Every few years someone declares SD-WAN dead. The headlines usually mean something narrower: SD-WAN on its own, as a separate product bought only to connect branch offices, is being folded into a larger category. The technology itself is everywhere. Here is how the pieces fit.
SD-WAN in one paragraph
SD-WAN (software-defined wide area networking) manages the connections between your offices and the internet as one system. It can use two or more internet lines at each site, measure their quality continuously, send calls and video over the best one, and fail over automatically when a line drops. It largely replaced the old model of backhauling all traffic over expensive private circuits. (Our IPsec VPN vs. MPLS guide covers that shift.)
What SASE is
Gartner introduced the term SASE (secure access service edge) in 2019 for the convergence of networking and security into a mostly cloud-delivered service. SASE combines two halves:
- Networking: SD-WAN.
- Security: cloud services that inspect and control traffic wherever users are, including a secure web gateway, a cloud access security broker, firewall as a service, and zero trust network access.
A few years later, the security half got its own name: SSE (security service edge). SSE is SASE without the SD-WAN.
So what happened to SD-WAN?
It became one component of SASE rather than a standalone purchase. That is why "Is SD-WAN dead?" keeps coming up, and why the honest answer is no. Offices still need to connect, share multiple internet lines and fail over. What's changing is that the security that used to sit in a central office is moving into the cloud, next to wherever your people and applications are.
What a small or mid-sized business actually needs
- One or two offices, mostly on-site staff: a good business firewall with SD-WAN features, two internet lines, and solid security settings is often enough. Many firewalls, including FortiGate and Meraki MX, include SD-WAN.
- Cloud-first team, lots of remote work, few offices: SSE can be the better fit, because it protects people and applications wherever they are without a network overhaul.
- Several offices, many remote users, most apps in the cloud: this is where full SASE, networking and security from one platform, earns its cost.
Questions to ask before you buy
- How many sites, and does each have two internet lines?
- Where do your applications live: in an office, in a data center, or in the cloud?
- How many people work remotely, and how do they connect today?
- Can your current firewalls already do SD-WAN?
- Do you want one vendor for networking and security, or separate specialists?
Firewall choice shapes most of these answers. Our Fortinet vs. Meraki comparison covers how two common platforms handle SD-WAN and multiple offices.
Sources
- What is SASE? (Cisco)
- Secure access service edge (Wikipedia)
- What is SSE, and SSE vs SASE? (Fortinet)
- What is SASE? (Zscaler)
Vendor details checked September 2026. Licensing and product features change; confirm current terms with the vendor before you buy.
