In short
Cisco SASE combines Cisco Secure Access, Cisco's Security Service Edge (SSE), with Cisco SD-WAN or Cisco Meraki SD-WAN, managed through Cisco Cloud Control. Forever Systems, a Cisco Partner, can quote and set up Cisco SASE for UK organisations, with Secure Access supplied through Cisco's MSP programme per user, billed monthly, terms confirmed at quote.
Get a quote for Cisco SASE
Tell us roughly how many users or sites you have and we will come back to you with options and a quote.
What is Cisco SASE?
Cisco SASE is Cisco's secure access service edge: cloud security for people and sites joined to Cisco's networking. Cisco's SASE page (opens in a new tab) describes these parts:
| Part | What Cisco says it does |
|---|---|
| Cisco Secure Access | Converged security that safeguards the workforce and critical assets from multiple attack vectors |
| Cisco SD-WAN | Modernises the WAN for assured network performance, with consistent, secure connectivity to users, devices and locations |
| Cisco Meraki (opens in a new tab) SD-WAN | Resilient SD-WAN connectivity with integrated wired and cellular WAN, switching and Wi-Fi |
| Cisco Cloud Control | Brings identity, inventory, topology, policy and operational context into one environment for management, investigation and action |
Cisco frames the outcome around policy that is aware of identity, device, posture and risk, applied to people and, increasingly, to AI agents that retrieve data and trigger workflows. Source: Cisco, checked 9 November 2026. For the category as a whole, see what is SASE.
Not sure which option fits? Ask us
Tell us what you need and we will recommend the right option for your organisation, with a quote.
Cisco Secure Access: the Security Service Edge (SSE) half
Cisco describes Secure Access (opens in a new tab) as a "cloud-delivered security service edge (SSE) solution, grounded in zero trust". In practice it covers:
- Private access: ZTNA to your applications, client-based or clientless, with access denied by default
- VPN as a service for applications that are not ready for ZTNA, which Cisco says extends coverage to non-ZTNA-enabled apps
- Internet and SaaS access: web and SaaS controls with visibility of shadow IT
- DNS Defense, which Cisco presents as a starting point for Security Service Edge (SSE)
- AI Access: visibility and control of third-party AI applications
- Experience Insights, powered by ThousandEyes, for user and application experience monitoring
Secure Access is ordered as two use cases, Secure Internet Access and Secure Private Access, each in Essentials or Advantage. Advantage adds Layer 7 firewalling with IPS, remote browser isolation for any site and multimode DLP. The full comparison is on Cisco Secure Access licensing (opens in a new tab), and the product in depth on Cisco Secure Access (opens in a new tab).
The network half: Cisco SD-WAN or Meraki SD-WAN
| Route | What it suits | How sites reach Secure Access |
|---|---|---|
| Cisco Meraki SD-WAN | Organisations on Meraki MX, or wanting cloud-managed branches with Wi-Fi and switching in the same dashboard | Cisco describes an integration of Meraki SD-WAN and Secure Access |
| Cisco SD-WAN (Catalyst SD-WAN) | Larger or more complex WANs, data centres and Cisco router estates | Automated site-to-site IPsec tunnels, documented by Cisco |
| Your existing WAN | Sites mid-contract or on another vendor's kit | Start with Secure Access for users; move sites at the next refresh |
Sources: Cisco Secure Access (opens in a new tab) and Cisco's Catalyst SD-WAN integration guide (opens in a new tab), checked 9 November 2026. Meraki models and licences are on our Meraki store under Meraki SD-WAN (opens in a new tab), and Cisco routers for Catalyst SD-WAN on our hardware store under Cisco routers (opens in a new tab). Whether one vendor for everything suits you is covered on single vendor SASE.
Is Cisco SASE the right fit for you?
We will check it against your systems and requirements and recommend the right option.
Moving from Cisco Umbrella to Secure Access
Many UK organisations meet Cisco SASE because they already run Cisco Umbrella. Secure Access builds on the same cloud security, and DNS Defense takes over from Umbrella DNS-layer protection. A typical path is:
- Map current Umbrella policies, identities and tunnels.
- Choose the Secure Access packages and edition that match, adding Secure Private Access if the VPN is due to go.
- Move a pilot group, then sites and remaining users in stages.
- Add SD-WAN when the WAN contract allows.
The detail, including what changes and what carries over, is on our Umbrella to Secure Access migration (opens in a new tab) guide.
How Cisco SASE is licensed
Cisco SASE is not one SKU. You license:
- Secure Access per user, by package (Internet Access, Private Access or both) and edition (Essentials or Advantage)
- SD-WAN per site: Meraki MX licences, or Catalyst SD-WAN router licences, with the hardware
- Add-ons where needed, such as extra data loss prevention (opens in a new tab) or browser isolation on Essentials
We supply Secure Access through Cisco's MSP programme, per user, billed monthly, terms confirmed at quote. Cisco also sells longer fixed terms if they suit you better. Pricing depends on users, sites and options, so ask us for a quote.
What Forever Systems does
As a Cisco Partner, Forever Systems can:
- Assess your Umbrella, VPN, firewall and WAN set-up and the applications people use
- Recommend Meraki SD-WAN or Catalyst SD-WAN, or Secure Access first with sites later
- Quote Secure Access and any SD-WAN hardware and licences together
- Deploy a pilot, then extend to everyone, with ongoing support scope confirmed at quote
Contact us to talk through Cisco SASE for your organisation. Other platforms are compared on SASE vendors.
How Forever Systems helps with SASE
Forever Systems supplies several SASE and Security Service Edge (SSE) platforms, so we can recommend the one that fits your sites, your people and the network and security kit you already run.
- Assess first: we look at your current VPN, firewalls, WAN links and identity set-up, and the applications people need to reach
- Help you choose: single-vendor or dual-vendor SASE, or Security Service Edge (SSE) first and SD-WAN later, matched to what you need now
- Pilots and phased roll-out: we can help you start with one group of users or one site, then extend policy step by step
- Licensing in one place: subscriptions can be billed monthly, with terms confirmed at quote
We work with businesses, schools, charities and public sector organisations. Pricing depends on users, sites, components and term, so ask us for a quote.
Frequently asked questions
What is Cisco SASE?
Cisco SASE is Cisco's secure access service edge: Cisco Secure Access for cloud security, Cisco SD-WAN or Cisco Meraki SD-WAN for the network, and Cisco Cloud Control for shared management context. It protects people and sites under one policy.
Is Cisco Secure Access the same as Cisco SASE?
No. Secure Access is the Security Service Edge (SSE) half: ZTNA, VPN as a service, internet and SaaS protection. Cisco SASE adds SD-WAN for your sites. You can start with Secure Access and add SD-WAN later.
Does Cisco SASE work with Meraki?
Yes. Cisco lists Meraki SD-WAN as one of the networking options for Cisco SASE and describes an integration between Meraki SD-WAN and Secure Access.
What replaces Cisco Umbrella in Cisco SASE?
Cisco Secure Access, with DNS Defense for DNS-layer protection. Organisations usually move policies and identities across in stages.
How is Cisco SASE billed?
Forever Systems supplies Secure Access through Cisco's MSP programme, per user, billed monthly, terms confirmed at quote. SD-WAN is licensed per site with the hardware.
Still have a question about Cisco SASE?
Ask us and a member of our team will get back to you.