01 — Cost certainty
Finance wants a firm number, not per-user T&M sprawl
You've been burned by "day-rate plus expenses" rollouts that doubled mid-flight. Board sign-off needs a single line item — and a go-live date that won't move.
Fixed price. Scope locked. Statement of Work in 5 working days, written acceptance test, 50/50 payment. Migrate to Prisma Access SASE from Cisco ASA, Fortinet, Check Point, Zscaler, or an existing NGFW and Panorama estate. You know the number before we start.
The licences are signed, the board wants Zero Trust, and your hybrid workforce is still hairpinning through a legacy VPN. The integrator wants a Statement of Work the size of a phonebook.
01 — Cost certainty
You've been burned by "day-rate plus expenses" rollouts that doubled mid-flight. Board sign-off needs a single line item — and a go-live date that won't move.
02 — Risk control
Production traffic. Audit deadlines. Thousands of users who expect the internet to just work. You need a partner who has stood up SASE at scale before — not a generalist learning on your tenant.
03 — Vendor pressure
Your incumbent SSE contract is up, the board has mandated Zero Trust, and the Prisma licences have a use-or-lose clause. You can't run two SASE stacks indefinitely. Move once. Move well.
Every engagement ships with a written acceptance test, a runbook your team can re-execute, and a defined hand-back date. No discovery phase that lasts three months.
Cloud-delivered SASE that retires Zscaler, on-prem NGFW and Panorama, and MPLS backhaul — ZTNA 2.0, mobile users, remote networks, service connections and IdP federation, with the bandwidth maths to right-size your tenant. Pilot in two weeks, full rollout in eight.
Onboard your estate to PANW's cloud-delivered management plane. AIOps tuning, Best-Practice Assessment baseline, and licence reconciliation so you stop paying for SKUs you don't run.
A two-week deep audit of an existing Prisma Access / SASE deployment: ZTNA policy hygiene, decryption coverage, shadowed rules, App-ID and data-security gaps, and a prioritised remediation backlog. Output: a clear report, not a sales deck. Most customers use this as a first engagement — low risk, fixed deliverable, natural lead into a wider rollout.
Multi-region estates, 50+ sites, programme-level governance, or a scope that doesn't fit a standard tier. We design a bespoke wave plan — and still hand you one fixed price before we start.
Cablewise deploys and integrates the complete Prisma SASE stack. Most engagements start with Prisma Access; these modules extend it as your Zero Trust programme matures.
Cloud-delivered ZTNA, SWG, FWaaS and CASB for every user and branch.
App-defined SD-WAN that retires MPLS and steers branch traffic intelligently.
Secure enterprise browser for managed, unmanaged and BYOD devices.
One next-generation unified agent across SASE and NGFW deployments.
Render risky and uncategorised web content safely away from the endpoint.
Autonomous Digital Experience Management — end-to-end user-experience telemetry.
Visibility and policy control over generative-AI apps and the data they touch.
Cloud-delivered data-loss prevention authored once, enforced everywhere.
Inline and API-based control of sanctioned and shadow SaaS.
A single management plane across your SASE and NGFW estate.
We implement and integrate the whole stack — let's sequence it for your estate. Book a discovery call →
Ranges below reflect typical scopes. Final fixed price is confirmed in writing after a one-hour discovery call and review of your existing config exports.
| Tier | Service & scope | Fixed price (GBP) |
|---|---|---|
| SCOPE | Scoping engagement Discovery call, config-export review, written fixed-price Statement of Work — credited against the migration if signed within 60 days. |
£4,000 |
| CUSTOM | Custom Engagement Multi-region estates, 50+ sites, programme-level governance, or any scope that doesn't fit a standard tier. |
Talk to us |
| SASE |
Prisma Access SASE
From Zscaler, NGFW or Panorama — mobile users, remote networks, IdP federation, ZTNA.
|
£35,000 – £55,000 |
| SCM |
Strata Cloud Manager
Estate onboarding, AIOps tuning, BPA baseline, licence reconciliation.
|
£15,000 – £22,000 |
| AUDIT |
SASE Posture Assessment
Two-week Prisma Access / SASE audit. ZTNA hygiene, decryption coverage, App-ID and data-security gaps.
|
£10,000 – £14,000 |
You'll know what is happening in your network in any given week, who is doing it, and what "done" looks like before we begin.
Phase 01
30-minute discovery call followed by config-export review. You receive a written fixed-price Statement of Work within 5 working days.
Phase 02
HLD & LLD signed off. Tenant build — Prisma Access PoPs, service connections, ZTNA policy, App-ID mapping, IdP federation and decryption strategy. Rehearsals.
Phase 03
Pilot user group goes first. Rollback documented. Subsequent user and branch waves on agreed windows. Engineer on the bridge throughout.
Phase 04
Written acceptance test. Runbooks, BPA report, as-built docs. Your team owns the tenant. Final 50% invoice raised.
Every engagement gets a named primary and a named backup engineer at signature, so continuity is never a single point of failure.
Certified Palo Alto Networks Principal Engineer. Fifteen-plus years architecting and operating production networks where downtime isn't an option — including Amazon Prime Video, regulated financial services (PCI-DSS), UK public-sector, offshore energy datacentres, UK telecom, and global IT consultancy.
Leads Cablewise delivery across NGFW estates, Panorama, Prisma Access and Zero Trust architectures.
Palo Alto Networks and Cisco certified engineer with a decade-plus in enterprise and production network security — full Palo Alto firewall stacks (BGP, HA, GlobalProtect, NAT), Arista switching, network segmentation and high-density Wi-Fi across large, high-availability studio and enterprise estates.
Part of the Cablewise delivery team — the same standards and accountability across every engagement, so delivery never rests on a single person.
The engineers above are part of a hand-picked workforce of highly skilled Palo Alto Networks specialists spread across multiple time zones — so Cablewise scales to scope and keeps cover across the clock, without ever dropping standards.
Outside IR-35. Cablewise delivers a fixed-price contracted outcome — a Statement of Work with written acceptance criteria — not labour-hire. You receive a deliverable, not timesheets.
Change requests are priced within 48 hours at the agreed day-rate set in your SoW. You approve in writing before any work proceeds. The original fixed price is never silently inflated.
Every engagement has a named primary engineer and a named backup engineer at signature. Continuity is the company's problem, not yours.
Yes. OOH and weekend cutover windows are included in the fixed scope when the migration plan requires them — there is no separate OOH rate.
No. Hardware and licence procurement is pass-through at cost. You see the supplier invoice. We make our margin on engineering, not on box-shifting.
Net-30 on each milestone invoice. 50% is invoiced on signature of the Statement of Work; 50% on signed acceptance test. No payment is due until work has been formally signed off.
Professional Indemnity and Public Liability cover underwritten by Hiscox. Certificates of cover are provided on signature of the NDA — standard UK B2B procurement.
SC-cleared engineers are available on request for regulated or public-sector engagements. State the requirement at scoping and we'll confirm bench availability before SoW signature.
Book a 30-minute call. Bring your current vendor, site count and renewal date. You'll leave with a fixed price — or a clear reason the engagement isn't right for you.