10 SASE certifications to validate converged network and security skills
Network World ·
Secure access service edge (SASE) is becoming an increasingly important component of enterprise networking and security strategies, as enterprise organizations expand their use of cloud services, AI applications, and hybrid work environments. Cloud-delivered SASE converges networking and security functions to provide secure access to applications and data wherever end users or resources are located. SASE combines software-defined wide-area networking (SD-WAN ) with security capabilities such as security web gateways (SWG), cloud access security brokers (CASB), zero-trust network access (ZTNA), and firewall as a service (FWaaS). As organizations adopt these technologies, network and security professionals need expertise that spans traditional networking, cloud security, identity-based access, and policy management. Global SASE revenue reached $3.5 billion in the second quarter of 2026, marking the fifth consecutive quarter of year-over-year growth exceeding 20%, according to Dell’Oro Group . The research firm forecasts that the market will reach $24 billion in annual revenue by 2030, more than doubling its 2025 level. The growing adoption of SASE is also creating demand for IT pros who can design, deploy, manage, and troubleshoot converged networking and security environments. Vendor certifications and accreditations offer one way for network engineers, security specialists, and IT architects to validate their knowledge and demonstrate proficiency with specific SASE platforms and technologies. In 2026, Fortinet restructured its Network Security Expert (NSE) program, introducing new SASE-focused certification tracks, while Cisco updated its CCNP Security certification program to reflect changing cloud security requirements. Other vendors offer credentials focused on SD-WAN, secure service edge (SSE), and zero-trust architectures. Here are 10 SASE-related certifications and accreditations (organized alphabetically) from Cato Networks, Cisco, Fortinet, Netskope, Palo Alto Networks, Versa Networks, and Zscaler that can help IT pros develop and validate their converged networking and security skills. Cato Networks: SASE Expert Level 1 Certification Overview : This introductory course for Cato SASE Expert Level 1 Certification validates a fundamental understanding of the SASE framework, including the drivers, value, architecture, use cases, and key network and security functions of SASE. It also offers the knowledge required to help an organization more toward SASE adoption. Target professional: This certification is ideal for IT professionals, network administrators, and security architects. Key skills: Certified individuals demonstrate proficiency with the Cato Management Application (CMA) and possess the technical expertise to operate, configure, and troubleshoot Cato SASE Cloud. The certification covers SASE essentials, including converged network and security functions in cloud native architectures. Exam specifics: Candidates take a less than one-hour unproctored quiz and must receive an 85% or higher to become certified. Cost: The self-paced SASE course and exam are free. Prerequisites: Candidates should have experience in cloud, networking, and security. Cato recommends candidates watch online videos and read SASE materials to prepare for the exam. Note: Cato Networks offers several levels of SASE certifications . Cisco: Certified Network Professional (CCNP) Security Overview: While not specific to SASE, the Cisco CCNP Security certification proves skills in security infrastructure, including network, cloud, and content security, endpoint protection and detection, secure network access, visibility, and enforcement. Cisco updated its CCNP Security certification program to version 2.0 on August 27, 2026, modernizing the curriculum to emphasize AI-driven security operations, cloud-native frameworks, and advanced automation. Target professional: IT professionals with three to five years of IT experience who work with Cisco security products. This is a professional-level certification for network and security engineers. Key skills: Certification holders demonstrate knowledge of identifying threats and vulnerabilities, implementing core security technologies, securing enterprise networks, and protecting users and applications. The Designing and Implementing Secure Cloud Access for Users and Endpoints concentration covers cloud security architecture, user and device security, application and data security, and threat response. Exam specifics: Candidates must pass the 350-701 SCOR (Implementing and Operating Cisco Security Core Technologies) core exam and one concentration exam, such as the 300-740 SSCA exam. The SCOR v2.0 exam is 120 minutes, and the 300-740 SSCA concentration exam is 90 minutes. Cisco does not publish specific passing score thresholds; exams are graded on a dynamic scale, and candidates receive an immediate pass/fail result accompanied by a percentage breakdown of performance by blueprint domain. Cost: The core exam costs $400, and a concentration exam costs $300, for a total of $700. Prerequisites: There are no formal prerequisites, but Cisco recommends three to five years of experience this professional-level certification. Note: Cisco certifications are valid for three years. Candidates who pass a concentration exam also earn the corresponding Cisco Certified Specialist credential. Cisco: Certified Specialist—Secure Cloud Access Overview: Cisco’s Certified Specialist—Secure Cloud Access certification validates expertise in designing and implementing secure access to cloud applications and resources. The credential is particularly relevant to IT professionals working with cloud-delivered