Zero Trust SD-WAN Licensing Overview & SKUs
Current packaging, deployment options, and quote guidance
Last verified: August 27, 2026.
Zscaler Zero Trust SD-WAN is now positioned within Zero Trust Branch. It connects and secures branches, campuses, factories, and data centers without extending a routed network or relying on site-to-site VPN overlays.
Current licensing model
Zscaler's current public pricing page lists Zero Trust SD-WAN as a standalone product that does not require a Zscaler platform bundle. SD-WAN packages are sized by encrypted throughput:
| Published package size | Encrypted throughput |
|---|---|
| Small | Up to 200 Mbps |
| Medium | Up to 400 Mbps |
| Large | Up to 1 Gbps |
| X Large | Up to 10 Gbps |
Device Segmentation is packaged separately by endpoint count: Small (up to 200), Medium (up to 500), Large (up to 1,000), and X Large (up to 5,000).
Deployment options
The currently published deployment options are:
- ZT 400
- ZT 600
- ZT 800
- ZT 8010
- ZT VM (virtual deployment)
The correct appliance or virtual deployment depends on encrypted throughput, interface requirements, resiliency design, and site topology—not only user count.
Core capabilities
- Traffic forwarding to Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), routed tunnels, or directly to the internet
- Intelligent, application-aware path selection and WAN link monitoring
- High availability and local security policies
- Zero-touch provisioning with reusable templates
- Direct application access and segmentation designed to reduce lateral movement
Important correction to earlier SKU guidance
Earlier versions of this article listed a 500 Mbps ZT 600 tier, appliance-specific device and monthly data-transfer allowances, exact sellable SKU strings, platform prerequisites, and five-unit minimums. Those details are not part of Zscaler's current public packaging and should not be used for quoting. In particular, the current published Medium tier is up to 400 Mbps, and ZT 8010 is now included among the deployment options.
Ordering and quote validation
Commercial part numbers, high-availability rules, subscription terms, minimum quantities, capacity extensions, and discounts can change and are not comprehensively published. SecureDynamics validates each design and quote against the current Zscaler configuration and price book. The final Zscaler-authorized quote is the authoritative source for purchasable SKUs and commercial terms.
Sources
- Zscaler Zero Trust SD-WAN product overview
- Zscaler pricing and plans
- Zscaler Zero Trust Branch appliance deployment guidance
For licensing, architecture, implementation, or managed-services assistance, contact SecureDynamics.