In the area of computer security, the term “SASE” (Secure Access Service Edge) is the latest buzzword. Gartner has invented the acronym SASE, which they identify as one of the most promising new technologies in corporate networking.

We know everyone is talking about it, but …

Where Did SASE Come from?

Organizations must evaluate both the increasing advantages and disadvantages that come with hybrid workers, which are employees who work both remotely and in an office. They use their own devices to access apps and data on the web, in the cloud, and private data centers from a variety of places.

According to International Data Corporation (IDC), the US workforce will be 60% remote by 2024. So, we need to get prepared! SASE intends to do just that.

SASE solutions are cloud-based tools that integrate WAN and network security into a unified management system to assure safe access to network resources for a distributed network of end-users. Regardless of a user’s location, a SASE solution would be able to properly identify persons and devices over the WAN and safely give access based on corporate security policies.

COVID-19, combined with the shift from branch offices and corporate data centers to remote working and cloud usage, has been a stimulus for SASE. This new method of working is compelling businesses to consider both boosting network access and securing all networked resources, whether they are company-issued or brought in by employees.

To understand SASE’s huge momentum, let’s take a look at the factors SASE is founded on.

Factors SASE is Founded on

Identity

SASE revolves around the concept of identity. SASE’s policy-driven access is built on the foundation of the user, group, and device identification. However, SASE rules may go even further by considering not just a user’s identification, but also the circumstances around that identity when making a policy decision. This context might include things like the device’s location, security posture, or even the time of day an access attempt is made.

These considerations can aid in the development and evolution of least privileged access enforcement at the network level in SASE designs. This micro-segmentation of the network, also known as Zero Trust network access (ZTNA), is based on a user’s identification and then applies a policy-based judgment to the request. Since there is no implicit confidence in the network or the user, every access request is automatically rejected until identity-based authentication is performed.

Cloud-Native Architecture

Nowadays, with people working from all over the world, security and networking must constantly go hand in hand. The cloud is the only method to safeguard consumers at scale without sacrificing speed. The only way to offer high-performance security and networking everywhere is to combine security and networking into a true cloud service with a single-pass, cloud-native design. That is what SASE does.

Globally Dispersed

The SASE cloud must be globally dispersed to guarantee that all networking and security capabilities are available everywhere and that all edges receive the best possible experience. As a result, according to Gartner, they will need to increase their footprint to provide a low-latency service to business edges.

What Has Changed with SASE?

Gartner’s SASE model has developed as a comprehensive framework for enabling secure and rapid cloud transition, based on a set of dynamic edge security and connectivity capabilities that can be accessed from the cloud as required.

Secure-access service edges can be dynamically built with SASE, independent of where the organizations seeking the capabilities are located or how they want access to the networked capabilities. On the security front, SASE’s convergent offering combines data protection and threat management into a single solution. The convergent service is built on a low-latency, ubiquitous footprint that keeps the user close by no matter where they are.

This gives businesses a security solution that is more comprehensive and adaptable than ever before. If you’ve decided to give SASE a try, you should be looking into some SASE providers. However, not all SASE providers are made equal, and here’s how IT decision-makers may weigh their alternatives and choose the best match.

SASE Checklist – What to Look for in a SASE Provider

Is the Solution Cloud-Based?

A cloud-based strategy is necessary to achieve the full benefits of SASE. Identity is at the heart of SASE, and this strategy should be applied to all network edges, including on-premises, mobile, and cloud. This need can easily be met with a converged cloud-native software stack.

Will the Vendor’s Network Performance be Ideal on a Worldwide Scale?

SASE does not require a worldwide network backbone, but the end-user must be able to have the best experience possible no matter where they are. This is why each vendor’s number of PoPs (points of presence) is important. The user should not have to connect from a different point of presence than where they are to get the optimum performance.

Does the Vendor Provide ZTNA (Zero Trust Network Access)?

The Forrester Zero Trust security architecture, which takes a “never trust, always verify” approach to security, is the foundation for Zero Trust network access (ZTNA). Before allowing access to permitted apps, ZTNA checks user identities and develops device trust, assisting enterprises in preventing unwanted access, containing breaches, and limiting an attacker’s lateral movement on their network. Zero Trust is one of the essential features of SASE, and the ideal vendor should include it.

Last words

SASE is a cloud-based platform that integrates networking and security services into a single platform. You can consider consolidating to a full SASE solution as your company expands and adds additional security solutions to the mix.

You should strive for the most integrated solution possible, one that is cloud-based and has open integration possibilities. All endpoints would benefit from lower costs, reduced complexity, and more secure access in a SASE solution.

There are well-known and high-quality SASE vendors out there you can surely benefit from. One of the best SASE vendors is NordLayer, and you can take a look at what they have to offer here: https://nordlayer.com/sase/