security and SASE architectures. Target professional: Cloud security engineers, network security administrators, security architects, and IT professionals responsible for securing user and endpoint access to cloud resources. Key skills: The certification covers cloud security architecture, user and device security, network and cloud security, application and data security, visibility and assurance, and threat response. Exam specifics: Candidates must pass the 300-740 Designing and Implementing Secure Cloud Access for Users and Endpoints (SSCA) exam. The exam is 90 minutes long and is available in English. Cost: $300 Prerequisites: There are no formal prerequisites. Familiarity with networking, cloud security, identity management, and secure access technologies is recommended. Note: Passing the 300-740 exam earns the specialist certification and satisfies a concentration exam requirement for CCNP Security. The credential provides a more focused certification path for professionals who do not need the full CCNP Security designation. Fortinet: Network Security Expert (NSE) SASE Certifications Overview: Fortinet’s NSE SASE certifications validate skills in deploying, administering, monitoring, and troubleshooting Fortinet SASE solutions. In July 2026, Fortinet retired its previous FCSS SASE certification and introduced a revised NSE program that includes three SASE certification levels: NSE 5, NSE 6, and NSE 7 . Target professional: Network security administrators, cybersecurity engineers, SASE specialists, and security architects responsible for implementing and managing Fortinet SASE deployments. Key skills: NSE 5 in SASE covers the design, deployment, and management of small and midsize SASE infrastructures. NSE 6 in SASE focuses on advanced endpoint and dta security capabilities, including FortiClient EMS, FortiEDR, and FortiDLP. NSE 7 i n SASE validates advanced skills in designing, administering, monitoring, and troubleshooting FortiSASE and Fortinet SD-WAN deployments. Exam specifics: All professional-level exams are delivered through Pearson Vue proctoring services. NSE 5: Candidates must pass the NSE5_SSE-AD exam (70 minutes, 35 questions). NSE 6: Candidates must pass an applicable endpoint or data security exam, such as NSE6_DLP or NSE6_EMS (60 minutes, 30–35 questions). NSE 7: Candidates must pass the NSE7_SASE-Architect exam (60 minutes, 30 questions). Cost: NSE 5 and NSE 6 exams cost $210 each, while NSE 7 exams cost $420 each, excluding applicable taxes. Prerequisites : All professional and expert tracks require teh foundational NSE 4 certification as a baseline. To achieve NSE 5 and NSE 6 status in SASE< a candidate must hold an active NSE 4 and pass the respective level’s exam. To achieve NSE 7 status in SASE, a candidate must hold an active NSE 4, plus either the NSE 5 or NSE 6 SASE credential, and pass the NSE 7 SASE exam. Note: Fortinet certifications are valid for two years. The new NSE SASE tracks replace with previously listed FCSS SASE credential and distinguish among SASE administration, advanced endpoint and data security, and SASE architecture. Netskope: SASE Accreditation Overview: Netskope’s SASE Accreditation program provides foundational theory and practical knowledge of SASE architecture and implementation through on-demand, self-paced learning modules and quizzes, featuring instructional video walkthroughs and demonstrations. Target professional: The program is designed for working practitioners and architects in cybersecurity, networking, and technology, including roles in system administration, network engineering, IT operations, and software development. Key skills : The accreditation focuses on core SASE and zero-trust concepts including cloud computing, and software-defined networking (SDN), as well as cloud security components such as Cloud Access Security Broker (CASB), Secure Web Gateway (SWG), Zero Trust Network Access (ZTNA), Data Loss Prevention (DLP), and threat protection. Exam specifics: The current assessment consists of 30 multiple-choice questions, with a 45-minute time limit and an 80% passing score. Candidates are allowed two attempts. Cost: Netskope offers this course and assessment for free. Prerequisites : Attendees should have knowledge of security, network, and architectural principles. No coding or system administrative experience is required. Note: While sponsored by Netskope, the accreditation course and exam aim to be vendor-agnostic. Palo Alto Networks: Certified SD-WAN Engineer Overview : Palo Alto Networks’ Certified SD-WAN Engineer certification validates the knowledge and skills required to plan, deploy, configure, operate, monitor, and troubleshoot modern SD-WAN environments. It covers both standalone SD-WAN implementations and SD-WAN integrated into SASE architectures. Target professional: Network engineers, SD-WAN administrators, SASE engineers, network architects, and professional services consultants responsible for deploying and managing SD-WAN solutions. Key skills: The certification validates skills in SD-WAN architecture, deployment planning, network configuration, operations, monitoring, and troubleshooting. It also addresses integration of SD-WAN networking capabilities with broader SASE environments. Exam specifics: Candidates must pass the Palo Alto Networks’ SD-WAN Engineer certification exam. The exam runs 90 minutes and includes 80 questions. Palo Alto Networks uses a scaled scoring system ranging from 300 to 1000, with a passing threshold of 860. Cost: $250 Prerequisites: There are no formal certification prerequisites to take this exam, but Palo Alto Networks recommends completing the Prisma SD-WAN: Design and Operation training course alongside practical experience with networking, routing, and SD-WAN