What is SASE

What is SASE

In August 2019 published a report was published on new innovative technology related to Security, SASE, called Secure Access Service Edge. After the report, some of the vendors, like SD-WAN Vendors, Network Security vendors, and some others, by August 2020, started developing and selling SASE Services.

As there was no such standard and best practice available, vendors were not very consistent on what SASE should and cloud be.

SASE – Secure Access Service Edge is an offering that combines WAN capabilities, with integrated network security function like SWG (Secure Web gateways), FWaaS (FW as a Service), ZTNA ( Zero Trust network access ), CASB ( Cloud access Security brokers)  to support dynamic secure access need of dynamic enterprise.

SASE is a mostly cloud-based approach to secure WAN. Using SASE, A network perimeter has been extended to provide security anywhere a network user is located. SASE can be used to secure a single or isolated user by putting security agents on his/her device.

Some vendors like Palo Alto use ASW and GCP, and Zscaler provides SASE solutions more efficiently.

SASE is divided into two segments: Secure Access + Service Edge. Let’s talk about each one separately.

Secure Access: In this, Access privileges are enforced by policies based on user identities. Policies are based on the location the user or group’s traffic is coming from, the time of day, the risk/trust assessment of the user’s device, and the sensitivity of the application or data being accessed.

For Secure Access, secure web gateways (SWGs), cloud access security brokers (CASBs), firewalls, and zero-trust network access solutions are currently being used.

Service Edge:  In order to provide End-to-End Security like Threat prevention, encryption of all communications, firewalls, URL filtering, antimalware, and intrusion prevention systems (IPS). These all-security functions & capabilities have been integrated into all connected network edges across the globe.

SASE in a nutshell,

• It is a network Architecture that integrates WAN capabilities with cloud-native security functions.
• With SASE, Security Services and networking functions are run in the cloud or by a Security agent on the end user device.
• SASE uses a software stack in the cloud to run multiple security functions on data at once in multiple engines.

   

  You might also find these blog posts interesting:

  What is SASE
  Accessing Amazon S3 using AWS private Link in Secure hybrid method.
  Cisco Smart Licensing Policy

---