The advent of Software-Defined Wide Area Networks (SD-WAN) has revolutionized the way enterprises connect their branch offices to the main data center. SD-WAN offers centralized management and configuration, cost savings, and faster connectivity compared to traditional WAN architectures.
History of SD-WAN
SD-WAN emerged as a technology in the early 2010s, when enterprises began to adopt cloud-based applications and services. The traditional WAN architectures, such as Multiprotocol Label Switching (MPLS), were not designed for the cloud and did not provide the flexibility and agility required for modern business needs. SD-WAN leverages the power of software to dynamically route traffic across multiple links, such as broadband, LTE, and MPLS, to provide optimal connectivity for cloud-based applications.
SD-WAN also offers centralized management and configuration, allowing enterprises to provision new sites and services quickly and easily. With SD-WAN, IT teams can monitor network performance and troubleshoot issues in real time, reducing downtime, and improving user experience.
Why SASE came about
As enterprises adopted cloud-based applications and services, the security perimeter began to dissolve. With traditional security models, enterprises relied on a secure perimeter around their data centers to protect their assets. However, with cloud-based applications, users could access enterprise resources from anywhere, making the perimeter less relevant.
Secure Access Service Edge (SASE) emerged as a new architecture to address the changing security landscape. SASE combines SD-WAN with security functions, such as a firewall, secure web gateway, and cloud access security broker, to provide secure access to cloud-based applications and services. SASE shifts the security perimeter from the data center to the user, providing security wherever the user is located.
When SASE was invented
Gartner coined the term SASE in 2019 in a research paper titled “The Future of Network Security in the Cloud Era.” The paper predicted that by 2024, 40% of enterprises would have adopted SASE as their primary networking and security architecture.
How SASE led to SSE
SASE has been a significant step forward in securing enterprise networks in the cloud era. However, as the threat landscape continued to evolve, a new architecture called Secure Service Edge (SSE) emerged. SSE builds upon the foundation of SASE but adds additional security functions, such as Zero Trust Network Access (ZTNA), Secure Web Gateway (SWG), and Data Loss Prevention (DLP), to provide comprehensive security for cloud-based applications and services.
SSE takes a risk-based approach to security, where access to applications and services is granted based on the user’s identity, device posture, and behavior. SSE leverages machine learning and artificial intelligence to detect anomalous behavior and respond to threats in real time, reducing the time to detect and respond to security incidents.
How SD-WAN and SSE make up a good SASE architecture
SD-WAN and SSE complement each other to provide a complete SASE architecture. SD-WAN provides the network connectivity and centralized management required for SASE, while SSE adds the security functions required for comprehensive security. A good SD-WAN and SSE platform should provide the following capabilities:
- Dynamic routing and centralized management for SD-WAN
- Zero Trust Network Access (ZTNA)
- Digital Experience Monitoring (DEM)
- Secure Web Gateway (SWG)
- Data Loss Prevention (DLP) for SSE
- Cloud Access Security Broker (CASB)
How SASE architecture helps with a Zero Trust strategy
Zero Trust is a security model that assumes no user, device, or network is trusted, and everything must be verified and authenticated before access is granted. SASE architecture is well suited for a Zero Trust strategy as it provides granular access control based on user identity, device posture, and behavior.
SASE architecture provides a unified platform for managing security policies across multiple devices, applications, and locations. It enables IT teams to enforce consistent security policies and controls across the enterprise, regardless of where the user is located.
SASE architecture also provides a holistic view of the enterprise’s security posture, allowing IT teams to identify and remediate security threats in real time. By leveraging machine learning and artificial intelligence, SASE architecture can detect anomalous behavior and respond to threats before they cause damage to the enterprise.
Conclusion
SD-WAN, SASE, and SSE are all significant milestones in the evolution of enterprise networking and security. SD-WAN provides the connectivity required for cloud-based applications and services, while SASE provides the security functions required to protect the enterprise from modern threats. SSE builds upon SASE by adding additional security functions and taking a risk-based approach to security.
A good SD-WAN and SSE platform can make up a good SASE architecture, providing comprehensive security and connectivity for cloud-based applications and services. SASE architecture is well suited for a Zero Trust strategy, providing granular access control and real-time threat detection and response. As the threat landscape continues to evolve, it is likely that SASE and SSE will continue to play a significant role in securing enterprise networks.
##
ABOUT THE AUTHOR
Jaye Tillson, Director of Strategy, Axis Security
Jaye is a technology leader with a proven track record in delivering global strategic and enterprise wide programmes totalling over $1billion. He provides technical advisory to global mergers and acquisitions across multiple countries and cultures, large scale global transformation programs, enterprise-wide cyber security governance, digital strategic planning, and the creation of operational efficiencies.
He has spent over 20+ years understanding the challenges of defining and implementing enterprise strategies and translating these into the design and deployment of enterprise-wide platforms and infrastructures. His expertise includes the globalisation of IT platforms to create cost and resource efficiencies, resilience, and improved information flow to support executive decision making.
Jaye has led multiple large strategic technology programmes and is a critical asset for the success of organisations undergoing global transformation. He has built and trained several globally reaching teams, capable of successful execution of strategic plans. He is currently responsible for the budget, costing, fiscal planning, cost reduction and global people management at a large technology manufacturing organisation.
He is recognised as a mentor and coach in his area of expertise and observes industry and market trends to ensure his technology recommendations fit the business strategy. He is a senior technical lead, is seen as the go-to person within the business for all technical questions and is seen as a role model in the organisation.
