SD-WAN Security includes both on-premises solutions such as next-general firewalls (NGFWs) for branch-heavy security, as well as the Secure Access Service Edge (SASE) for cloud-centric security. The most effective solution will combine elements of both as part of a managed service.