Another week in the cybersecurity world… and another buzzword.
Although hardly new—it’s been around since 2019—SASE has become the talk of the town over the last year or so. Competing for attention with other critical concepts like Zero Trust (the two share some characteristics, as we’ll see later), SASE is still poorly understood by many organisations.
This article will cover everything you need to know about SASE: what it is, the problems it’s designed to solve, and what benefits it could provide for your organisation.
Today’s organisations face a very different set of networking and security challenges to those faced just a few years ago. It’s easy to blame everything on COVID-19, but in reality, the pandemic simply accelerated some pre-existing trends—most notably, increases in:
These trends have created huge challenges for organisations, both in terms of how users access the applications and services they need and protecting users, assets, and data from cyberattacks.
Very simply, traditional networking architecture is no longer fit for purpose. If a user outside the corporate network perimeter needs to access an application or service that is also outside the corporate network perimeter, it doesn’t make much sense to route that request back via the network. This legacy approach creates challenges for service availability, user performance, and productivity—not to mention security—and needs replacement.
This is where SASE comes in.
SASE stands for Secure Access Service Edge—a term defined by Gartner in a 2019 report to define a security framework where security and network connectivity technologies converge into a single cloud-delivered platform. The SASE framework details how organisations can more effectively deploy and consume networking and security services to address the challenges above.
A SASE architecture focuses on the identity of the user, device or service behind a connection rather than its location of origin. This means—unlike in a traditional network architecture—a connection won’t be trusted purely because it originates from inside the network perimeter. Instead, a SASE architecture identifies users, devices, and service, applies policy-based security and delivers secure access to the target application or data.
This approach enables secure access no matter where the connection’s source (e.g., a user) or destination (e.g., a cloud application) are located.
SASE focuses on three key areas:
Critically, the SASE framework focuses on a consumption-based and cloud-delivered approach to these three areas.
SASE is the convergence of Software-Defined Wide Area Networking (SD-WAN) with select network security technologies. Some of the most commonly included technologies include:
Based on Gartner’s definition, SASE should be delivered by a single vendor via a cloud service model. In practice, it is possible to implement SASE using a multi-vendor model.
Gartner certainly thinks so.
According to the analyst’s most recent publication on the topic:
And while there could be an element of protectiveness in Gartner’s forecasts—it was a Gartner analyst who coined the term, after all—the general feeling in the cybersecurity industry is that SASE addresses a real problem and is likely to see plenty of uptake over the next few years.
SASE can provide a host of benefits, including:
The short answer is that the term Zero Trust was coined by Forrester, while Gartner coined SASE. However, don’t be fooled into thinking the two are the same thing.
Where Zero Trust is an overall security strategy intended to address the needs and challenges of modern organisations, SASE is a prescriptive approach to delivering something akin to Zero Trust for the cloud component of an organisation’s environment.
Zero Trust is a set of principles, not a specific solution or set of solutions. On the other hand, SASE specifically relates to several networking and security technologies and how they can be deployed in the cloud (often by a single provider).
There are, however, two objectives that link Zero Trust and SASE:
ZTNA is a core component of SASE, which is perhaps where some of the confusion started to arise. However, as we’ve said before, ZTNA does not equal Zero Trust—no single solution possibly can—it’s simply a common component of modern Zero Trust network architectures.
Very simply, SASE can help an organisation deliver Zero Trust principles for a subsection of its IT assets—specifically, those hosted in the cloud.
For the right organisation, SASE has a lot to offer. However, the journey to adopt SASE can seem daunting, particularly if you’re starting from scratch with a legacy network architecture. Fortunately, SASE can be phased into your business at your pace, without the need for a “rip and replace” approach. If you’re interested in SASE but aren’t sure if it’s the right way forward for your organisation, we can help. Get in touch today to discuss your needs with one of our experts.