Broadcom Symantec SASE

Broadcom Symantec SASE is a hybrid secure-access platform combining cloud and edge security for web traffic, private applications, and cloud services. It suits enterprises coordinating network operations, security, and executive stakeholders across mixed infrastructure. Its broad control set is compelling for organizations that need one policy and reporting model, but custom pricing and partner-led implementation make it a considered enterprise purchase rather than a quick, low-cost deployment.

Overview

Symantec SSE protects network, web, and cloud applications through cloud and edge services. Broadcom supports on-premises, hybrid, and all-cloud deployments, with cloud services running on Google public cloud infrastructure. The hybrid delivery model, branch connectivity, and support for both cloud and on-premises secure web gateways make it suitable for organizations transitioning away from data-center security without abandoning local systems.

Its architecture is aimed at enterprise teams: network operations, IT security, finance, and executive management. Broadcom directs customers to partners for implementation services, while product support information is provided through its support resources. That operating model favors organizations with procurement and deployment processes already suited to enterprise security platforms.

Key features

Web and threat protection

Cloud SWG inspects web traffic through a proxy, including SSL/TLS decryption, deep file inspection, and a cloud firewall service. Multi-layer inspection, Symantec antivirus, advanced cloud sandboxing, and full web isolation add several defensive stages. This is a strong fit for teams that need policy enforcement and malware analysis at the web gateway, although decryption and isolation policies require careful operational ownership.

Private access and cloud control

ZTNA provides access to private applications in cloud environments and on-premises data centers, positioning the service as a VPN replacement. CASB Intelligence Services provides visibility and application control across more than 45,000 cloud applications, including shadow-IT control. Together, these capabilities address remote access and unsanctioned cloud use rather than treating either as a standalone problem.

Management, integration, and connectivity

Cloud and on-premises SWG can share unified management, reporting, and policy control. Symantec SSE can be paired with Symantec DLP Cloud and includes DLP and full CASB integrations, useful when data protection must follow the same access policies. Broadcom says the service minimizes public-internet routes and favors Google Cloud’s private backbone, which is intended to reduce unnecessary exposure between users, branches, and applications.

Pricing

Symantec SSE

Symantec SSE uses annual per-user billing with fixed, predictable pricing, but the amount is custom pricing: contact Broadcom or a partner. The plan includes advanced security options and integrations, plus cloud and on-premises deployment. It is the relevant package for enterprises needing the complete hybrid service, while the absence of a published amount means budgeting requires a sales discussion. No trial term, renewal condition, seat cap, or free tier is provided.

Platforms

Symantec SASE supports Android, iOS, Linux, macOS, self-hosted deployments, web access, and Windows. Endpoint coverage also includes Windows, macOS, iOS, Android, and ChromeOS. This range suits organizations with mixed user devices and a combination of hosted and self-managed infrastructure.

Who it's for

Choose Symantec SASE when an enterprise needs secure web gateway, VPN-replacement access to private applications, cloud-application governance, DLP integration, and a common control plane across hybrid deployment. It is less suitable for a small team seeking transparent self-service pricing or a lightweight gateway that can be adopted without partner involvement.

Pros and cons

Pros

• Broad security coverage: SWG, ZTNA, CASB, threat inspection, and DLP integration address web, private-app, and cloud risks in one platform.
• Hybrid operating model: Cloud, on-premises, and all-cloud deployment options accommodate staged modernization.
• Unified administration: Shared management, reporting, and policy control can reduce fragmentation between cloud and local gateways.
• Large cloud-app scope: Visibility and controls cover more than 45,000 applications, including shadow IT.

Cons

• Custom pricing: Buyers cannot estimate annual per-user cost from a published price.
• Enterprise deployment overhead: Partner implementation and multiple security layers demand planning and specialist ownership.
• No free entry tier: Organizations cannot use a free plan to validate the service before engaging commercially.

Alternatives

Cloudflare One is the better starting point for teams wanting a freemium option, including a free plan for up to 50 users with community support and up to 24 hours of standard log retention.

Pangolin suits smaller deployments that can begin on a free Basic plan limited to five users, five sites, five domains, and defined resource quotas.

Arista NG Firewall is an option for web-only deployments seeking a free plan with basic, limited security and connectivity features.

Fortinet Unified SASE is worth comparing when up to three devices per user, Fortinet cloud locations, 24x7 premium support, and REST API access are priorities.

Sangfor EasyConnect is an alternative with paid, quote-based access software.

Cato SASE Platform is another paid platform priced through a tailored sales discussion.

Skyhigh Private Access is a paid alternative focused on private access across common desktop and mobile platforms.

Cloudbrink Personal SASE offers a freemium route with a limited try-now plan for up to three people per organization.

Browse the wider Secure Access Service Edge Software category for more options.

Verdict

Broadcom Symantec SASE is best for enterprises that need one hybrid security framework spanning web inspection, private-application access, cloud-application control, and DLP integration. Its main reason to choose it is the breadth and unified governance; its main reason to look elsewhere is custom pricing combined with an implementation model geared to large, structured organizations.