This article is part of VendorBenchmark's IT Infrastructure Pricing Benchmark guide. It covers SD-WAN platform pricing in depth — what enterprise buyers pay per site for Cisco Meraki, Fortinet FortiGate SD-WAN, VMware VeloCloud (Broadcom), and Palo Alto Networks Prisma SD-WAN — and how to negotiate each platform effectively.
SD-WAN has become the standard enterprise branch connectivity architecture, replacing traditional MPLS for most branch and remote office deployments. The market has consolidated around four primary vendors, each with different pricing models, bundling strategies, and negotiation dynamics. Getting SD-WAN pricing right matters — at 50–500 sites, a $1,000/site/year difference in total cost equals $50K–$500K annually.
- Cisco Meraki MX (100-site deployment): $4,500–$7,500/site/year (HW amortized + SW)
- Fortinet FortiGate SD-WAN (100-site): $2,800–$5,000/site/year (security included)
- VMware VeloCloud (100-site): $3,500–$6,000/site/year (post-Broadcom pricing)
- Palo Alto Prisma SD-WAN (100-site): $4,200–$7,200/site/year
- Fortinet is typically 25–40% lower TCO than Cisco Meraki at equivalent feature sets
Understanding SD-WAN Pricing Components
SD-WAN total cost of ownership has three primary components that must be evaluated together: edge hardware, software licensing (including management and control plane), and connectivity (circuits from ISPs). Most vendor comparisons focus only on hardware and software — but ISP circuit costs can dwarf the platform cost at scale.
For this benchmark comparison, we focus on hardware + software licensing only, which represents the vendor-negotiable component of SD-WAN cost. ISP connectivity is typically procured separately and varies by geography.
Pricing Models Vary by Vendor
Understanding how each vendor bundles pricing is essential before comparing:
- Cisco Meraki: All-inclusive subscription (hardware + cloud management + support) in a single annual or multi-year fee per device. No separate software license; no separate SNTC.
- Fortinet: Hardware purchased separately (perpetual or lease); annual FortiCare + FortiGuard subscription for security services and support. Security features (IPS, URL filtering, AV) included in the platform subscription.
- VMware VeloCloud (Broadcom): Hardware purchased separately or via partner; annual VeloCloud Orchestrator subscription per site plus tier-based software licensing. Post-Broadcom pricing has increased 20–35% vs. pre-acquisition.
- Palo Alto Prisma SD-WAN: Hardware edge devices sold separately; annual Prisma SD-WAN software subscription per site. Security requires additional Prisma Access licensing if not already a PANW customer.
Per-Site Cost Benchmarks by Deployment Scale
The most useful comparison metric for SD-WAN is total annual cost per site — hardware amortized over 5 years plus annual software/support licensing. Here's what enterprise buyers pay at different deployment scales:
| Vendor | 25-Site Deployment (Annual/Site) | 100-Site Deployment (Annual/Site) | 500-Site Deployment (Annual/Site) |
|---|---|---|---|
| Cisco Meraki MX (mid-range) | $5,800–$9,500 | $4,500–$7,500 | $3,800–$6,200 |
| Fortinet FortiGate SD-WAN | $3,800–$6,500 | $2,800–$5,000 | $2,200–$4,000 |
| VMware VeloCloud (Broadcom) | $4,500–$7,800 | $3,500–$6,000 | $2,900–$5,000 |
| Palo Alto Prisma SD-WAN | $5,500–$9,200 | $4,200–$7,200 | $3,400–$5,800 |
| Versa Networks | $3,200–$5,500 | $2,400–$4,200 | $1,800–$3,200 |
These ranges reflect hardware amortized at 20% per year (5-year life) plus annual software licensing and support, with standard enterprise discounts applied. Premium hardware tiers (higher throughput, more WAN ports) push toward the upper end; entry-level branch appliances are at the lower end.
"The real SD-WAN savings opportunity isn't in the per-site hardware price — it's in the annual licensing and support terms that compound over a 5-year deployment lifetime. A $800/site/year licensing difference across 200 sites is $160K annually, or $800K over the deployment term."
Benchmark Your SD-WAN Proposal
Submit your SD-WAN proposal for a benchmark comparison against 250+ comparable enterprise deployments. Know your market rate in 48 hours.
Cisco Meraki SD-WAN Pricing Deep Dive
Cisco Meraki's all-inclusive subscription model is both its strength (simplicity, predictable costs) and its vulnerability in negotiations (the bundled model obscures where Cisco is making margin). Meraki licenses are sold per device per year or in multi-year terms with modest discounts for 3-year and 5-year commitments.
