Predictika · SD-WAN and SASE subscription quotes

An AI sales agent's SD-WAN subscription quote, checked before it goes out

An AI sales agent prepares a quote for an SD-WAN subscription with a feature tier, a bandwidth tier, add-ons and a headend. Before it goes out, the agent sends it to Predictika, which checks it against a declarative model of the licensing rules and returns a verdict, every reason and the figures it computed.

Scope: Versa Secure SD-WAN subscription quotes (Prime SD-WAN, Prime Secure, Premier Secure and Premier Elite) with bandwidth tiers, add-ons, HA pairs and headend capacity. See everything this validator covers

This validator models Versa Secure SD-WAN subscription quotes, not just the scenarios shown below.

  • Tiers and bandwidth — the four feature tiers, the WAN bandwidth tiers from 10 Mbps to 100 Gbps, and subscription terms of 1, 3 or 5 years.
  • Add-ons — ZTNA, Identity Engine and XoT Fingerprinting need a secure tier; Data Protection and Cloud ATP Sandboxing need Premier Elite; Advanced Logging Service is sold in 1 TB increments.
  • Licenses and headend — every device, including each standby in an HA pair, needs its own license; stateful HA needs a tier with firewall capabilities; headend sizes are fixed lists for on-premises and hosted dedicated headends.

Any Versa Secure SD-WAN subscription quote that touches these rules is in scope — not only the scenarios pictured here. Not covered: prices (Versa does not publish list prices, so this validator produces no price build-up or line-item quote), the newer SASE and Titan packages, VANI and hosted shared bucket pricing. Assumptions: the rule that licenses may not exceed headend capacity is generic logic, and the 10 Gbps threshold for confirming bandwidth sizing is a guideline set by this model, not a Versa rule.

The AI sales agentBuilds the subscription quote from the conversation and says it is ready.
Predictika validatorChecks every rule at once and returns the verdict, each finding, and the computed figures.

7 scenarios in 3 groups · each group runs from the agent’s first attempt to the outcome · click one to switch

What the agent proposes

The AI sales agent says

Illustrative agent statement. The validator receives the structured request below.

Proposing agent: AI sales agent (scripted)

Before sending, the agent must call Recorded run

Predictika validator


      

        
        
        
      

      
Waiting for the call.

      
    

  

  
  

    
Where rules-based CPQ gets it wrong
Click to expand
    
Our assessment of what a typical rules-based CPQ (product rules, price rules and validation rules, as in Salesforce CPQ) does with the same cases. It is a judgment about effort and reliability, not a claim that nothing can be built.

    
What the validator caughtTypical rules-based CPQPredictika
License counts that must cover every device, including each standby in an HA pairOnly with care
The count depends on two quantities on different lines; a rule can compare them, but each new pairing option adds another rule to maintain.		Sites and HA sites travel in one request and the needed licenses are computed and compared on every call.
Add-ons that exist only on some tiersOnly with care
A product rule per add-on and tier. It works, but every new tier or add-on is another set of rules to maintain.		Tier and every add-on are in one request and every availability rule is checked together.
Stateful HA that needs a firewall tierOnly with workarounds
The requirement links the tier on one line with the HA setting on another, so it needs a cross-line rule that interacts with the others.		The tier and the HA sites are in one request and the requirement is checked with the rest.
Fixed lists of bandwidth tiers, terms and headend sizesOnly with workarounds
A value that is not on the list is usually caught only when the quote is saved or at the end, and different headend types have different lists.		Every value is checked against its list on every call, whatever order the choices arrive in.
Every problem returned in one answerOnly with workarounds
Rules tend to fire as the quote is saved or a step is completed, so a rep often fixes one error and meets the next.		All findings come back together, whatever order the choices arrived in.

  

  

    
What this validator catches: findings from its test cases
Click to expand
    
Every rule is checked on every call, in any order the choices arrive; one problem never hides another. Blocking findings stop the quote; approval findings need a person to sign off; everything else is computed.

