The commercial edition of Secure Access Service Edge (SASE) is billed based on your selected internal network access security capabilities, Internet access security capabilities, log storage capacity, file storage capacity, and subscription duration. This topic describes the billable items, billing methods, overdue payments, and renewal policies for SASE.
Version information
Private access security editions
Edition | Business scenarios | Specifications | Supported endpoints and VPCs | Core features | Billing method |
Private Access (Basic) |
|
| Beijing, Shanghai, Shenzhen, Silicon Valley, Virginia, Frankfurt, Singapore, Tokyo, China (Hong Kong), and Dubai. |
| Billed based on the number of licenses and the subscription duration. A minimum of 100 licenses is required. Note Multiple devices that belong to the same user account are counted as one license. |
Private Access (Advanced) |
|
| Beijing, Shanghai, Shenzhen, Silicon Valley, Virginia, Frankfurt, Singapore, Tokyo, China (Hong Kong), and Dubai. |
| Billed based on the number of licenses and the subscription duration. A minimum of 100 licenses is required. Note Multiple devices that belong to the same user account are counted as one license. |
Internet access security edition
Edition | Business scenario | Specification limits | Core features | Billing dimension |
DLP | This edition combines the office security practices of Alibaba Group with the service architecture of Cloud DLP. It provides a lightweight solution for enterprise users to detect office data and monitor outbound sensitive data in real time. | Supports only enterprises that use Windows, macOS, or Cloud Desktop operating systems. |
| Billed based on the number of licenses and the subscription duration. A minimum of 100 licenses is required. Note Multiple devices under the same user account are counted as one license. |
Terminal Protection
Edition | Scenarios | Specifications and limits | Core features | Billing dimensions |
Antivirus | Integrates with the Alibaba Cloud malicious file detection platform to provide real-time file virus protection and real-time detection of endpoint security alert events. | Supports only enterprises that use Windows, macOS, or Cloud Desktop operating systems. | Supports automatic scanning, one-click scanning, and real-time protection. Based on the cloud and local scanning engines developed by the Alibaba Cloud security team, this edition can detect and purge common malicious programs, such as back doors, Trojan horses, hacking tools, ransomware, and worms. | Billed based on the number of authorizations and the subscription duration. The minimum number of authorizations is 100. Note Multiple devices under the same user account are counted as one authorization. |
Billing methods and billable items
SASE supports only the subscription (upfront) billing method. The following table describes the billable items.
Billable item | Description |
Private Access | Multiple devices under the same user account are counted as one license. The fees vary by edition. The details are as follows:
Note For example, if you purchase 100 licenses for the Private Access Basic or Advanced, your enterprise can have a maximum of 100 registered user accounts. If the number of accounts exceeds 100, new devices cannot be registered. Registered devices are not affected. |
Internet Access | Currently, only the DLP is supported. The fee is USD 4.5/month/license. Note For example, if you purchase 100 licenses for Internet Access, the total number of user accounts to which the Internet access management policy applies cannot exceed 100. If the number exceeds 100, you cannot create new Internet Access security policies or add new scopes to existing ones. |
File Storage Service | If you enable the DLP, you can enable the File Storage Service to save file information for more than 30 days. When you enable the File Storage Service, you must set the File Storage Capacity. The fee is USD 75/month/TB. The minimum storage capacity is 1 TB. |
Log Storage Service | After you enable the Log Storage Service, you must set the Log Storage Capacity. The fee is USD 0.08/month/GB. The minimum storage capacity is 500 GB. |
Subscription Duration | Select a subscription duration. The supported subscription durations are 1 month, 2 months, 3 months, 4 months, 5 months, 6 months, 1 year, 2 years, and 3 years. |
Purchase the service
Log on to your Alibaba Cloud account and go to the Secure Access Service Edge purchase page.
Select the configurations based on your requirements.
When you purchase the service, you must select at least one of the following: Private Access, Internet Access, or Terminal Protection.
Configuration item
Description
Private Access
Private Access
Provides security protection for internal network access. Select Yes to purchase this service.
Edition
Select an edition as needed: Private Access (Basic), or Private Access (Advanced).
