Billing for the commercial version of Secure Access Service Edge (SASE) is based on the private network and Internet access mitigation capabilities, log storage capacity, file storage capacity, and subscription duration that you select. This topic describes the pricing, billing methods, overdue payments, and renewal policies for SASE.
Version information
Private Access versions
Version | Business Scenarios | Specification Limits | Supported Access Points and VPC Networks | Key Features | Billing Dimensions |
Private Access (Basic) |
|
| Beijing, Shanghai, Shenzhen, Singapore, Hong Kong (China). |
| Billed based on the number of purchased licenses and the subscription duration. A minimum of 100 licenses is required. Note Multiple devices used by the same user account are counted as one license. |
Private Access (Advanced) |
|
| Beijing, Shanghai, Shenzhen, Silicon Valley, Virginia, Frankfurt, Singapore, Tokyo, Hong Kong (China), Dubai, Hangzhou, Jakarta. |
| Billed based on the number of purchased licenses and the subscription duration. A minimum of 100 licenses is required. Note Multiple devices used by the same user account are counted as one license. |
Internet Access versions
Edition | Business scenario | Specification limits | Core features | Billing dimension |
DLP | This edition combines the office security practices of Alibaba Group with the service architecture of Cloud DLP. It provides a lightweight solution for enterprise users to detect office data and monitor outbound sensitive data in real time. | Supports only enterprises that use Windows, macOS, or Cloud Desktop operating systems. |
| Billed based on the number of licenses and the subscription duration. A minimum of 100 licenses is required. Note Multiple devices under the same user account are counted as one license. |
Endpoint protection
Version | Business Scenarios | Specification limits | Key Features | Billing Dimensions |
Anti-virus Edition | Integrate with the Alibaba Cloud malicious file detection platform. Provide real-time file virus defense and real-time detection of security alert events. | Only support enterprises using Windows, macOS, and Wuying Cloud Desktop operating systems. | Support automatic scanning and killing, one-click scanning and killing, and real-time defense. Based on cloud and local scanning engines developed by the Alibaba Cloud security team, detect and kill common malicious programs such as backdoors, Trojans, hacking tools, ransomware, and worms. | Billed based on the number of purchased licenses and duration. A minimum of 100 licenses is required. Note One terminal is counted as one license. |
Billing method and items
SASE supports only the subscription (upfront) billing method. The subscription billing items are as follows:
Billing item | Description |
Private Access | Multiple terminals under the same user account are counted as one license.
Note For example, if you purchase 100 licenses for private network access security Basic or Advanced, the total number of user accounts registered by your enterprise cannot exceed 100. If the number of accounts exceeds 100, new accounts cannot register devices, but already registered devices are not affected. |
Internet Access | Only the DLP is supported. The fee is 4.5 USD/month/license. Note For example, if you purchase 100 licenses for Internet Access Security, the total number of user accounts within the scope of the Internet behavior management policy cannot exceed 100. If the number exceeds 100, you cannot create new Internet access security policies or add new effective scopes to existing Internet access security policies. |
File Storage | If you subscribe to the DLP, you can enable the File Storage to save your file information for more than 30 days. To enable the File Storage, you must set the File Storage. The fee is: USD 75 per TB/month. The minimum supported storage capacity is 1 TB. |
Log Storage | After you enable the log storage service, you must set Log Storage. The fee is USD 0.08 per month per GB. The minimum supported storage capacity is 500 GB. |
Duration | Select the subscription duration. Currently, supported subscription durations are 1 month, 2 months, 3 months, 4 months, 5 months, 6 months, 1 year, 2 years, and 3 years. |
Purchase service
Log on to your Alibaba Cloud account and go to the Secure Access Service EdgePurchase page.
Select the required configurations.
You must select at least one of the following services when you make a purchase: Private Access, Internet Access, or Terminal Protection.
Parameter
Description
Private Access
Private Access
Provides security protection for internal network access. Select Yes to purchase this service.
Edition
Select an edition based on your needs: Private Access (Basic) or Private Access (Advanced).
Account Quota
When the version is Private Access(Basic) or Private Access(Advanced), the License Count must be set to at least 100 and must be a multiple of 10.
