Here at the Network Union, we understand the challenges that come with choosing the right SD-WAN vendor, especially when you're trying to match your underlay network services with a Software-Defined Wide Area Network (SD-WAN) solution. As both a partner of BT and an SD-WAN/SASE marketplace, we're uniquely positioned to offer genuinely unbiased advice without favouring specific solutions - this means you'll get straight-talking guidance free from technical jargon and vendor marketing speak.
We appreciate that different businesses have vastly different needs, and we're keen to help you find the right SD-WAN vendor for your specific situation. If you're unsure what that situation might be, don't worry - we're here to help you figure that out too.
What Is BT SD-WAN and How Does It Work?
BT is the UK's largest fixed and mobile communications provider, serving more than half the nation through their legacy copper and fibre-to-the-premises (FTTP) networks. In the telecom industry, they've built a reputation as the go-to choice for businesses seeking reliable connectivity.
Setting BT apart from other providers, their focus on improving network performance for cloud-based applications has also been at the forefront of their SD-WAN. For their managed SD-WAN solutions, they've partnered with some of the biggest names in the market, including the likes of Cisco Catalyst, Cisco Meraki, Nokia Nuage Networks VNS, Palo Alto Networks Prisma, Fortinet, VMware VeloCloud and Versa Networks. BT's variety of offered vendors is ideal for businesses that already have pre-existing relationships or specific criteria (such as regulatory requirements).
Over 90% of BT's global WAN customers already use Cisco products and for many, when upgrading to SD-WAN, sticking with Cisco can be largely beneficial in terms of familiarity, setup and cost.
Why Would a Business Choose BT's SD-WAN Architecture?
BT has built their SD-WAN portfolio through strategic partnerships with leading vendors over recent years. They began with Cisco SD-WAN, leveraging their existing strong relationship. The portfolio has since expanded to include VMware VeloCloud, Fortinet, Nokia Nuage Networks, Palo Alto Networks and Versa Networks.
BT offers both co-managed and fully managed options to cater to businesses of all sizes and requirements, from startups to large corporations. What's particularly appealing about BT's service offering is how their SD-WAN integrate seamlessly with BTnet leased lines and internet access, allowing businesses to prioritise network performance across hybrid WAN setups.
Which SD-WAN Vendors Partner With BT?
We've broken down each of the SD-WAN vendors that BT partners with and how they best fit different requirements.
Cisco SD-WAN Through BT
BT's Cisco SD-WAN offering uses Cisco's Catalyst-based architecture through a managed service that easily integrates with BT's existing network infrastructure. The platform features a cloud-first design that separates data and control planes, all managed through the Cisco vManage console.
Key features:
- Cloud OnRamp features for optimal cloud connectivity
- Zero Trust security approach with continuous verification protocols
- End-to-end network segmentation for isolating critical applications
- LiveAction analytics for network performance insights
- Real-time monitoring through vManage reporting
BT positions this service as ideal for businesses handling complex, multi-site deployments, primarily targeting enterprises with global network requirements. The service supports multiple BT and third-party underlay services, including Cisco SD-WAN devices and the Catalyst 8K series, with both fully managed and co-managed options available.
Ideal For Large enterprises (500+ employees) with existing Cisco infrastructure, complex multi-site networks or significant IT resources
Cost Profile Premium pricing (typically higher than alternatives) but often justified by reduced training and integration costs
Management Requires dedicated network engineer or outsourced NOC, complex but feature-rich vManage platform
Timeline Longer full deployment due to complexity and customisation requirements


VMware VeloCloud SD-WAN Through BT
VMware's VeloCloud takes a cloud-first approach for secure connectivity between branch offices and cloud apps through cloud gateways that offer global Points of Presence.
Key features include:
- Three deployment models: cloud-native gateways, virtual instances, and on-premises appliances
- Zero-touch provisioning and integrated security features
- Application-aware routing that adapts in real-time
- VeloCloud Orchestrator for centralised management through a single dashboard
Their onboarding process includes thorough site surveys, planned migrations in stages and dedicated project management support - designed to keep business interruptions to a minimum.
Ideal For Cloud-first organisations (50-500 employees) prioritising application performance and rapid deployment
Cost Profile Mid-range pricing with ROI for cloud-heavy businesses, with pricing typically less than the likes of Cisco
Management Easy-to-use cloud console requiring minimal specialised training, suitable for generalist IT teams
Timeline Typically far quicker deployment than other vendors with zero-touch provisioning for remote sites
Fortinet Secure SD-WAN Through BT
For businesses with security as top priority, Fortinet's offering through BT is arguably most suitable. This service focuses on a security-first approach based on FortiGate that combines branch office security with SD-WAN features.
Security-focused benefits:
- SASE (Secure Access Service Edge) functions combining networking and security
- Built-in next-generation firewall features, intrusion prevention, and unified threat management
- Centralised policy management and automated security updates
- Continuous threat monitoring across all deployment sites
- Detailed reporting tools for compliance and regulatory requirements
By combining Fortinet with BT's managed services businesses get full support, proactive monitoring and rapid incident response times.
Ideal For Security-conscious organisations in regulated industries (healthcare, finance, government)
Cost Profile Competitive SD-WAN pricing with security features included, often less than separate SD-WAN and security stack implementations
Management Moderate complexity, requires security-focussed training but less specialised than Cisco
Timeline Typically longer deployment times but only due to the more-complex security policy configuration and compliance validation

