SASE

What is SASE?

SASE (Secure Access Service Edge, pronounced “sassy”) is a network architecture defined by Gartner in 2019 that combines networking and security functions in a single, integrated cloud-delivered platform. SASE replaces the traditional model where remote user traffic is tunnelled via VPN to headquarters for security inspection.

SASE integrates five key components. SD-WAN - intelligent traffic management across the wide area network. CASB - cloud application access control. SWG (Secure Web Gateway) - internet traffic filtering. ZTNA (Zero Trust Network Access) - application access on a zero trust basis, replacing traditional VPN. FWaaS (Firewall as a Service) - cloud-delivered firewall.

The SASE model responds to changing work patterns - a user may work from the office, home or a cafe, and applications may be hosted in a data centre, public cloud or with a SaaS provider. SASE ensures that security policies are enforced regardless of user and application location.

Why does it matter?

Traditional network architecture, where all traffic flows through headquarters, does not work in a world of hybrid work and cloud applications. SASE eliminates the need for costly VPN concentrators, simplifies security architecture and ensures consistent policies for all users. For organisations planning a network transformation, SASE is a strategic direction worth evaluating.

Related topics

• CASB
• Zero Trust
• DLP