Logo
Logo
TechEdgeAi
Magic Quadrant for SASE Platforms
Radio
Work-Life Balance Tactics for the Always-Connected Workforce

By submitting this form, I understand my personal data will be processed in accordance with Palo Alto Networks Privacy Policy and Terms of Use. If you were referred to this form by a Palo Alto Networks partner or event sponsor or attend a partner/event sponsor session, your registration information may be shared with that company.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
We use the information you submit to share the requested resource and relevant follow-up communication. Personal email providers are not accepted.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Magic Quadrant for SASE Platforms

Strategic Planning Assumption

By 2028, 70% of SD-WAN purchases will be part of a single-vendor SASE Platform offering, up from 25% in 2025.

By 2028, 50% of new SASE deployments will be based on a single-vendor SASE Platform offering, up from 30% in 2025.

Market Definition/Description

This document was republished on 10 July 2025. The document you are viewing is the corrected version. For more information, see the  Corrections page on gartner.com.

 

This year, we’ve revised our definition name to better reflect the market’s description.

 

Secure access service edge (SASE) platforms deliver converged network and security-as-a-service capabilities, such as software-defined WAN (SD-WAN) and secure access to the web, cloud services and private applications regardless of the user’s location, the device used or where that application is hosted. These offerings primarily use a cloud-centric architecture delivered as a platform by one vendor.

SASE securely connects users and devices with applications, services and other users. It supports branch office and remote worker connectivity and on-premises general internet security, private application access and public cloud service provider access use cases.

Mandatory Features

The mandatory features for this market include:

  • Resilient global point-of-presence (POP) infrastructure providing functionality for secure access to the web, cloud services and private applications

  • Centralized management with no more than two consoles covering all the capabilities listed below, accessible via both GUI and API, enabling visibility, troubleshooting, reporting, and granular configuration and policy changes:

    • Secure web access via proxy

    • SaaS visibility and access controls

    • Identity-, context- and policy-based secure remote access to private applications

    • A branch appliance that supports performance-based dynamic traffic steering (such as packet loss, latency and jitter) across multiple physical WAN interfaces, based on applications (not just IPs/ports)

    • Layer 7 firewalling to secure traffic bidirectionally across network

Get your complimentary copy of the guide now.

Related Insights

See all

Let’s Work
Together

Partner with a team that turns brand into demand and conversations into pipeline. We build scalable campaigns with content and precise distribution to deliver measurable growth.