In short: Exium SASE is a cloud-delivered secure access service edge that gives users zero trust access to private applications and protects their web, DNS and SaaS traffic. SASE Essentials covers the core controls; SASE Pro adds conditional access, geo-fencing, agentless access and identity and SIEM integrations. It is licensed per user, covering up to five devices.
What Exium SASE is
SASE (secure access service edge) moves network security out of the office and into the cloud, so the same protection follows users whether they are at a desk, at home or on hotel Wi-Fi. Exium splits it into two halves:
- Secure Internet Access: DNS security (including encrypted DNS), web security and SaaS security, with AI-driven threat prevention, so malicious sites and downloads are blocked before they reach the device.
- Secure Private Access: zero trust network access (ZTNA) to applications in your office, data centre or cloud, granted per application after the user and device are verified, instead of a VPN that drops users onto the whole network.
Both are managed from the same console as the rest of the Exium platform. Built-in digital experience monitoring helps show whether a slow application is a network problem or an application problem.
SASE Essentials and SASE Pro compared
| Capability | SASE Essentials | SASE Pro |
|---|---|---|
| DNS, web and SaaS security | Yes | Yes |
| Zero trust secure private access (ZTNA) | Yes | Yes |
| Private DNS and private domains | Yes | Yes |
| Mobile device security | Yes | Yes |
| AI-driven threat prevention | Yes | Yes |
| Digital experience monitoring | Yes | Yes |
| Conditional access for SaaS applications | No | Yes |
| Geo-fencing controls | No | Yes |
| Agentless zero trust access | No | Yes |
| Connect existing firewalls to the SASE cloud | No | Yes |
| Modern workplace (office) security | No | Yes |
| SSO/MFA, SCIM and SIEM integrations | No | Yes |
Essentials is the usual starting point for VPN replacement and web protection. Pro suits organisations that want to lock SaaS applications to trusted access, restrict access by country, give contractors browser-based access without installing an agent, or feed events into a SIEM. Pro is also the edition Exium positions as a firewall replacement for offices, data centres and cloud environments. We confirm support for your identity provider during design.
How Exium SASE is licensed
Exium SASE is licensed per user, and Exium states that each user licence covers up to five devices. That suits hybrid staff with a laptop, a phone and perhaps a tablet.
- Edition: choose Essentials or Pro; you can move from Essentials to Pro later
- Billing: monthly on your Forever Systems account
- Changes: add users as you hire and remove them as people leave
- Offices: if you also want to replace an office firewall, the Exium Cyber Gateway is licensed separately per site
Pricing depends on the edition and number of users, so ask us for a quote.
Requirements and deployment
Exium supports silent scripted deployment of its client through remote monitoring and management (RMM) tools, as well as email invitations and interactive installs, so we can roll it out to laptops and mobile devices without visiting each one. Because private applications are reached through zero trust access rather than a VPN, there is no remote access VPN service to leave exposed on your firewall. With SASE Pro, existing firewalls can be connected to the Exium cloud during a migration, and agentless access covers devices you do not manage.
Before rollout we check the operating systems in your estate, your identity provider, which internal applications people need and any split between managed and personal devices. Policies are tested with a pilot group before everyone moves over.
Who it suits and how we help
Exium SASE suits organisations with remote and hybrid workers, those whose VPN concentrator is due for replacement, and those working towards NCSC zero trust principles or Cyber Essentials controls on firewalls and access. We design the policies, deploy the agent, connect your identity provider and run the service day to day. Compare other SASE, ZTNA and business VPN products or DNS and web filtering options, then contact us for a quote.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
What is the difference between Exium SASE Essentials and SASE Pro?
Essentials covers DNS, web and SaaS security, zero trust private access, private DNS, mobile device security, AI-driven threat prevention and digital experience monitoring. Pro adds conditional access for SaaS apps, geo-fencing, agentless access, connection of existing firewalls, modern workplace security and SSO/MFA, SCIM and SIEM integrations.
How many devices does an Exium SASE licence cover?
Exium states that each user licence covers up to five devices.
Can Exium SASE Pro connect our existing firewalls?
Yes, with SASE Pro, which includes connecting existing firewalls to the Exium SASE cloud. That lets offices keep their current firewall during a migration while remote users move to zero trust access.
Can contractors use Exium without installing the agent?
Yes, with SASE Pro, which includes agentless zero trust access to selected applications.