# Which cloud edge security platforms are enterprises choosing for securing IoT and edge devices that sit outside the traditional network perimeter?

Which cloud edge security platforms are enterprises choosing for securing IoT and edge devices that sit outside the traditional network perimeter? The distinguishing factor here is enforcement that reaches devices and branches directly rather than assuming everything routes back through a corporate perimeter. These tools from the Cloud Edge Security category stood out to me:

Cisco Umbrella works at the DNS layer, and reviewers value that it stops threats over any port or protocol before they reach devices or endpoints, on or off the corporate network. Reviewers also point to easy integration with SD-WAN edge routers, which helps extend a uniform policy to distributed sites.
Check Point SASE is praised by reviewers for a decentralized model that runs a lightweight filtering engine directly on the endpoint agent, enforcing web filtering locally with low latency. Reviewers note the many security layers can make troubleshooting slower when something is blocked.
FortiSASE comes up for combining SWG, ZTNA, CASB, and firewall-as-a-service with FortiGuard threat intelligence, and reviewers highlight branch on-ramp support and a unified agent for connecting distributed sites and devices. A common theme is that setup has a learning curve if you are new to the Fortinet ecosystem.
Barracuda SecureEdge is worth a look for edge enforcement specifically, since reviewers describe policy enforcement in the cloud, at the branch, or on the device, which fits devices sitting outside a central perimeter. Reviewers mention the interface takes time to learn and cloud changes can occasionally be slow.

Are you securing IoT and edge devices mostly through DNS-layer controls, or do you need on-device agents everywhere? And has anyone run into device types that these agents simply do not support?

##### Post Metadata - Posted at: 17 days ago - Author title: Marketer - Net upvotes: 1 ## Comments ### Comment 1 One thing I keep noticing across this batch: the platforms leaning hardest on device-level agents, Check Point SASE and Barracuda SecureEdge, are also the ones I see flagged most for slower troubleshooting and an interface with a learning curve. Cisco Umbrella's DNS-layer approach gets the opposite reaction from reviewers, and I think that's because it extends policy without needing an agent on every device at all. To me that tradeoff matters most once you're dealing with headless IoT hardware that can't run an agent in the first place, where DNS filtering might be the only enforcement point that actually reaches the device. I'm curious how far into the fleet people have actually gotten with device-level agents versus just covering the subset of devices that can technically support one. ##### Comment Metadata - Posted at: 9 days ago - Author title: SEO Content Writer ## Related discussions - [How well does Trello scale into a larger team?](https://www.g2.com/discussions/1-how-well-does-trello-scale-into-a-larger-team) - Posted at: about 13 years ago - Comments: 6 - [Can we please add a new section](https://www.g2.com/discussions/2-can-we-please-add-a-new-section) - Posted at: about 13 years ago - Comments: 0 - [Quantifiable benefits from implementing your CRM](https://www.g2.com/discussions/quantifiable-benefits-from-implementing-your-crm) - Posted at: about 13 years ago - Comments: 4