SASE Solutions

Price and availability check

SASE: Security in the network

Modern security architecture for cloud and remote work

Employees work on the move, access applications from the cloud and expect secure connections without detours. Traditional security concepts with a central hub and spoke structure are reaching their limits.

This is exactly where SASE comes in.

Secure Access Service Edge moves the security functions directly to the edge of the network. This meets the requirements of users who work remotely or in the cloud. At the same time, modern WAN services merge with a comprehensive security concept.

To make this architecture work, many building blocks are combined in a single platform. The core components include SD-WAN and security services such as Secure Web Gateway, Firewall as a Service, Zero Trust Network Access, secure DNS and Cloud Access Security Broker. Together, they form a complete security stack for the hybrid working world.

Book a consultation

>20%
Savings

Learn more

99,99%
Availability

Learn more

24/7
Support

Contact

Awards for Outstanding Performance

Explained by experts: SASE

Advantages of SASE

Less complexity

Reducing complexity by simplifying administration and control

Improved access experience

Improved performance and seamless connections for your collaboration, regardless of location and device type

More control

Sophisticated monitoring provides deep insight into user security and the performance of corporate network services

Minimized security risks

Via SASE core functions such as Cloud Access Security Broker and Secure Web Gateway

Complete integration

Can be used as a central cloud-enabled security system that integrates the security and transparency of your cloud applications

Multi-cloud

SASE framework enables a multi-cloud strategy to be implemented quickly and provides a security model that protects your most important resources

Provider Overview

SASE: What models are available?

The various ways in which you too can rely on SASE in the future:

1

Cloud native SASE

With cloud-native SASE, all network and security services are provided via the cloud. The on-premise infrastructure is a small hardware device that is the link to the cloud instance. Some SASE providers also offer software clients that connect computers or IoT endpoints directly to the cloud.

✓ The advantage:

Even individual devices can be provided with network and security services at company level.

✖ The disadvantage:

As all security checks are carried out in the cloud, SASE leads to enormous network traffic in larger environments. This model is therefore better suited to distributed companies with a number of small units, i.e. branch offices or subsidiaries, e.g. insurance or retail companies.

2

Cloud-managed on-premise SASE

SASE can be managed from the cloud and all branches continue to use their own routers, unified threat management systems, firewalls and other security devices.

✓ The advantage:

As the security checks take place at a local level, performance increases in the extensive environment.

✖ The disadvantage:

Each branch must be equipped with appropriate hardware on site. However, a cloud-managed on-premise SASE can also protect your investment, as you can continue to use routers, firewalls and other devices if you have already purchased new ones.
This model is suitable for companies with up to thousands of employees in an environment, such as in the healthcare sector or those who prefer a do-it-yourself approach.

3

Managed SASE

SASE offers a number of advantages, but at the same time complicates the WAN. Network professionals are faced with many questions, e.g. how to roll out security functionalities or create user profiles. This expertise is not available internally to all companies.

With Managed SASE, a professional service provider configures and operates the network, which entails a certain loss of control. Some managed service providers (MSPs) now offer co-managed services. You can decide what is outsourced to the MSP and what is not. This option is recommended for companies that want a quick changeover and are willing to accept the potential loss of control.

4

Hybrid options

Many companies, especially large ones, will opt for a hybrid solution and choose a combination of cloud-native and on-premise SASE. For example, a global law firm with several locations in every country and thousands of employees.

For on-site offices, they use an on-premise security infrastructure and remote users are integrated via a cloud-native service.

Free Expert Consultation

Book now

The idea behind SASE and how it works

Technical sketch of SASE (Secure Access Service Edge): Company locations, home office and data center securely connected to the Internet via a central cloud.

Functionality

SASE (Secure Access Service Edge) is a cloud-based security concept that combines WAN services with security functions, whereby the security functions are moved to the edge of the network. This meets the security requirements of users working remotely and in the cloud. Previous, centralized security concepts in classic hub & spoke network structures are replaced by SASE.

To implement such an architecture, many individual elements must be merged into an integrated solution. The main components of SASE are the SD-WAN and security services such as the Secure Web Gateway (SWG), Firewall-as-a-Service (FWaaS), Zero Trust Network Access (ZTNA), secure DNS and Cloud Access Security Broker (CASB), which are all combined in a comprehensive security stack.

Rethinking security architecture

The basic idea behind SASE is that the center of the security architecture is no longer the company’s own data center. Companies use multiple data centers and a variety of cloud-based services and internet services.

The centrally definable security policies act locally at the network access point (edge) and the security guidelines relate to context and identities. The software-defined WAN infrastructure is flexible in terms of deployment and adaptation. Transmitted data can be prioritized according to its importance or urgency. Service and application access is always carried out via the provider’s cloud infrastructure.

Traffic is checked at the PoP (Point of Presence) and is routed either to the global SASE WAN or the Internet. In addition to identity-dependent access for users, zero-trust network access is also available for IoT devices.

Book a consultation