SASE for Businesses
Price and availability check
SASE: Security in the network
Modern security architecture for cloud and remote work
Employees work on the move, access applications from the cloud and expect secure connections without detours. Traditional security concepts with a central hub and spoke structure are reaching their limits.
This is exactly where SASE comes in.
Secure Access Service Edge moves the security functions directly to the edge of the network. This meets the requirements of users who work remotely or in the cloud. At the same time, modern WAN services merge with a comprehensive security concept.
To make this architecture work, many building blocks are combined in a single platform. The core components include SD-WAN and security services such as Secure Web Gateway, Firewall as a Service, Zero Trust Network Access, secure DNS and Cloud Access Security Broker. Together, they form a complete security stack for the hybrid working world.
>20%
Savings
99,99%
Availability
24/7
Support
Awards for Outstanding Performance
Explained by experts: SASE
Advantages of SASE
Less complexity
Reducing complexity by simplifying administration and control
Improved access experience
Improved performance and seamless connections for your collaboration, regardless of location and device type
More control
Sophisticated monitoring provides deep insight into user security and the performance of corporate network services
Minimized security risks
Via SASE core functions such as Cloud Access Security Broker and Secure Web Gateway
Complete integration
Can be used as a central cloud-enabled security system that integrates the security and transparency of your cloud applications
Multi-cloud
SASE framework enables a multi-cloud strategy to be implemented quickly and provides a security model that protects your most important resources
Provider Overview
SASE: What models are available?
The various ways in which you too can rely on SASE in the future:
1
Cloud native SASE
With cloud-native SASE, all network and security services are provided via the cloud. The on-premise infrastructure is a small hardware device that is the link to the cloud instance. Some SASE providers also offer software clients that connect computers or IoT endpoints directly to the cloud.
✓ The advantage:
Even individual devices can be provided with network and security services at company level.
✖ The disadvantage:
As all security checks are carried out in the cloud, SASE leads to enormous network traffic in larger environments. This model is therefore better suited to distributed companies with a number of small units, i.e. branch offices or subsidiaries, e.g. insurance or retail companies.
2
Cloud-managed on-premise SASE
SASE can be managed from the cloud and all branches continue to use their own routers, unified threat management systems, firewalls and other security devices.
✓ The advantage:
As the security checks take place at a local level, performance increases in the extensive environment.
✖ The disadvantage:
Each branch must be equipped with appropriate hardware on site. However, a cloud-managed on-premise SASE can also protect your investment, as you can continue to use routers, firewalls and other devices if you have already purchased new ones.
This model is suitable for companies with up to thousands of employees in an environment, such as in the healthcare sector or those who prefer a do-it-yourself approach.
3
Managed SASE
SASE offers a number of advantages, but at the same time complicates the WAN. Network professionals are faced with many questions, e.g. how to roll out security functionalities or create user profiles. This expertise is not available internally to all companies.
With Managed SASE, a professional service provider configures and operates the network, which entails a certain loss of control. Some managed service providers (MSPs) now offer co-managed services. You can decide what is outsourced to the MSP and what is not. This option is recommended for companies that want a quick changeover and are willing to accept the potential loss of control.
4
Hybrid options
Many companies, especially large ones, will opt for a hybrid solution and choose a combination of cloud-native and on-premise SASE. For example, a global law firm with several locations in every country and thousands of employees.
For on-site offices, they use an on-premise security infrastructure and remote users are integrated via a cloud-native service.
The idea behind SASE and how it works
Functionality
SASE (Secure Access Service Edge) is a cloud-based security concept that combines WAN services with security functions, whereby the security functions are moved to the edge of the network. This meets the security requirements of users working remotely and in the cloud. Previous, centralized security concepts in classic hub & spoke network structures are replaced by SASE.
To implement such an architecture, many individual elements must be merged into an integrated solution. The main components of SASE are the SD-WAN and security services such as the Secure Web Gateway (SWG), Firewall-as-a-Service (FWaaS), Zero Trust Network Access (ZTNA), secure DNS and Cloud Access Security Broker (CASB), which are all combined in a comprehensive security stack.
