{"id":11376,"date":"2020-09-09T12:02:13","date_gmt":"2020-09-09T08:02:13","guid":{"rendered":"https:\/\/techxmedia.com\/?p=11376"},"modified":"2025-04-16T16:01:50","modified_gmt":"2025-04-16T12:01:50","slug":"sase-all-about-delivering-security-everywhere","status":"publish","type":"post","link":"https:\/\/techxmedia.com\/en\/sase-all-about-delivering-security-everywhere\/","title":{"rendered":"SASE is all about delivering security everywhere"},"content":{"rendered":"

By John Maddison, EVP of Products and CMO at Fortinet.<\/strong><\/p>\n

Secure Access Service Edge<\/a> (SASE) is an emerging enterprise strategy that incorporates multiple solutions to enable secure remote access to on-premises, cloud-based, and online resources. Unfortunately, there has been a lot of hype that has left some organizations wondering what exactly SASE is. Understanding the basic concepts and components of SASE is important, as the benefits can be significant for many organizations. Fortunately, getting to the bottom of this is easy, as many of the fundamentals of SASE \u2013 such as bringing networking and security together\u2013 are trends that customers have been gravitating to for years. However, it is still critical to properly define SASE upfront in order to avoid adding complexity or worse, missing the true value of SASE at all.<\/p>\n

Security Everywhere<\/strong><\/h4>\n

Today\u2019s organizations require immediate, uninterrupted access to the network and cloud-based resources and data, including business-critical applications, no matter where their users are located. The reality is that consumption patterns are changing due to the implementation of 5G, cloud migrations, sustained work from home, and similar outcomes from digital innovation efforts. This has transformed the traditional network to a network of many edges.<\/p>\n

At the same time, these dynamically changing network configurations, and the rapid expansion of the attack surface, means that many traditional security solutions no longer provide the level of protection and access control that organizations and users require. In this environment, security has to be delivered anywhere from any place, at any time, and for any device \u2013 the WAN Edge, Cloud Edge, DC Edge, Core Network Edge, Branch Edge, and Mobile Remote Worker Edge. This requires the convergence of traditional and cloud-based security, as well as deep integration between security and fundamental networking elements.<\/p>\n

Accurately Defining SASE<\/strong><\/h4>\n

SASE\u00a0is designed to help organizations secure these new distributed networks. However, as with any emerging technology category, there is still some uncertainty about what precisely a SASE solution means\u2014and what technologies are included. In addition, vendors are attempting to redefine this market in ways that best reflect their current offerings \u2013 which means that some elements are being overemphasized and others, often essential elements get overlooked. Unfortunately, some market definitions of SASE already include important omissions that are leaving some organizations confused about how to best select, implement, and manage the right sort of solution for their unique environments.<\/p>\n

Not Just Cloud<\/strong><\/h4>\n

SASE is generally classified as a\u00a0cloud<\/a>-delivered service, providing secure access to cloud-based resources, secure communications between remote users, and always-on security for devices off-premises. However, there are situations where organizations may require a combination of physical and cloud-based solutions for SASE to work effectively. This may include supporting a physical\u00a0SD-WAN<\/a>\u00a0solution in place that already contains a full stack of security, or the desire to provide protection at the edge when processing confidential or sensitive information rather than shuttling it out to the cloud for inspection.<\/p>\n

By combining physical and cloud-based elements, the role of SASE can also be easily extended deep into the network, rather than simply handing off security to an entirely different system at the edge. This ensures that a secure SASE connection is seamlessly integrated with critical solutions that also rely on hardware, such as network segmentation and compliance requirements that a strictly cloud-based security approach can\u2019t address, to provide end-to-end protection.<\/p>\n

Secure LAN and WAN<\/strong><\/h4>\n

Some\u00a0SASE definitions\u00a0also omit things like Secure LAN and Secure WLAN that are essential considerations for many organizations. Including these sorts of technologies in a SASE solution helps ensure that security is applied consistently across an entire security architecture, rather than deploying separate security components for their SASE deployment \u2013 which could create gaps in security policy enforcement and limit visibility.<\/p>\n

Flexible Consumption<\/strong><\/h4>\n

But regardless of which tools are used or where they are deployed, there is a central issue that needs to be remembered. Every SASE solution must not only meet the access needs of today, but also have the capability to quickly adapt to rapidly evolving network changes and business requirements as they occur. This explains a key criteria for SASE, which is flexible consumption models that give organizations choices depending on their unique use-cases in order to achieve the\u00a0true vision<\/em>\u00a0of SASE.<\/p>\n

Essential Security Elements Defined<\/strong><\/h4>\n

Any true SASE solution must include a core set of essential security elements. To realize the full potential of a SASE deployment, organizations must understand and implement these security components across the WAN-edge, LAN-edge, and Cloud-edge.<\/p>\n