Account Quota
If the version is Private Access (Basic) or Private Access (Advanced), the Account Quota must be set to at least 100 and be a multiple of 10.
Internet Access
Internet Access
Provides security protection for Internet access. Select Yes to purchase this service.
Source files that hit sensitive data policies are saved for 30 days by default. To save the files for a longer period, purchase the File Storage.
Account Quota
Account Quota must be set to at least 100.
File Storage
In office data protection scenarios, the File Storage is used to save source files that hit sensitive data policies. Select Yes to purchase this service.
File Storage Capacity
You can set this parameter to a value from 0 to 500 TB.
Terminal Protection
Terminal Protection
Provides real-time file virus protection and real-time detection of endpoint security alert events. Select Yes to purchase this service.
Terminal Quota
Terminal Quota must be set to at least 100.
Log Storage
Log Storage
By default, SASE stores logs from the last 7 days. To store logs for a longer period or meet compliance requirements, purchase the Log Storage.
Log Storage Capacity
You can set this parameter to a value from 0 to 100,000 GB.
Duration
Select a subscription duration and specify whether to enable auto-renewal upon expiration.
NoteIf you enable auto-renewal, the renewal cycle is the same as the subscription duration. For example, if you purchase a one-month subscription for SASE and enable auto-renewal, SASE automatically renews the service for one month upon expiration.
Click Buy Now and follow the on-screen instructions to complete the payment.
Overdue payments
Overdue payments will affect your use of SASE. Monitor the Expenses and Costs console and settle overdue payments promptly.
Service expiration status | Description |
7 days before expiration | The system notifies you to renew the service using text messages, emails, or internal messages. If you do not renew the service before it expires, you can no longer use the service on the day after the expiration date. |
Within 7 days after expiration | The system retains all your configurations and data in SASE. If you renew or repurchase the service within 7 days after it expires, SASE retains your current configurations and historical data. |
More than 7 days after expiration without renewal | You can no longer use SASE. You must repurchase the service. If you do not renew or repurchase the service more than 7 days after it expires, SASE purges your current configurations and historical data. |
Renewal policy
Renew your SASE subscription before it expires to avoid service interruptions. SASE supports manual renewal and monthly auto-renewal.
Manual renewal
Log on to the Secure Access Service Edge console.
In the upper-right corner of the Overview page, click Renew.
On the Renew page, you can set the Duration as needed.
Read and accept the Terms of service, click Buy Now, and then follow the on-screen instructions to complete the order.
Auto-renewal
To avoid service interruptions, we recommend that you enable auto-renewal when you make your first purchase.
The following rules apply to auto-renewal:
The payment for the auto-renewal of SASE is deducted 9 days before the service expires. Ensure that your account has a sufficient balance to ensure a successful payment and auto-renewal.
If the auto-renewal fails on the day before the expiration date, you must manually renew the service.
If you manually renew the service before the auto-renewal payment is deducted, the auto-renewal date is postponed. SASE will then perform the auto-renewal based on the new expiration date.
If you enable auto-renewal, the renewal rules take effect the next day. You can use coupons for auto-renewal.
ImportantIf you use a coupon for auto-renewal and then request a refund, the coupon is not returned.
For more information, see Auto-renewal management.
Upgrades and downgrades
Upgrade and downgrade rules
Upgrade
The price difference for an upgrade is calculated using the following formula: (Fee for the Private Access edition + Fee for the Internet Access edition) × Number of authorizations × Remaining days in the validity period + Fee for the added log storage capacity + Fee for the added file storage capacity.
Downgrade
You can downgrade your SASE subscription only before it expires. If your subscription has expired and you want to downgrade, you must first renew the service and then perform the downgrade. Alternatively, you can purchase a new subscription with the desired configuration after your current subscription expires.
ImportantNo refund is provided for a downgrade. You cannot revert a downgrade. Proceed with caution.
Procedure
Log on to the Secure Access Service Edge console.
In the upper-right corner of the Overview page, click .
On the Upgrade/Downgrade page, you can upgrade or downgrade the service.
Read and select the Terms of service, click Buy Now, and follow the on-screen instructions to complete the order.
Refund policy
SASE supports unconditional refunds within 5 days of purchase. Refunds are not supported after 5 days.