SonicWall Cloud Secure Edge (CSE) is a cloud-native Security Service Edge platform that delivers Zero Trust Network Access (ZTNA), Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and DNS Security in a single subscription. It is designed to replace legacy VPN solutions for MSPs and their SMB and mid-market customers, providing secure access to private apps and the internet without an exposed portal or VPN server.

CSE Basic provides essential ZTNA for private application access and DNS Security for internet-level threat blocking. CSE Advanced adds full Secure Web Gateway for internet traffic inspection, SSH and RDP session recording, and comprehensive CASB functionality for SaaS application control. Advanced is the appropriate tier for organizations replacing a full SSL VPN and internet proxy infrastructure in a single deployment.

Yes. SonicWall Gen 7 and Gen 8 firewalls running SonicOS 7.1.2 or later can activate the CSE Connector directly from the firewall management interface. The connector enables ZTNA access to private applications hosted behind the firewall without opening inbound ports or reconfiguring existing firewall policies. Threat intelligence is shared between the firewall and the CSE cloud in real time.

CSE is a per-user subscription available in 1, 2, and 3 year terms. It is licensed and billed through MySonicWall alongside existing SonicWall firewall and security subscriptions. Monthly billing is available for MSPs that bill customers on a recurring consumption model. Both the Basic and Advanced tiers are available through this billing model.

Yes. CSE includes a coexistence mode that allows it to run alongside an existing SSL VPN deployment during the transition period. Users can continue accessing resources through the SSL VPN while CSE is being deployed and validated for each application group. SonicWall and Firewalls.com provide guided migration tooling and partner playbooks. Customers typically complete the migration in under two weeks.

CSE supports Windows, macOS, iOS, Android, and ChromeOS endpoints through user-installable agents. Zero Touch and MDM deployment options simplify agent provisioning on managed devices. For unmanaged or BYOD devices, CSE supports clientless access through a browser for web-based application access without requiring an agent install.