Evaluating both for a brownfield hybrid cloud migration. Need deterministic path selection for critical apps (SAP, VoIP) over multiple underlays (MPLS, broadband, 5G).
From the PoC:
* **Cato:** Global private backbone is the steering. Simple class-based policy (Office 365 -> nearest PoP). Less granular control, but path performance is their problem. Latency was consistent.
* **Versa:** More traditional SD-WAN with detailed routing controls. Can manipulate BGP, use performance-based routing (jitter, loss) per application. Complexity is higher.
My read: Cato if you want a managed outcome and trust their backbone. Versa if you need fine-grained control and have the team to manage it.
Specific questions:
* Any real-world data on Versa's cloud PoP footprint vs Cato's for APAC traffic?
* How deterministic is Cato's steering during backbone congestion events?
* For Versa, what's the operational overhead for maintaining custom routing policies vs their "Director" automation?
Trust but verify, then don't trust.