Forrester this week released its zero-trust edge solution Wave report for the third quarter of 2023 and crowned Versa Networks, Palo Alto Networks, Cato Networks and Fortinet as leaders.

The analysis firm also named VMware and Forcepoint as strong performers, Juniper Networks, HPE, Cisco and Barracuda Networks as contenders in the report.

The zero-trust edge, which is also known as secure access service edge (SASE) as coined by rival Gartner, integrates multiple networking and security capabilities into a single solution, delivered as a cloud-native service with a single interface and data lake, Forrester defined.

The components for zero-trust edge include secure web gateway (SWG), SD-WAN, cloud access security broker (CASB), and zero-trust network access (ZTNA).

Forrester noted zero-trust edge is now well-suited for organizations with distributed small sites like retailers, retail banks and gas stations, but is expected to expand to sectors with more complicated and heterogeneous environments like manufacturing and healthcare.

Zero-trust edge customers should look for providers that have a single unified and cloud-based management, a robust and managed backbone with detailed controls and optimization features and zero-trust network access (ZTNA) for remote access to replace traditional VPNs.

The firm delved into a pros-and-cons analysis of the zero-trust edge vendors evaluated in the Forrester Wave report, and here is the summary for the leaders:

Palo Alto Networks (Prisma SASE):

• Strengths: As the first security vendor to unify security and networking and deliver these capabilities from its Prisma Access service, Palo Alto Networks has the first-mover advantage and one of the few unified management portals, Forrester researchers noted. Its Prisma SASE service uses the Google backbone network and other hyperscalers for redundancy, bringing positive customer feedback on performance. It also has strong ZTNA capabilities and recently added an artificial intelligence (AI) inspection layer to its SWG.
• Weaknesses: Customer support can be improved and its CASB and data loss prevention (DLP) capabilities are deemed average by reference customers.

Versa Networks (Versa Unified SASE Platform):

• Strengths: As one of the original SD-WAN vendors, Versa builds its SASE security capabilities into the same platform with a unified interface and a single data lake. Its vision aligns with tackling current and future challenges posed by the hybrid workforce, multicloud and IoT environments. It offers a large number of global points of presence (PoP) sites with granular control services throughout the WAN.
• Weaknesses: Versa’s SASE roadmap lacks specificity, and the company faces challenges in encouraging customers to use its security capabilities due to internal divisions between networking and security teams.

Fortinet (FortiSASE platform):

• Strengths: Fortinet incorporates networking functions including routing into its remote office firewalls with a unified management interface, making the SASE deployment smoother. One of its major advantages is its cost-effectiveness and its firewall prices are substantially lower than most competitors.
• Weaknesses: The platform’s DLP features are weak and offer fewer advanced security capabilities than competitors. The FortiManager interface shows its age. Its global delivery platform and PoP network reach have room for improvement.

Cato Networks (Cato SASE Cloud):

• Strengths: Cato Networks started with a strong security portfolio and built out distributed global PoPs to deliver security-as-a-service. It offers “a truly unified networking and security solution,” offering support for both sides.
• Weaknesses: Cato needs to expand its partner ecosystem for third-party management, other than the partnership with Windstream. While most of its competitors integrate with endpoint detection and response (EDR) vendors and support multiple identity providers, Cato has not yet.