network_stuff:sase
SASE (Secure Access Service Edge) ~ SD-WAN with security
Is a cloud-based model combining network security functions with WAN capabilities (like SD-WAN) to support dynamic secure access to organizational resources. It is ideal for businesses with dispersed workforces needing secure and efficient connections to applications, irrespective of user or resource location.
Key Aspects:
- Identity-driven: Policies based on user identity, dynamically adjusting access and security policies based on user, location, device health, and compliance.
- Cloud-native architecture: Integrates various security and network functions in a unified, cloud-delivered service model.
- Support for remote workers: Provides secure, fast access to cloud-based applications and services to users everywhere.
Examples of SASE Components:
- SD-WAN: Optimizes network traffic routing. As it is sd-wan it monitors the UX constantly, normally with endpoint agents.
- Firewall as a Service (FWaaS): Cloud-delivered firewall capabilities.
- Zero Trust Network Access (ZTNA): Implements least-privileged access controls.
- Secure Web Gateways (SWG): Filters unwanted software/malware from user-initiated web traffic.
- Cloud Access Security Broker (CASB): Extends security policies to cloud applications.
network_stuff/sase.txt · Last modified: by 127.0.0.1