SASE brings together critical network security capabilities in a unified solution. These capabilities or building blocks include the following security solution components:u003cbr/u003eu003cbr/u003eu003cstrongu003eSD-WANu003c/strongu003e - Software Defined WAN delivers a centralized traffic management and optimization capability to manage any combination of underlying networks such as MPLS, LTE or broadband connectivity.u003cbr/u003eu003cbr/u003eu003cstrongu003eSWGu003c/strongu003e - Secure Web Gateways allow enterprises to offer employees secure access to the web based on security policies.u003cbr/u003eu003cbr/u003eu003cstrongu003eCASBu003c/strongu003e - Cloud Access Service Brokers offer granular control on how SaaS or cloud applications are accessed from any device. With CASB, enterprises can define what data can be uploaded or downloaded from the cloud and have better control over shadow IT.u003cbr/u003eu003cbr/u003eu003cstrongu003eFWaaSu003c/strongu003e - Firewall as a service is an evolution of the Next Generation Firewall (NGFW) to secure traffic that’s moving away from private networks to the cloud. FWaaS includes features such as packet filtering, network monitoring, Internet Protocol security (IPsec), secure sockets layer virtual private network (SSL VPN) support, Internet Protocol (IP) mapping features and malware detection.u003cbr/u003eu003cbr/u003eu003cstrongu003eZTNAu003c/strongu003e - Zero Trust Network Access (ZTNA) offers enterprises the ability to granularly control access to specific applications or resources. Access is granted to an application or service only for “trusted” users and, unlike a VPN, access to all other services are blocked by default. u003cbr/u003e