Software-Defined WAN (SD-WAN): SASE leverages SD-WAN technology to manage and optimize the connectivity between users, data centers, branch offices, and cloud services. SD-WAN provides the flexibility to use various transport mechanisms (e.g., MPLS, broadband, 4G/5G) and intelligently route traffic based on real-time conditions.
Cloud-Delivered Security: SASE integrates security services directly into the cloud, rather than relying on traditional data center-based security models. This could include a variety of security functions:
Secure Web Gateway (SWG): Protects users from web-based threats by filtering unsafe content and enforcing acceptable use policies.
Intrusion Prevention System (IPS): Monitors network traffic in real-time, analyzing packets for signs of malicious activity. It uses signature-based detection (matching patterns from a database of known threats) and anomaly-based detection (identifying unusual behavior that deviates from normal patterns) to identify potential threats.
Next-Generation Anti-Malware (NGAM): Detects, prevents, and responds to a wide range of sophisticated malware threats. Unlike traditional anti-malware solutions, which rely primarily on signature-based detection, it incorporates multiple advanced techniques to identify and mitigate both known and unknown (zero-day) threats.
Firewall as a Service (FWaaS): Delivers firewall capabilities as a cloud-based service, enabling consistent security policies across all network locations
Cloud Access Security Broker (CASB): Provides visibility and control over the use of cloud services, ensuring that data is protected as it moves between on-premises systems and cloud environments.
Data Loss Prevention (DLP): Protects sensitive information from being accessed, transmitted, or stolen inappropriately.
Zero Trust approach: Access is granted based on the identity of the user or device, rather than relying solely on network location. This means that every access request is authenticated, authorized, and continuously monitored, regardless of where the user or resource is located.
Global Edge Network: SASE solutions are typically delivered via a globally distributed network of points of presence (PoPs). This ensures that security and networking services are delivered as close as possible to the user, reducing latency and improving performance.