    
1A WAN bandwidth of 75 Mbps is not an available tier; the tiers are 10, 25, 50, 100, 250 and 500 Mbps and 1, 2, 5, 10, 20, 50 and 100 Gbps.
2Subscription terms are 1, 3 or 5 years; the quote has 2 years.
3The on-premises ZTNA add-on is not available with the Prime SD-WAN tier.
4The Identity Engine add-on is not available with the Prime SD-WAN tier.
5The XoT Fingerprinting add-on is not available with the Prime SD-WAN tier.
6The Data Protection add-on is available only with the Premier Elite tier.
7The Cloud ATP Sandboxing add-on is available only with the Premier Elite tier.
8Stateful HA needs a tier with next-generation firewall or UTM capabilities; Prime SD-WAN does not include it.
96 sites are in an active-standby pair but the quote has only 4 sites.
10The quote has 40 CPE licenses; 45 are needed, because every device including each standby needs its own license.
11A headend capacity of 500 CPEs is not an available size for this headend type.
12The quote has 300 CPE licenses; the selected headend supports 250 CPEs.
13Advanced Logging Service is sold in 1 TB increments; the quote has 0 TB.
142 TB of logging is quoted without the Advanced Logging Service add-on.
15The bandwidth tier is set from the 95th percentile of monthly usage; a person should confirm the sizing for 10,000 Mbps.

  

  

    
Scenarios and results
Click to expand
    
The recorded result of the validator for each scenario on this page: the request the AI agent sent, the verdict, and every finding, in the order they appear above.

    
1. Tier, add-ons and HA: Prime SD-WAN quote with ZTNA, HA sites and an unavailable bandwidth tier

    
The agent's request. Please quote the Prime SD-WAN tier for 40 sites at 75 Mbps of WAN bandwidth each on a 3-year subscription, with 5 of the sites in an active-standby HA pair, with 40 CPE licenses and the on-premises ZTNA add-on, on an on-premises headend sized for 1,000 CPEs. It is ready to send.

    
Verdict: Blocked.

    
    
      
  • Bandwidth is not an available tier. A WAN bandwidth of 75 Mbps is not an available tier; the tiers are 10, 25, 50, 100, 250 and 500 Mbps and 1, 2, 5, 10, 20, 50 and 100 Gbps.
    • 
      
  • ZTNA not available on Prime SD-WAN. The on-premises ZTNA add-on is not available with the Prime SD-WAN tier.
    • 
      
  • Stateful HA needs a firewall tier. Stateful HA needs a tier with next-generation firewall or UTM capabilities; Prime SD-WAN does not include it.
    • 
      
  • Not enough CPE licenses. The quote has 40 CPE licenses; 45 are needed, because every device including each standby needs its own license.
    • 
    

    
2. Tier, add-ons and HA: The agent resubmits after fixing the errors

    
The agent's request. Please quote the Prime Secure tier for 40 sites at 100 Mbps of WAN bandwidth each on a 3-year subscription, with 5 of the sites in an active-standby HA pair, with 45 CPE licenses and the on-premises ZTNA add-on, on an on-premises headend sized for 1,000 CPEs. It is ready to send.

    
Verdict: Allowed.

    
    
      
  • Order summary. 40 site(s), 45 CPE license(s) needed, 100 Mbps of WAN bandwidth per device.
    • 
    

    
3. Term, headend and Data Protection: Two-year term, an undersized headend and Data Protection on Premier Secure

    
The agent's request. Please quote the Premier Secure tier for 300 sites at 10 Gbps of WAN bandwidth each on a 2-year subscription, with 300 CPE licenses and the Data Protection add-on, on an on-premises headend sized for 250 CPEs. It is ready to send.

    
Verdict: Blocked.

    
    
      
  • Subscription term not available. Subscription terms are 1, 3 or 5 years; the quote has 2 years.
    • 
      
  • Data Protection needs Premier Elite. The Data Protection add-on is available only with the Premier Elite tier.
    • 
      
  • Headend smaller than the licensed devices. The quote has 300 CPE licenses; the selected headend supports 250 CPEs.
    • 
      
  • Large bandwidth tier to confirm. The bandwidth tier is set from the 95th percentile of monthly usage; a person should confirm the sizing for 10,000 Mbps.
    • 
    

    
4. Term, headend and Data Protection: The agent resubmits after fixing the errors

    
The agent's request. Please quote the Premier Elite tier for 300 sites at 10 Gbps of WAN bandwidth each on a 3-year subscription, with 300 CPE licenses and the Data Protection add-on, on an on-premises headend sized for 1,000 CPEs. It is ready to send.