Meraki MX pricing by appliance model:
| Meraki MX Model | Throughput | Hardware List | Annual License List | Enterprise Net (HW + SW) |
|---|---|---|---|---|
| MX68 | 450 Mbps | $850 | $600–$900/yr | $700–$1,100/yr (all-in) |
| MX85 | 1 Gbps | $1,800 | $1,200–$1,800/yr | $1,500–$2,200/yr (all-in) |
| MX105 | 2 Gbps | $3,200 | $2,200–$3,200/yr | $2,700–$4,000/yr (all-in) |
| MX250 | 4 Gbps | $6,500 | $4,500–$6,500/yr | $5,500–$8,000/yr (all-in) |
Meraki's enterprise discount ranges: 25–35% at 25–50 devices; 30–40% at 50–200 devices; 35–45% at 200+ devices. Cisco applies additional EA discount when Meraki is included in a broader Cisco Enterprise Agreement — typically 5–8% incremental over standalone Meraki pricing.
Fortinet SD-WAN Pricing
Fortinet's SD-WAN is built into every FortiGate appliance — there's no separate SD-WAN SKU. The SD-WAN capability is enabled via FortiOS and management via FortiManager. This means SD-WAN functionality is included with the core network security subscription, making Fortinet's all-in cost comparison more favorable than it appears at the appliance level.
For a 100-site deployment with FortiGate 80F (mid-range branch appliance):
- Hardware: $1,200–$1,800 per appliance (enterprise pricing)
- FortiCare + FortiGuard Essential: $800–$1,200/device/year (SD-WAN + security included)
- FortiManager (central management): $8,000–$18,000/year for 100 devices
- All-in per-site annual (HW amortized + SW + management): $1,050–$1,700/site/year
The security bundling makes Fortinet particularly cost-effective for organizations that were planning to deploy both SD-WAN and a firewall replacement. The FortiGate handles both, eliminating a separate security appliance that would have run $500–$1,500/site/year in competing solutions.
VMware VeloCloud and Palo Alto Prisma SD-WAN
VMware VeloCloud (now under Broadcom) has experienced pricing increases of 20–35% post-acquisition. VeloCloud's competitive advantage — deep integration with VMware's network virtualization stack (NSX) — is less compelling now that many enterprises are questioning their VMware commitments overall. Organizations evaluating VeloCloud should model the total Broadcom relationship and consider whether co-terminating VeloCloud with a VMware renegotiation creates leverage.
Palo Alto Networks Prisma SD-WAN (formerly CloudGenix) is positioned as a premium SASE-aligned solution. Its pricing reflects the PANW premium tier — higher than Fortinet and Meraki in most configurations — but buyers with existing Palo Alto security deployments (NGFW, Prisma Access) can negotiate bundled discounts that reduce the effective Prisma SD-WAN cost by 15–25%.
Compare SD-WAN Vendors by Your Site Profile
Get benchmark pricing for your specific deployment — site count, throughput requirements, and security needs — compared across all four major vendors.
SD-WAN Negotiation Tactics
SD-WAN negotiations have distinct dynamics from other infrastructure categories because the market remains genuinely competitive. Unlike markets where one vendor dominates, the top SD-WAN vendors actively compete for every major enterprise deal — creating real negotiation leverage for well-prepared buyers.
Multi-Vendor Competitive Evaluation
Running formal proof-of-concept evaluations with two or three SD-WAN vendors simultaneously is standard practice in enterprise deployments and is expected by vendors. The PoC process itself doesn't commit you to a vendor and creates a useful data set for technical comparison — but its real value is competitive pricing pressure. Vendors who know they're in a competitive PoC sharpen pricing at the proposal stage, typically by 8–15% vs. non-competitive situations.
Site Count Commitment for Phased Deployments
If you're deploying SD-WAN in phases (common for large enterprises with 200+ sites rolling out over 12–24 months), commit to the total end-state site count in the initial contract — even if you're only deploying a fraction immediately. Vendors price per committed site count, and the discount tiers for 200-site commitments are significantly better than for 50-site initial deployments. You pay for sites when you activate them, but the commitment unlocks better pricing for the entire deployment.
Multi-Year Licensing
SD-WAN software licensing is one category where multi-year commitments yield meaningful incremental discounts. 3-year terms typically save 15–20% vs. annual pricing; 5-year terms save 25–30%. Given that SD-WAN platforms have 5–7 year deployment lifetimes, a 5-year software commitment with hardware refresh at year 3 is a cost-effective structure that most vendors support.
- Run competitive PoC with at least 2 vendors before signing
- Commit to end-state site count even if deployment is phased
- Negotiate multi-year (3 or 5 year) software licensing
- For Cisco Meraki: include in Cisco EA if already a Cisco network customer
- For Fortinet: bundle with FortiGate NGFW refresh for combined discount
- For VMware VeloCloud: negotiate alongside any VMware/VCF renewal
- For Palo Alto Prisma: bundle with Prisma Access or PANW NGFW if applicable
- Request price lock for hardware refresh cycle (years 4–5)
For broader infrastructure pricing context, see the IT Infrastructure Pricing Benchmark pillar guide. For Cisco-specific negotiation mechanics including Cisco EA SD-WAN bundling, see the Cisco EA Pricing Benchmark guide. To submit your SD-WAN proposal for a formal benchmark analysis, use the proposal submission tool — we cover all four major SD-WAN platforms in our dataset.
More Infrastructure Pricing Guides
