SECURE ACCESS SERVICE EDGE - SSE/SASE(CLOUD)
- 1. SECURITY SERVICE EDGE (SSE / SASE) Secure connectivity that’s ready for anything
- 2. EVOLUTION OF WFH & MOBILE WORKFORCE • Story / Experience / Questions • WFH has changed to WFAnywhere
- 3. YESTERDAY
- 4. TODAY
- 5. APPLICATIONS EXTERNAL APPS (SAAS & WEB) INTERNAL APPS (DATA CENTER / IAAS) WORK FROM ANYWHERE, HQ AND BRANCH CASB FW SWG SSL VPN DLP Sand box Anti- Malware Email SSPM CSPM IPS SD-WAN RBI SD-WAN VPN Direct Legacy Designs may not work in the Future USERS BYOD, THIRD PARTY
- 6. Public Clouds Data Centres Remote workers VPN Client WEBSITES PRIVATE APPS Secure Web Gateway SSL DLP Threat Protect EUBA CLOUD APPS Branch Office SSL SWG DLP Threat EUBA ZTNA VPN concentrator HOW SASE CHANGES IT SECURITY API’s SASE
- 7. Remote Workers Mobile Devices BYOD Devices HQ Global PoP Network WWW Internet MPLS Internet Internet Internet Internet CONNECTIVITY MATTERS NETWORK PEERING INFLUENCES USER EXPERIENCE
- 8. APP TRUST SHOULD THE APP BE TRUSTED? INSTANCE TRUST SHOULD THE INSTANCE BE ALLOWED? ACTIVITY TRUST SHOULD THE ACTIVITY BE ALLOWED? BEHAVIOR TRUST SHOULD THE BEHAVIOR ALLOWED? DATA TRUST SHOULD THE DATA BE ALLOWED? LOCATION TRUST SHOULD THE LOCATION BE TRUSTED? SHOULD THE DEVICE BE TRUSTED? DEVICE TRUST IJACSBU AOLOLSU LOLATOT ACIHFWT KHYE WHAT ACTION SHOULD RESPOND SASE ZERO TRUST PROVIDING THE ABILITY TO MAKE RISK-BASED DECISIONS ACROSS ALL PARTS OF EVERY TRANSACTION
- 9. 10 CRITICAL USE CASES ALL WITHIN ONE CENTRALIZED PLATFORM & MANAGEMENT CONSOLE Protect Against Advanced Threats Stop threats before they get to the endpoint ‣ Sandboxing & Browser Isolation ‣ Cloud IPS ‣ Insider Threats ‣ Phishing & Ransomware ‣ Risk Score & Intel Sharing 1 2 3 Control Access & Coach Users Provide risk-based Conditional Access with user warnings 4 Zero Trust Network Access (ZTNA) Provide access to internal apps without exposing your perimeter 5 Control Sensitive Data Propagation Understand the context of user actions in relation to your data Download Share Send 6 Secure Internet Breakouts, & WAN Orchestration Orchestrate your WAN; secure your internet breakouts 7 Track SaaS & IaaS Standards Compliance Continuous assessment of your IaaS environments & SaaS apps 8 Digital Experience Management (DEM) End-to-end performance monitoring to ID & triage issues 9 Integrate with & Facilitate Intel Sharing b/w Vendors Ensure your vendor ecosystem works together 10 Nathan User Risk Rating: ↓893/1000 GDrive (Personal) App Risk Rating: 93/100 Visibility & Control Over Shadow IT Control usage & risk across SaaS, IaaS, and Private Apps Bulk Upload STOP! You are trying to UPLOAD files to Dropbox. Click HERE to go to OneDrive, or enter a justification below to proceed to Dropbox. View Only Isolate Provide Secure Access to BYOD & 3rd Parties Real-time security & access controls in a clientless manner Managed Devices Only Poor Performance! Why? Where is the issue?
- 10. KEY TAKEAWAYS Consolidate Vendors Shrink the Attack Surface Move Away from Hardware-based Security Stop Backhauling Traffic – Go Direct to Net Reduce Complexity Replace Legacy VPN Improve the Employee Experience Implement a Zero Trust Architecture Find Cost Savings