WAN Optimization uses data caching, yes (add-on to Cisco deduplication, yes (available on select WAN Optimization yes limited (TCP optimization) no hardware; not available on no compression, and more to devices) vEdge) increase efciency of WAN trafc. A CDN is a group of dispersed servers that Content Delivery work together to provide yes no no no no no Network (CDN) fast delivery of internet content. CASB is a software that monitors all activity to Cloud Access Security cloud applications and no yes (proprietary) no yes (proprietary) yes (proprietary) yes (proprietary) Broker (CASB) enforces security policies on trafc destined for the cloud. SWG protects users from Secure Web Gateway web-based threats and yes yes (proprietary) no yes (proprietary) yes (proprietary) yes (proprietary) (SWG) blocks access to inappropriate content. ZTNA (Zero Trust Network Access) / VPN (Virtual Private Network) Remote Client / VPN: yes Remote Client / VPN: yes Remote Client / VPN: yes Remote Client / VPN: yes Re Remote Client / VPN: yes Remote Client / VPN: yes is a software client that (proprietary) (proprietary) (proprietary) (proprietary) ZTNA / VPN provides secure access for ZTNA: no ZTNA: no users anywhere, ideally ZTNA: yes (proprietary) ZTNA: yes (proprietary) ZTNA: yes (proprietary) ZTNA: yes (proprietary) ZT only to requisite IT resources. basic = zones-based, stateful, layer 7; advanced basic on Viptela hardware; basic; advanced via basic; advanced with SSE Firewall = next-gen, with anti- advanced advanced advanced on Cisco advanced partners add-on malware, IDS, IPS, content hardware ltering, sandbox RBI is a web security solution designed to Remote Browser Isolation protect users from no yes no no yes (proprietary) yes (proprietary) (RBI) internet-borne threats via web browser (i.e. Chrome, Edge, Firefox). Gateways allow a customer to optimize their global core network to Can put Viptela on Cisco Includes advanced trafc to cloud and SaaS ne solve for middle mile global core network; Routers or vEdge devices security in the device and applications; smaller next-gen rewall; single issues; WAN optimization single-vendor, unied or Cisco ENCS (Cisco optional add ons. Some devices have Wi-Fi access unique features of the pane of glass for other Differentiators built in; Last Mile Services SASE solution; network uCPE platform), ISR vendors have built out points; NFV allows for technology features: Wi-Fi, switching, pro including circuit and remote access; last routers can handle T1 Fortinet gateways or integrated security on the security cameras so procurement and mile management Handoffs (non-ethernet POPs. Supports LTE SD-WAN edge; integration management based). natively in some devices. with other VMware network intelligence products (AIOps).