Secure Access Service Edge (SASE)

Secure Access Service Edge (SASE, pronounced "sassy") is a cloud-delivered architecture that converges networking and security services into a single, integrated platform. Coined by Gartner in 2019, SASE addresses the security challenges of distributed workforces and cloud-first businesses.

SASE components:

• SD-WAN: Software-defined wide area networking for optimised connectivity
• SWG (Secure Web Gateway): Protects users from web-based threats
• CASB (Cloud Access Security Broker): Security for cloud application usage
• ZTNA (Zero Trust Network Access): Identity-based application access (replaces VPN)
• FWaaS (Firewall as a Service): Cloud-delivered firewall protection
• DLP: Data loss prevention across cloud and web channels
• DNS Security: Protective DNS filtering

SASE benefits:

• Simplified architecture: Single platform replaces multiple point products
• Consistent security: Same policies applied regardless of user location
• Improved performance: Traffic optimisation with local cloud points of presence
• Reduced complexity: Fewer vendors, consoles, and integration challenges
• Cloud-native scalability: Scales with business needs without hardware upgrades
• Support for remote work: Secure access from any location on any device

SASE adoption considerations:

• Evaluate current architecture and identify what SASE would replace
• Choose between single-vendor and best-of-breed approaches
• Plan a phased migration (typically 12-24 months)
• Consider integration with existing identity providers
• Assess performance impact on latency-sensitive applications
• Review data residency and sovereignty requirements for Australian data