What is sase?
Definitions
SASE = Secure Access Service Edge (pronounced “sassy”)
CASB = Cloud Access Security Broker
SWG = Secure Web Gateway
ZTNA = Zero Trust Network Access
FWaaS = Firewall as a Service
Every few years a service becomes the hot new trend that dominates the industry. These trends consume the news cycle and vendors sprint to update their marketing material. One of the emerging solutions that you’ve likely heard of is SASE, which stands for Secure Access Service Edge. SASE piggybacks off of the trend that’s dominated the headlines for the past decade – SD-WAN. Chances are you’re familiar with SD-WAN (if you’re not be on the lookout for a review that covers this technology) and the benefits that it brings your organization. Gartner estimates that SD-WAN will grow by nearly $10 billion from 2021 to 2026.
In 2019 Gartner’s report, The Future of Network Security Is in the Cloud, predicted that 40% of businesses will have a strategy to adopt SASE by 2024. Gartner could not have predicted the pandemic, which accelerated cloud adoption and remote workforces. SASE has arrived as a viable option to reduce your risk, while reducing complexity.
What is SASE?
In short, SASE is a new evolution that bundles network and security-as-a-service. This wraps a nice package around SD-WAN, CASB, SWG, ZTNA and FWaaS as core service offerings. Effectively this allows you to extend network and security functionality to all users, regardless of location, proximity to your datacenter, or the applications they utilize to accomplish their job.
Traditionally traffic would be scrubbed inside the perimeter or routed back to your corporate headquarters, where all traffic would be scrubbed by your firewall. SASE allows this traffic to be scrubbed in the cloud, without the need to route back to a single location. Simply, the inspection and policy enforcement moves to the edge where the users live. Layering in SASE with SD-WAN reduces latency, which grants you improved network performance and distributed inspection. The security subscriptions that you utilize are delivered from the cloud and reduces your dependency on singular hardware vendors.
Benefits of SASE
Security, like most things in IT, is moving to the cloud. This security-as-a-service model allows you to scale your security tools in a flexible, convenient manner. Did I mention it’s cost effective? Rather than procuring additional tools and appliances, you simply add licenses as needed.
Single management console for network and security tools. Centralized orchestration!
Reduce your telecom expenses by removing MPLS, which is pricey. A DIA connection, with diverse and redundant backup connections, is sufficient.
Traditional businesses staffed large offices, which aligned with the model of all traffic riding over a corporate network. Today’s businesses are challenged with a a dispersed workforce and SASE offers a viable solution to protecting these end users. It’s simply impossible to supply all resources with adequate hardware solutions.
In Conclusion
Be prepared for continued evolution in this space. SASE is very new. The term was coined by Gartner in 2019. You can expect further development, consolidation and mergers in this market. SASE will look very different in 5-10 years as it has time to mature.
As you select vendors to service your needs, you’ll want to consider their roadmap and how they intend to integrate services. I strongly recommend short-term contracts (36 months or less) so you’re not stuck with an outdated model, since this market is young.
If you're considering a migration to SD-WAN or SASE, let's talk about your requirements!
Y'all be good,
DB