What is Secure Access Service Edge (SASE)?

What is Secure Access Service Edge?

Secure Access Service Edge (SASE) is a largely cloud-based security architecture that combines

Network connectivity (SD-WAN) simplifies and optimizes wide area networks
Secure Web Gateways (SWG): Protects against web-based threats.Cloud Access Security Brokers (CASB): Secures cloud applications and data.
Firewall as a Service (FWaaS): Provides network-level protection.
Zero Trust Network Access (ZTNA): Verifies user and device identity before granting access.

Why did Secure Access Service Edge emerge as a solution?

The emergence of SASE was driven by several key factors:

The Shift to Cloud: As organizations increasingly migrated their applications and data to the cloud, traditional network security models became inadequate.
The Remote Work Explosion: The rise of remote work created a distributed workforce, making it challenging to secure access to corporate resources.
Complex and Evolving Threat Landscape: Cyber threats have become more complex and targeted, demanding advanced security measures, and the speed at which new threats emerge requires more agile and adaptive security solutions.
Various inefficiencies of Traditional Network Security: first, managing multiple network and security vendors was costly and complex.Second, traditional security solutions often introduced latency and impacted user experience, especially in the face of factors 1 and 2 above. Finally, scaling network and security infrastructure to meet changing business needs w.as proving to be difficult for many organizations.
Need for Improved User Experience largely focused on two areas: first, consistent access, as users require secure and consistent access to applications and data from any location and second, network performance optimization, crucial for productivity and user satisfaction.

What is the origin of the expression, Secure Access Service Edge?

The term SASE was coined by Gartner analysts Neil McDonald and Joe Skorupa. It was introduced in a July 29, 2019, networking hype cycle and market trends report, and further elaborated in an August 30, 2019, Gartner report.

What are the main functional components of SASE?

SASE endeavors to combine network connectivity and security functions into a unified cloud-based platform. Its primary functions include:

Network Connectivity

SD-WAN (Software-Defined Wide Area Network)

Optimizes network traffic and provides flexible connectivity options.

Secure Web Gateway (SWG):

Acts as a checkpoint for all web traffic entering or leaving the network.
Filters malicious websites, malware, and phishing attempts.
Enforces web access control policies to restrict access to inappropriate or unproductive websites.

Read about Menlo Security SWG

Cloud Access Security Broker (CASB):

Provides visibility and control over cloud applications used by the organization.
Enforces security policies for cloud app usage, including data access and encryption.
Prevents data loss from cloud storage and applications.

Read about Menlo Security CASB

Zero Trust Network Access (ZTNA)¹:

Implements a "zero trust" approach, where no user or device is inherently trusted.
Grants access to resources based on continuous verification of user identity, device trust, and context.
Secures access to applications regardless of user location (office, home, etc.).

Read about Menlo Secure Application Access

Additional functions: SASE offerings on the market offer varying levels of

Unified management with centralized control over network and security policies
Visibility and analytics by providing insights into network traffic and security threats
Automation of routine tasks for improved efficiency
Orchestration and integration with other IT systems

Manage your browsers like the enterprise assets they are

What are the top two arguments in favor of deploying SASE?

Potentially enhanced security and regulatory compliance: Most SASE offerings provide some level of threat prevention, visibility, security controls and audit trails.
‍
Potentially better end user experiences, provided by the way that many SD-WAN offerings optimize network traffic leading to snappier application delivery as well as the possibility of simplified network access

What is the primary argument against deploying SASE?

The primary argument against deploying a SASE solution is the potential for vendor lock-in.While SASE offers many benefits, relying on a single vendor for both network connectivity and security functions can create dependencies. If the vendor's services fail or do not meet evolving needs, organizations may find it difficult to switch to another provider.
‍
Other concerns often raised include:

Implementation/deployment complexity: Implementing a SASE solution can be complex, especially for organizations with large and complex IT infrastructures.
Security Concerns: While SASE is designed to enhance security, your organization may raise concerns about the security posture of the SASE provider.
Cost: The total cost of ownership (TCO) of a SASE solution may be higher than traditional network and security solutions, especially in the short term.

Deciding between SASE or SSE? We can help!

Read about SSE

¹Sometimes referred to as Zero Trust Access