Does Network Protect replace my next-generation firewall?

It depends on which next‑generation firewall capabilities you rely on. Web Protect provides a simple and efficient layer of URL and application filtering based on first‑packet inspection, improving security for businesses with or without existing firewalls. Network Protect adds a deeper layer of protection using cloud-based inspection and real-time malware protection to help detect and block threats. For enterprise‑grade security and firewall replacement, Web Protect and Network Protect are designed to be used together as a layered solution.

Does Network Protect include the same web-filtering functionality as Web Protect?

No, Web Protect and Network Protect provide different layers of security that work together. Web Protect delivers cloud‑based URL and application filtering using first‑packet inspection to control access and enforce policies across all sites. Network Protect adds advanced protection using deep inspection to detect and block threats within network traffic. For a complete Firewall‑as‑a‑Service experience, Web Protect and Network Protect are designed to be used together as a layered solution.

How does real-time threat protection work?

Network Protect uses deep inspection and threat intelligence to identify and block threats in real time, including newly emerging malware.

What is the difference between Web Protect and Network Protect?

Web Protect and Network Protect are complementary cloud‑based security layers that work with SC//Connect SD‑WAN. Web Protect focuses on policy control, including URL and application filtering, helping businesses enforce access policies across all sites. Network Protect adds advanced protection using deep inspection and real-time malware protection to secure traffic and block modern network threats. Together, they deliver a layered cloud security architecture that combines centralized policy control with advanced inspection.

Do I need to be an SC//Connect SD-WAN customer to buy Network Protect?

Yes. Network Protect is designed to work as an integrated add‑on to SC//Connect SD‑WAN solutions. For new SC//Connect™ Business or SC//Connect™ Enterprise customers, Network Protect can be included as part of the initial deployment. For existing customers, a software or firmware update may be required—please check with your SC//Connect solution provider for details.

Can I still use SC//Connect SD-WAN to breakout traffic at the edge with Network Protect?

Yes, local breakout can be enabled for selected SaaS applications. Using application‑aware policies, known traffic can be routed directly to the internet from the edge to reduce costs and maximize available bandwidth. Because this traffic bypasses the SD‑WAN tunnel, it may not receive full Network Protect inspection, which can reduce security for those applications. Unknown or unclassified traffic continues through the SD‑WAN cloud, where Network Protect applies deep inspection and enforces security policies.

SC//Connect™ Network Protect

Advanced Network Security for Real-Time Malware Detection

Network Protect is a cloud-managed security layer that delivers deep inspection and real-time malware protection for organizations that need stronger protection than traditional firewalls can efficiently provide. As part of the SC//Connect™ secure SD-WAN solutions layered architecture, Network Protect strengthens security without the cost and complexity of managing traditional firewall infrastructure.

SASE: Network Security for the Cloud Generation

It all starts with the secure network foundation of SC//Connect Secure SD‑WAN, with Web Protect adding cloud-based policy control and URL filtering. Network Protect extends this layered architecture with deep inspection and real-time malware protection delivered through secure cloud gateways. Together, these layers provide a modern, cloud-delivered security architecture that simplifies network protection for distributed environments.

Enterprise-Grade Security Without Complexity

Network Protect is designed for businesses with lean IT teams that need stronger protection than traditional firewalls can provide—without the complexity of managing security infrastructure.

Secure SD-WAN Network

SC//Connect SD‑WAN provides a secure foundation with private IP addressing to reduce network exposure, along with encrypted connectivity and a zero‑trust network posture.

Firewall-as-a-Service

Web Protect adds cloud-based policy control with URL and application filtering across all sites.

SASE Cloud Security

Network Protect provides real-time malware protection powered by deep inspection through cloud-based gateways.

Explore Network Protect: Enterprise-Grade Cloud Security as a Managed Service

How to buy Network Protect

Network Protect works as an extension of SD-WAN products. It’s sold as a simple add-on subscription for any new or existing SD-WAN customers. An upgrade may be required for existing customers to ensure they are running a Network Protect compatible version of our SD-WAN software.

As with all products, Network Protect is sold exclusively through our global network of certified SD-WAN solution providers. Contact us today to find an SD-WAN provider near you.

Frequently Asked Questions

See What Others Have To Say About Scale Computing

We are proud to have over more than a thousand positive customer reviews on the most trusted third-party industry reviews websites. Read what our customers have to say on Gartner Peer Insights and G2.

Calculate Total Cost of Ownership: Empower Your IT Decision-Making and Gain Personalized Cost Analysis and Insightful Savings

View TCO Calculator