SASE (Secure Access Service Edge) ~ SD-WAN with security
Is a cloud-based model combining network security functions with WAN capabilities (like SD-WAN) to support dynamic secure access to organizational resources. It is ideal for businesses with dispersed workforces needing secure and efficient connections to applications, irrespective of user or resource location.
Key Aspects:
Identity-driven: Policies based on user identity, dynamically adjusting access and security policies based on user, location, device health, and compliance.
Cloud-native architecture: Integrates various security and network functions in a unified, cloud-delivered service model.
Support for remote workers: Provides secure, fast access to cloud-based applications and services to users everywhere.
Examples of SASE Components:
SD-WAN: Optimizes network traffic routing. As it is sd-wan it monitors the UX constantly, normally with endpoint agents.
Firewall as a Service (FWaaS): Cloud-delivered firewall capabilities.
Zero Trust Network Access (ZTNA): Implements least-privileged access controls.
Secure Web Gateways (SWG): Filters unwanted software/malware from user-initiated web traffic.
Cloud Access Security Broker (CASB): Extends security policies to cloud applications.