Rethinking security architecture
The basic idea behind SASE is that the center of the security architecture is no longer the company’s own data center. Companies use multiple data centers and a variety of cloud-based services and internet services.
The centrally definable security policies act locally at the network access point (edge) and the security guidelines relate to context and identities. The software-defined WAN infrastructure is flexible in terms of deployment and adaptation. Transmitted data can be prioritized according to its importance or urgency. Service and application access is always carried out via the provider’s cloud infrastructure.
Traffic is checked at the PoP (Point of Presence) and is routed either to the global SASE WAN or the Internet. In addition to identity-dependent access for users, zero-trust network access is also available for IoT devices.
Security areas
Case Studies/Whitepaper – SD-WAN
Customers
Why
Telecom & IT sourcing. Worldwide. Carrier-independent.
Selection & operation of worldwide connectivity & cloud infrastructure. Without vendor risk & unnecessary costs.
- 80+ carriers worldwide
- One point of contact
- One SLA
- One portal: mySAVECALL
- Min. 20% savings
25+
years of experience
40+
Employees
80+
Partner
1400+ Clients
Trusted Advisor for IT & Telecommunications Sourcing
What drives you forward – & what drives
Book a free expert consultation
SASE – FAQs
SASE (Secure Access Service Edge) is a cloud-native network and security architecture that unites SD-WAN, Firewall as a Service, Zero Trust Network Access, Secure Web Gateway and Cloud Access Security Broker in a single managed platform. Users, devices and sites connect directly to the SASE cloud service instead of routing through a central corporate data centre, reducing latency and applying security regardless of location. The term was coined by Gartner in 2019 and is now the leading architectural approach for hybrid work models and cloud-first businesses.
SD-WAN is the network component: it connects sites over multiple internet lines and intelligently steers data traffic. Zero Trust is a security principle: no user or device is automatically trusted, every access request is verified. SASE combines both concepts in a cloud platform and adds web security and cloud protection. With SASE, companies implement SD-WAN and Zero Trust simultaneously without running separate solutions in parallel. SAVECALL advises on which entry point is most economical for your existing infrastructure
The leading SASE providers in 2025 are Cato Networks (fully cloud-native, strong for mid-market), Zscaler (market leader in zero trust and web security), Palo Alto Networks Prisma SASE (comprehensive, enterprise-grade), Cisco Secure Connect (strong for existing Cisco environments) and Fortinet Unified SASE (strong in security focus and on-premise hybrid). The choice depends on existing IT infrastructure, number of sites, cloud strategy and budget. SAVECALL creates a vendor-neutral comparison matrix for your specific requirements.
SASE is worthwhile for businesses with more than 5 distributed sites or more than 20 percent home office share, cloud applications as the primary work platform, active MPLS replacement plans or need for zero trust architecture. SASE is less suited for pure on-premise environments with a single main site, small companies under 30 employees without a cloud strategy, or companies that renewed MPLS contracts in 2025. SAVECALL honestly evaluates in the initial conversation whether SASE makes sense for your situation or whether a cheaper solution delivers the same benefit
SASE licences cost between 15 and 50 euros per user monthly, depending on provider and feature scope. Entry packages with SD-WAN and basic security (SWG, FWaaS) start at 15 to 20 euros. Standard packages with ZTNA and CASB range from 25 to 35 euros. Full enterprise packages with all modules cost 35 to 50 euros. Add underlay costs for site internet connections (200 to 600 euros per site monthly) and one-time implementation costs. Through the SAVECALL procurement pool, you typically secure 15 to 25 percent below list price.
A SASE implementation typically takes 3 to 6 months from initial design to productive operation across all sites. Phase 1 covers assessment and architecture design (4 to 6 weeks), Phase 2 a pilot operation at 2 to 3 sites with real traffic (4 to 8 weeks) and Phase 3 the rollout of all remaining sites and remote users. During parallel MPLS replacement, the old network stays active until full acceptance at each site. SAVECALL handles project management, carrier coordination for the underlay and user training end-to-end.
ONE Contact. ALL Carriers.
+FAQ
You ask.