Nokia Nuage Networks SD-WAN Through BT (Agile Connect)
BT's Agile Connect SD-WAN is a more unique solution between BT and Nokia's Nuage Networks technology - integrating directly into BT's global network.
Key capabilities include:
- Virtualised Network Services (VNS) providing SD-WAN 2.0 functionality
- Pre-built regional gateways for optimised performance
- Integration with BT's Service and Network Automation Platform (SNAP)
Agile Connect is well-suited for businesses requiring regional performance optimisation and for companies looking to extend network visibility and performance to remote workers whilst maintaining consistent security protocols.
Ideal For UK/European businesses requiring regional performance optimisation and BT network integration
Cost Profile Competitive pricing with strong value for BT-centric deployments, often less than premium vendors
Management Simplified through BT's SNAP platform, requires minimal specialised training
Timeline Rapid deployment due to pre-built regional gateways reducing implementation complexity
Palo Alto Networks Prisma SD-WAN Through BT
Palo Alto Networks' Prisma SD-WAN through BT delivers cloud-native SD-WAN that's particularly compelling for organisations adopting cloud-first strategies whilst seeking to reduce enterprise WAN costs. Whilst similar in this aspect to VMware VeloCloud, we'd argue that Palo Alto Prisma is far more security focused - differentiating this offering.
Note-worthy features include:
- Fully cloud-native secure platform architecture
- Connectivity to major cloud providers (AWS, Azure, Google Cloud)
- Integration with Palo Alto's broader SASE security platform
BT's managed Prisma SD-WAN service can be combined with security from Palo Alto Networks or other vendors to deliver a more complete SASE solution.
Ideal For Cloud-native organisations adopting SASE strategies with premium security requirements
Cost Profile Premium pricing justified by cloud-native architecture and security integration
Management Cloud-native console with moderate complexity, requires understanding of cloud networking concepts
Timeline Typically standard deployment timeframe however depends on SASE integration scope and security policy complexity


Versa Networks SD-WAN Through BT
BT's partnership with Versa Networks leverages Versa's Secure Cloud IP Architecture, which integrates SD-WAN, security, routing and analytics into a unified platform. This solution is particularly effective for businesses managing large volumes of sites or multiple entities.
Key advantages include:
- Multi-tenancy support through a single platform, reducing complexity and costs
- Threat Protection against both known and unknown threats
- SASE platform with cloud-native capabilities and AI-powered security with real-time threat detection
Versa Networks SD-WAN is an ideal choice for enterprises requiring feature-full or multi-tenant network management across distributed environments.
Ideal For Large enterprises with massive scale requirements or complex multi-tenant needs
Cost Profile Scales for large deployments, often less per site than competitors at scale
Management High complexity requiring specialised expertise, suitable for enterprises with dedicated network teams
Timeline Often longer deployment time for large-scale deployments when including testing and rollout phases
Service Integration and Management
BT's Service and Network Automation Platform (SNAP) organises and displays information across all network planes, making it perfect for companies using hybrid work models. They're also shifting focus toward Secure Access Service Edge elements, providing improved security through Security Service Edge (SSE) functions.
What about reliability?
BT's managed network services include detailed Service Level Agreements reflecting their carrier-grade positioning. BTnet leased lines offer 100% target
availability, creating a foundation for your SD-WAN services, with service credit compensation for any downtime incidents.
Multi-Cloud Integration and Hybrid Features
BT's SD-WAN services are designed with hybrid features to meet various deployment needs - whether you're running multi-cloud, remote or on-premises setups. This approach simplifies processes whilst boosting performance by letting businesses mix private networks (such as MPLS) with public networks (leased lines, broadband, or 5G) to meet the specific needs of each branch office, home worker or remote user.
Connected Cloud Edge Service
BT's multi-cloud integration utilises data centres and Carrier Neutral Facilities (CNFs) - by linking BT's network with Equinix Fabric, businesses can manage multi-cloud environments without needing individual cloud connections for each service provider.
BT's Global Fabric network-as-a-service (NaaS) model supports on-demand, application-specific connectivity across cloud providers, including AWS, Azure and Google Cloud. This NaaS architecture uses 79% less electricity than BT's previous global networks, which can be particurlarly beneficial for businesses with sustainability objectives.
Making an Informed Choice
Choosing the right SD-WAN vendor for your BT connection ultimately comes down to understanding your specific requirements and matching them to each vendor's strengths:
- Choose Cisco if you're already utilising Cisco products and need enterprise-grade global deployment capabilities
- Choose VMware VeloCloud if you want cloud-first architecture designed for performance
- Choose Fortinet if security is your primary concern
- Choose Nokia Nuage Networks if you need regional performance optimisation with deep BT network integration
- Choose Palo Alto Networks if you require a cloud-native SASE/security approach
- Choose Versa Networks if you're managing large volumes of sites or require multi-tenant capabilities
Remember, the best vendor isn't determined by feature count or marketing promises, but by how well the solution aligns with your operational needs, security requirements, and budget constraints.