Internet Access
Internet Access
Provides security protection for Internet access. Selecting Yes means that you purchase this service.
Source files that trigger a sensitive policy are retained by default for 30 days. To retain them for a longer period, we recommend that you purchase File Storage Service.
Account Quota
Account Quota must be set to at least 100.
File Storage
In the office data protection scenario, File Storage feature is used to store source files that match sensitive policies. Selecting Yes means purchasing this service.
File Storage Capacity
You can set this to 0 to 500 TB.
Terminal Protection
Terminal Protection
Provides real-time file virus defense and real-time detection capability for terminal security alert events. Selecting Yes purchases this service.
Terminal Quota
Terminal Quota must be set to at least 100.
Log Storage
Log Storage
SASE stores logs for the last 7 days by default. If you require a longer log retention period or need to meet compliance requirements, you can purchase the Log Storage.
Log Storage Capacity
Supports setting from 0 to 100000 GB.
Duration
Select the subscription duration and whether to auto-renew upon expiration.
NoteAfter you select auto-renewal, the Unified Auto Renewal Cycle is the same as the subscription duration. For example, if you purchase a 1-month SASE service and select auto-renewal upon expiration, SASE automatically renews for 1 month when the purchased service expires.
Click Buy Now and follow the on-screen instructions to complete the payment.
Overdue payments
Overdue payments will affect your use of SASE. You must monitor the and the Expenses and Costs console and resolve overdue payments promptly.
Service Expiration Status | Description |
7 days before expiration | The system notifies you to renew via text message, email, or internal message. If you do not renew promptly before the service expires, you cannot use the service the day after its expiration. |
Within 7 days after expiration | The system retains all your feature configurations and data in SASE. If you renew or repurchase the service within seven days after expiration, SASE will retain your current configurations and historical data. |
More than 7 days after expiration and not renewed | You cannot continue to use SASE. At this point, you must repurchase the service. If your subscription has expired for more than 7 days and you have not renewed or repurchased the service, SASE will purge your current configuration and historical data. |
Renewal policy
You must renew SASE before the subscription expires to avoid disrupting your Security Services. SASE supports two renewal methods: manual renewal and auto-renewal.
Manual renewal
Log on to the Secure Access Service Edge console.
In the upper-right corner of the Overview page, click Renew.
On the Renew page, set the Duration as required.
Read and select the Terms of service, then click Buy Now and follow the on-screen instructions to complete your order.
Auto-renewal
To prevent service disruptions, we recommend that you enable auto-renewal when you purchase the service.
The auto-renewal rules are as follows:
Charges begin nine days before the service expires, and SASE auto-renews. Maintain a sufficient account balance to ensure successful auto-renewal.
If auto-renewal fails on the day before the service expires, you must manually renew the service.
If you manually renew the service before the auto-renewal deduction date, the next deduction date is updated. SASE then auto-renews based on the new expiration date.
If you enable auto-renewal, the rules take effect the next day. You can use coupons for auto-renewals.
ImportantIf you request a refund after auto-renewal with a coupon, the coupon is not returned.
For more information, see the Auto-renewal Operations Guide.
Upgrade and downgrade
Change configuration description
Upgrade
The price difference for an upgrade is calculated as follows: (Cost of purchased Private Access version + Cost of purchased Internet Access Security version) × Number of licenses × Remaining validity period in days + Cost of new log storage capacity + Cost of new file storage capacity.
Downgrade
You can downgrade SASE only before the subscription expires. Downgrades are not supported for expired subscriptions. If your subscription has expired and you want to downgrade, you must first renew the subscription. Alternatively, you can purchase a new SASE instance with the required specifications after the current subscription expires.
ImportantDowngrades are irreversible and do not generate a refund. Proceed with caution.
Procedure
Log on to the Secure Access Service Edge console.
On the Overview page, in the upper-right corner, click .
On the Upgrade/Downgrade page, upgrade or downgrade the service as needed.
Read and select the Terms of service, then click Buy Now and follow the on-screen instructions to complete the order.
Refund policy
SASE supports unconditional refunds within 5 days of purchase. After 5 days, refunds are not supported.