SASE commercial edition is billed by subscription based on the services, license count, storage capacity, and duration you select. This topic covers pricing, billing items, how to purchase, overdue payment handling, renewal, configuration changes, and refunds.
Billing method
SASE uses the subscription (upfront) billing method only. Pay-as-you-go is not supported.
Supported durations: 1 month, 2 months, 3 months, 4 months, 5 months, 6 months, 1 year, 2 years, or 3 years.
When you purchase, select at least one of the following services: Private Access, Internet Access, or Terminal Protection.
Pricing
Private Access
Private Access secures employee access to internal applications and resources hosted on Alibaba Cloud, in other clouds, or in data centers.
| Edition | Target scale | Access points | Key capabilities | Price |
|---|---|---|---|---|
| Private Access (Basic) | 100–500 employees | Beijing, Shanghai, Shenzhen, Singapore, Hong Kong (China) | Identity authentication (Windows AD/LDAP, DingTalk, Lark); two-factor authentication (SMS, email CAPTCHA, OTP) | USD 5.5 / license / month |
| Private Access (Advanced) | 500+ employees | Beijing, Shanghai, Shenzhen, Hangzhou, Singapore, Tokyo, Hong Kong (China), Silicon Valley, Virginia, Frankfurt, Dubai, Jakarta | All Basic capabilities, plus EAP-TLS office network access and global acceleration for overseas employees (WeCom also supported) | USD 7.5 / license / month |
Specification limits:
| Basic | Advanced | |
|---|---|---|
| Minimum licenses | 100 | 100 |
| Max VPC connections | 5 | 10 |
| Max connectors | 5 | 10 |
| Office bandwidth | At least 1 Mbps per license (e.g., 200 licenses = 200 Mbps minimum) | At least 1 Mbps per license (e.g., 500 licenses = 500 Mbps minimum) |
Multiple devices under the same user account count as one license. License count must be a minimum of 100 and a multiple of 10.
Internet Access
Internet Access provides data loss prevention (DLP) for outbound office data. It detects sensitive files sent through instant messaging apps (WeChat, WeCom, DingTalk, QQ), email, and browsers, and controls peripherals such as USB, Bluetooth, and AirDrop.
Supported operating systems: Windows, macOS, and Wuying Cloud Desktop.
| Edition | Price |
|---|---|
| DLP | USD 4.5 / license / month |
Minimum 100 licenses required. Multiple devices under the same user account count as one license.
Basic: Costs USD 5.5 per month per authorization.
Advanced: costs USD 7.5 per month per license.
Source files that trigger a sensitive policy are retained for 30 days by default. To extend the retention period, purchase File StorageUSD 0.08USD 75.
Terminal Protection
Terminal Protection integrates with the Alibaba Cloud malicious file detection platform to provide real-time virus defense and security alert detection.
Supported operating systems: Windows, macOS, and Wuying Cloud Desktop.
| Edition | Price |
|---|---|
| Anti-virus Edition | Billed by license count and subscription duration |
Minimum 100 licenses required. Each terminal counts as one license.
Add-on services
| Service | Price | Minimum | Notes |
|---|---|---|---|
| File Storage | USD 75 / TB / month | 1 TB | Stores source files matching sensitive DLP policies for more than 30 days. Available only when Internet Access (DLP) is active. |
| Log Storage | USD 0.08 / GB / month | 500 GB | Extends the default 7-day log retention. Supports up to 100,000 GB. |
Purchase SASE
Log on to your Alibaba Cloud account and go to the SASE purchase page.
Configure the services you need:
Parameter Description Private Access Select Yes to include Private Access. Then select Basic or Advanced and set the License Count (minimum 100, multiple of 10). Internet Access Select Yes to include Internet Access (DLP). Set the Account Quota (minimum 100). Optionally purchase File Storage and set the File Storage Capacity (0–500 TB). Terminal Protection Select Yes to include Terminal Protection (Anti-virus Edition). Set the Terminal Quota (minimum 100). Log Storage Select Yes to extend log retention beyond 7 days. Set the Log Storage Capacity (0–100,000 GB). Duration Select the subscription duration. Enable auto-renewal if needed — the auto-renewal cycle matches the subscription duration. Click Buy Now and follow the on-screen instructions to complete payment.
Overdue payments
Monitor your account balance in the Expenses and Costs console to avoid service interruptions.
Before expiration
| Timing | What happens |
|---|---|
| 7 days before expiration | SASE sends a renewal reminder via SMS, email, and internal message. |
After expiration
| Timing | What happens |
|---|---|
| Within 7 days after expiration | SASE retains all configurations and data. Renew or repurchase within this window to resume service without data loss. |
| More than 7 days after expiration | SASE permanently purges your configurations and historical data. You must repurchase to use the service again. |
Renewal
Renew before the subscription expires to avoid service interruption. SASE supports manual and auto-renewal.
Manual renewal
Log on to the SASE console.
In the upper-right corner of the Overview page, click Renew.
On the Renew page, set the Duration.
Read and agree to the Terms of service, then click Buy Now and complete the order.
Auto-renewal
Enable auto-renewal when you purchase to prevent service gaps.
Auto-renewal rules:
SASE attempts to charge your account 9 days before the service expires. Keep a sufficient account balance to ensure successful renewal.
If auto-renewal fails on the day before expiration, manually renew the service.
If you manually renew before the auto-renewal deduction date, SASE updates the next deduction date to match the new expiration date.
Auto-renewal rules take effect the day after you enable them. Coupons can be applied to auto-renewals.
If you request a refund after auto-renewal with a coupon, the coupon is not returned.
For details, see the Auto-renewal operations guide.
Change configuration
Upgrade
Upgrading increases your edition, license count, or storage capacity. The additional charge is calculated as follows:
(Unit price of new Private Access edition + Unit price of new Internet Access edition) × Number of licenses × Remaining days + Additional log storage cost + Additional file storage cost
Example: You currently have Private Access (Basic) with 200 licenses and 60 days remaining. You upgrade to Private Access (Advanced).
| Item | Calculation | Amount |
|---|---|---|
| Private Access upgrade | (USD 7.5 − USD 5.5) × 200 licenses × 60 days ÷ 30 | USD 800 |
Downgrade
Downgrading reduces your edition, license count, or storage capacity.
Downgrades are irreversible and do not generate a refund. Proceed with caution.
Downgrades are only supported on active subscriptions. If the subscription has already expired, renew it first, or purchase a new instance with the required specifications after expiration.
Upgrade or downgrade procedure
Log on to the SASE console.
On the Overview page, click Change > Upgrade Now in the upper-right corner.
On the Upgrade/Downgrade page, adjust the configuration as needed.
Read and agree to the Terms of service, then click Buy Now and complete the order.
Refund policy
SASE supports unconditional refunds within 5 days of purchase. After 5 days, refunds are not supported.