Many functions, one appliance
SD-WAN, firewall and intrusion prevention share the same hardware.
Secure networking for every site your customers run.
Deliver branded networking and security to every customer from one multi-tenant orchestrator, on the hardware you choose.
EngineSASE NFVI
The operating system on every EngineSASE appliance
Run services such as SD-WAN and firewalling on one appliance, with centralized deployment and management from the orchestrator.
A catalog of network functions
Choose from the EngineSASE catalog of supported network functions, including SD-WAN and firewalling.
New services, same hardware
Add compatible services to the same appliance from the orchestrator, as capacity allows.
Standard hardware
An EngineSASE appliance or a supported uCPE model from another manufacturer.
One orchestrator. Every customer. Every edge.
Local edge intelligence
Each appliance monitors link quality and system health, and runs approved recovery actions locally within policies you define, helping restore service faster and reduce manual intervention.
Delegated administration
Delegate responsibilities through permission groups, with single sign-on, MFA, and an audit trail of management actions.
Zero-touch provisioning
Connect the appliance to power and the internet. It automatically retrieves its configuration, reducing on-site setup.
Hardware freedom
Run SD-WAN, firewalling, and intrusion prevention on supported uCPE, and add compatible services as capacity allows.
Your network services. Your brand. One platform.
Package connectivity and security as your own managed service, and run it across customers and sites from one place.
Your brand, not ours
Brand your provider and customer portals, and deliver the service under your own identity.
Grow with every customer
Package supported network functions into service tiers, and add security services as customers grow.
Every customer in one place
Manage your customers, sites, and appliances from one dashboard.
Connectivity built for continuity
Connect sites over fiber, broadband, cellular, or satellite. If a link fails, automatic failover redirects traffic over the remaining available connections.
- Fiber
- Broadband
- 4G and 5G
- Fixed wireless
- LEO satellite
- GEO satellite
Any link, any provider
Connect over fiber, cellular, satellite, and fixed wireless, using multiple providers where available.
Satellite-aware SD-WAN
Traffic is steered by link quality, and settings adjust when a site runs over satellite.
Hub failover
If a hub becomes unavailable, sites switch to a backup hub automatically.
Safe changes
If a change disconnects an appliance, it is rolled back automatically.
Security at the branch
Firewall and intrusion prevention services enforce security policies at the edge, with regularly updated threat signatures.
If your customer already uses a cloud security vendor, EngineSASE can work alongside supported integrations.
Add compatible network functions from the EngineSASE catalog to the appliance already on site, as capacity allows.
How EngineSASE differs
| Capability | Typical SD-WAN | EngineSASE |
|---|---|---|
| Multi-tenant management | Often bolted on | Built in, with delegated administration and branded portals |
| Security vendor | Locked to one stack | Built-in security or your existing vendor |
| Hardware | Proprietary appliances | EngineSASE appliances or supported third-party uCPE |
| Deployment | An engineer per site | Zero-touch provisioning |
| Failover | Calls often drop | Automatic failover across links and hubs |