Banyan Security (now SonicWall Cloud Secure Edge)

Overview

Banyan Security built a device-trust-centric Zero Trust Network Access (ZTNA) service. SonicWall completed the acquisition on 2023-12-26 and announced it on 2024-01-03; terms were not disclosed. The Banyan brand is gone: banyansecurity.io redirects to SonicWall, and the product is sold as SonicWall Cloud Secure Edge (CSE), described as SonicWall's Security Service Edge platform. ZTNA lives in the Secure Private Access package; Secure Internet Access is the second package. The engineering lineage shows in the docs, where the desktop proxy is still called banyanproxy.

What it is good at

Gating access on device health, not just login. In the CSE documentation, a request first passes a device trust check through the organization's device manager, then the user signs in through the identity provider, and only then does the device receive a short-lived Trust Cert that the client attaches to each request. Policies can require a minimum Trust Level per resource, so an unmanaged or out-of-date laptop can reach email but not production SSH. See device posture for why that matters.

Infrastructure coverage is broad for a ZTNA product. CSE lists SSH and RDP servers, Kubernetes, databases, and generic TCP services, and upgrades infrastructure sessions to mutual TLS with short-lived X.509 certificates, which replaces long-lived SSH keys and database passwords. Traffic can route through SonicWall's Global Edge Network to a connector, or through a self-hosted Access Tier in your own network for teams that want the data path on-premises.

Where it falls short

Its direction now follows SonicWall's portfolio, which is built around firewalls sold through MSPs and resellers. Buyers outside that channel may find packaging and support less direct than with an independent vendor. The product page describes Secure Internet Access only briefly, so test its web filtering, CASB, and DLP depth against full SSE vendors before treating CSE as a complete SSE. SonicWall does not position it as a converged single-cloud SASE in the way Cato or Zscaler are sold.

Pricing

Quote-based through SonicWall and its partners. As of 2026-11-05 the product page states per-seat licensing billed through MySonicWall alongside existing licenses, with no public list price.

Best for, and who should look elsewhere

Choose CSE if endpoint posture must gate access to infrastructure (SSH, RDP, Kubernetes, databases) and you already buy SonicWall firewalls or SonicWall remote access. If you want lightweight private-app access from an independent vendor, compare Twingate or Tailscale. For converged SASE, look at Cato Networks, Zscaler, or Cloudflare. The zero trust rollout guide and best zero trust tools ranking cover the field, and the consolidation report tracks deals like this one.

Bottom line

Banyan lives on as SonicWall Cloud Secure Edge, a solid device-trust ZTNA with strong infrastructure access. It fits SonicWall shops best.