    
Verdict: Needs approval.

    
    
      
  • Large bandwidth tier to confirm. The bandwidth tier is set from the 95th percentile of monthly usage; a person should confirm the sizing for 10,000 Mbps.
    • 
      
  • Order summary. 300 site(s), 300 CPE license(s) needed, 10000 Mbps of WAN bandwidth per device.
    • 
    

    
5. Term, headend and Data Protection: The agent resubmits after fixing the errors

    
The agent's request. Please quote the Premier Elite tier for 300 sites at 5 Gbps of WAN bandwidth each on a 3-year subscription, with 300 CPE licenses and the Data Protection add-on, on an on-premises headend sized for 1,000 CPEs. It is ready to send.

    
Verdict: Allowed.

    
    
      
  • Order summary. 300 site(s), 300 CPE license(s) needed, 5000 Mbps of WAN bandwidth per device.
    • 
    

    
6. Advanced Logging Service: Logging add-on quoted with no capacity

    
The agent's request. Please quote the Prime Secure tier for 20 sites at 500 Mbps of WAN bandwidth each on a 3-year subscription, with 20 CPE licenses and the Advanced Logging Service add-on, on a hosted dedicated headend sized for 500 CPEs, with 0 TB of logging. It is ready to send.

    
Verdict: Blocked.

    
    
      
  • Logging sold in 1 TB increments. Advanced Logging Service is sold in 1 TB increments; the quote has 0 TB.
    • 
    

    
7. Advanced Logging Service: The agent resubmits after fixing the errors

    
The agent's request. Please quote the Prime Secure tier for 20 sites at 500 Mbps of WAN bandwidth each on a 3-year subscription, with 20 CPE licenses and the Advanced Logging Service add-on, on a hosted dedicated headend sized for 500 CPEs, with 2 TB of logging. It is ready to send.

    
Verdict: Allowed.

    
    
      
  • Order summary. 20 site(s), 20 CPE license(s) needed, 500 Mbps of WAN bandwidth per device.
    • 
    

  

  

    
Narration transcript
Click to expand
    
The text of the narrated walkthrough, step by step.

    
    
      
  1. Welcome to a demo of Predictika's Validator. An AI sales agent prepares a quote for an SD-WAN subscription with a feature tier, a bandwidth tier, add-ons and a headend. Before it goes out, the agent sends it to Predictika, which checks it against a declarative model of the licensing rules and returns a verdict, every reason and the figures it computed.
    2. 
      
  2. I will start with the first request by the agent.
    3. 
      
  3. The agent says. Please quote the Prime SD-WAN tier for 40 sites at 75 Mbps of WAN bandwidth each on a 3-year subscription. It is ready to send. The rest of the request is on screen.
    4. 
      
  4. Before it goes out, the agent calls the validator.
    5. 
      
  5. Blocked, with four findings, all in one answer. A WAN bandwidth of 75 Mbps is not an available tier; the tiers are 10, 25, 50, 100, 250 and 500 Mbps and 1, 2, 5, 10, 20, 50 and 100 Gbps. The on-premises ZTNA add-on is not available with the Prime SD-WAN tier. Stateful HA needs a tier with next-generation firewall or UTM capabilities; Prime SD-WAN does not include it. The other one is on screen.
    6. 
      
  6. The validator returned four blocking findings in one answer. A check that reads one field at a time would pass most of this; it shows only when the choices in the quote are checked against each other.
    7. 
      
  7. What this shows: for stateful HA that needs a firewall tier, a rules-based CPQ can do this only with workarounds.
    8. 
      
  8. Now the agent resubmits.
    9. 
      
  9. The corrected request. It changes the tier to Prime Secure, the WAN bandwidth per device to 100 Mbps and the CPE licenses on the quote to 45.
    10. 
      
  10. It calls the validator again.
    11. 
      
  11. This time the validator clears it.
    12. 
      
  12. All four earlier findings are cleared.
    13. 
      
  13. Four problems caught in one call, fixed in one pass, and a clean quote. That is the value of Predictika's validator: catching mistakes before they reach the customer. Now you can try the other scenarios yourself.
    14.