deployments. Note: This certification focuses on the networking component of SASE, complementing Palo Alto Networks’ SSE Engineer certification, which emphasizes cloud-delivered security services. Palo Alto Networks: Certified Security Service Edge Engineer Overview : Palo Alto Networks Certified Security Service Edge Engineer certification validates experienced security service edge (SSE) engineers on their knowledge and skills in deployment configuration, and post-deployment management and configuration, as well as their ability to troubleshoot deployed Prisma Access environments. Target professional: The certification is designed for SSE and SASE engineers, Prisma Access Specialists, network and security engineers, professional service consultants, and technical support engineers responsible for security and optimizing network and cloud environments. Key skills: The certification validates experienced SSE engineers on their knowledge and skills in setting up and configuring Prisma Access and SSE solutions. It also verifies skills in ongoing administration and configuration management of deployed environments, as well as the ability to diagnose and resolve issues in deployed Prisma Access environments. Exam specifics: The exam consists of 75 multiple-choice questions. It runs 90 minutes, and candidates must achieve a passing score of 860 on a scale of 300-1000. Cost: $250 Prerequisites: There are no formal prerequisites, but it is recommended that candidates have three years of general network security experience and one-two years working directly with Prisma Access. Note: This certification bridges the gap between outdated VPNs and AI-powered SASE. Versa Networks: Certified Administrator—Security Specialist Overview: Versa Certified Administrator—Security Specialist is its specialist-level security certification, designed to validate foundational knowledge of Security Service Edge architecture and the Versa platform. It serves as a stepping stone for network engineers looking to specialize in Versa’s SASE solutions. Target professional: Engineers who perform architect, engineering, or planning roles with Versa Security services for more than one year, with hands-on experience managing and operating Versa Secure SD-WAN Platforms. Key skills: This certification validates skills in administering Versa Security services on SD-WAN platforms, maintaining network security functions within the Versa ecosystem, and diagnosing and resolving security-related issues on Versa Secure SD-WAN platforms. Exam specifics: The exam consists of 60 multiple-choice questions that must be completed within the 90-minute timeframe, with a pass/fail result immediately available. Cost: $150 Prerequisites: Candidates must have also completed the Versa Certified SD-WAN Associate (VNX100) or Versa Certified Administrator—SD-WAN Specialist (VNX301) certification programs. Note: Versa Certifications are valid for two years. Versa Networks: Certified Administrator—SSE Associate Overview: Versa Networks’ Certified Administrator—SSE Associate certification validates foundational knowledge of security service edge architecture and the Versa SSE platform. The credential focuses on the cloud-delivered security capabilities used in SASE deployments. Target professional: Network administrators, security engineers, IT architects, and professionals seeking foundational knowledge of Versa SSE technologies. Key skills: The certification covers SASE architecture, unified and segregated SASE deployments, ZTNA, SWG, CASB, DLP. remote browser isolation, authentication, and mobile device management. It also addresses Versa Concerto, the SSE portal, monitoring, and reporting. Exam specifics: The VNX125 exam consists of 66 multiple-choice questions and has a 90-minute time limit. Cost: $100 Prerequisites: There are no formal prerequisites are listed, but candidates should have basic knowledge of WAN and SSE technologies and understand the functions of common SSE components. Note: The certification is valid for two years. Versa issues digital badges through Credly, and candidates can maintain their certification by passing the same exam or a higher-level exam. Zscaler: Zero Trust Cyber Associate (ZTCA) Overview: Zscaler Zero Trust Cyber Associate (ZTCA) is a foundational zero-trust credentials aimed at validating knowledge around zero trust principles, architectures, and how they differ from legacy network security models. Target professional: This certification is for anyone wanting to learn the basics of zero trust and it is well-suited for candidates who are newer to zero-trust architectures or who want to formalize their foundational understanding before moving into vendor-specific roles. Key skills: This certification validates that candidates can recognize the differences between old/legacy architectures and zero-trust models and understand when a zero-trust approach offers advantages. It also teaches the core components of zero trust, such as identity, least privilege, microsegmentation, and continuous verification, and how they integrate into a holistic model. Exam specifics: The exam consists of 75 questions and runs for two hours, and candidates are allowed three attempts to pass.To earn the credential, candidates must complete the e-learning portion and pass the exam. Cost: The standalone exam value is $300, and Zscaler frequently bundles ZTNA exam free of charge upon completion of the mandatory Zscaler Cyber Academy E-Learning path. Prerequisites: Candidates must complete the five-hour, self-paced e-learning course before taking the exam, and basic knowledge of networking and cybersecurity domains is required. Note: Zscaler issues a digital badge for its certifications that can be displayed on LinkedIn and other platforms.