor secure access service edge (SASE) offerings as those that deliver multiple converged-network and security-as-a-service capabilities, such as software-defined wide-area network (SD-WAN), secure web gateway (SWG), cloud access security broker (CASB), network firewalling and zero trust network access (ZTNA). These offerings use a cloud-centric architecture and are delivered by one vendor. SASE securely connects users and devices with applications. It supports branch office, remote worker and on-premises general internet security, private application access and cloud service consumption use cases.
Vendors must, among other requirements:
A: This research evaluates single-vendor SASE offerings that deliver multiple converged network and security-as-a-service capabilities including SD-WAN, SWG, CASB, network firewalling, and ZTNA using a cloud-centric architecture from one vendor. The research covers nine vendors meeting inclusion criteria, analyzing their ability to execute and completeness of vision across multiple evaluation criteria including product capabilities, viability, customer experience, market understanding, innovation, and geographic strategy.
A: I&O leaders responsible for networking should use this research in collaboration with their security colleagues when selecting single-vendor SASE vendors. It helps cut through marketing hype by providing objective analysis of vendor positioning, strengths, and cautions. Organizations seeking to support digital business initiatives, implement zero-trust security postures, improve end-user experience, and simplify management complexity through consolidated networking and security platforms will benefit from this evaluation.
A: Mandatory features for vendors included in this market are: secure web access via proxy; in-line SaaS visibility and access controls for at least three SaaS enterprise suites; identity-, context- and policy-based secure remote access to private applications (ZTNA); a branch appliance supporting dynamic traffic steering across multiple physical WAN interfaces based on applications; bidirectional network firewalling; centralized management with GUI and API for visibility, troubleshooting, reporting and granular policy configuration; customer ability to directly manage the full offering (DIY); single-pass scanning for malware/sensitive data; SSO integration with third-party identity providers; and POP infrastructure in at least 15 metropolitan cities across two continents.
A:
A: Ability to Execute focuses on a vendor's current capabilities and performance in the market, including product quality, financial viability, sales effectiveness, market responsiveness, and customer experience. It measures how well vendors can deliver on their promises today. Completeness of Vision evaluates a vendor's strategy and future direction, including market understanding, product roadmap, innovation potential, and ability to anticipate and shape future market needs. It assesses whether the vendor's strategy is aligned with emerging customer requirements and has the potential to drive and transform the market going forward.