Timus SASE licensing

In short: Timus SASE is a cloud-native secure access platform from Timus Networks, now part of CyberFOX, that replaces the office VPN with zero trust, identity-based access. It is licensed per user in two plans: Essentials for up to five users, and Advanced, which adds a secure web gateway, faster gateways, more devices per user and longer log retention.

What Timus SASE is

Timus SASE is the single product from Timus Networks. It moves remote access and network security out of the office and into the cloud. Users run a lightweight agent; the agent keeps an encrypted tunnel open to a Timus gateway; and every request to a server, application or website is checked against policies based on the user's identity, group, location and device health.

In practice staff get the same access from home, a client site or a hotel as they do at their desk, without starting a VPN, while you get one place to decide who can reach what. Offices, data centres and cloud networks connect to the same gateways with site-to-site IPsec tunnels, so the policy covers branch traffic too.

Key capabilities on both plans:

• Zero trust network access with conditional access, adaptive MFA and policy-based segmentation, so users only reach the resources their role needs
• Always-on encrypted connectivity using WireGuard or OpenVPN, with smart protocol fallback and automatic Wi-Fi security on untrusted networks
• Dynamic cloud firewall with layer 3 to 7 policy, private DNS and domain-based split tunnelling
• Dedicated static IPs for restricting SaaS applications to traffic from your gateway
• Infected device isolation and dynamic tagging, so a device that fails its checks can be cut off automatically
• Secure RDP to internal machines under zero trust policy, without a VPN

Essentials vs Advanced

Both plans run on the same platform and multi-tenant console. The differences are capacity, web security and reporting.

Essentials suits a very small team that mainly needs secure remote access. Advanced is the plan we normally supply, and the right choice for anything larger or for anyone who wants web filtering in the same agent. The productivity tracker reports on application use by user and team; if you switch it on, treat it as employee monitoring under UK GDPR and tell staff, which we can help you plan.

How Timus SASE is licensed

Timus SASE is licensed per user. A licence covers the devices that user connects, up to the plan's devices-per-user limit, so phones and laptops do not need separate licences.

Data usage is unlimited on both plans and site-to-site tunnels are not limited. The plan, the user count, any extra gateways and the commitment together decide the price, so ask us for a quote. For the pros and cons of different terms, see monthly vs annual licences.

Requirements and deployment

Timus SASE is entirely cloud-delivered, so there is nothing to rack. To deploy it you need:

• Supported devices: the agent runs on Windows, macOS, Android and iOS
• An identity provider: single sign-on with Microsoft Entra ID, Okta or another SAML provider is recommended, so users sign in with existing accounts and MFA
• A route for site connectivity: an office firewall or router, or a cloud network, that can build an IPsec tunnel to the Timus gateway
• Optional endpoint integrations: Microsoft Defender, SentinelOne, Bitdefender, Heimdal or Huntress for posture checks

A typical rollout runs in stages: connect the identity provider, create user groups and access policies, connect sites, pilot the agent with a small group, then deploy silently to everyone and switch on SaaS IP restrictions once traffic is flowing through your gateway. Timus also offers a ConnectWise PSA integration as an add-on, and the API on the Advanced plan supports automation and log export to a SIEM.

How Forever Systems helps

We supply Timus SASE and stay responsible for it after the order. That means confirming the right plan, designing access policies that match how your teams really work, deploying the agent, connecting your offices and tuning web filtering so it blocks what it should without getting in the way.

After go-live we handle user changes and renewals on one invoice, and we are the people to contact if something stops connecting. If you also need endpoint protection, MFA or email security, we can supply those on the same account: see SASE, ZTNA and business VPN, DNS and web filtering and firewalls and network security.

How Forever Systems supplies your software licences

Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.

• The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
• Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
• Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
• Deployment and support from engineers who run these products every day, not just a reseller account
• Consolidated billing and renewal reminders so nothing lapses unexpectedly

We work with businesses, schools, charities and public sector organisations of all sizes.

Frequently asked questions

More software and licensing guides

Related from Forever Group

• ZTNA (zero trust network access)
• Secure web gateway
• Cloud firewall
• Cyber security services
• Dark web monitoring