Cloud 9 Advisers - News #NGFWCloud 9 Advisers - News #NGFWhttps://www.cloud9advisers.com/News/tag/ngfwSat, 28 Feb 2026 13:45:44 -0800http://zoho.com/sites/<![CDATA[SD-WAN and SASE]]>https://www.cloud9advisers.com/News/post/sd-wan-and-sase

SDWAN & SASE: The Essential Guide to Converging Connectivity and Cloud Security

Beyond Buzzwords: What SDWAN and SASE Really Mean for the Modern Enterprise Network

Cloud-first operations demand a new network model. Understanding the roles of Software-Defined Wide Area Networking (SDWAN) and Secure Access Service Edge (SASE) is the first step toward building a truly resilient and secure edge.

SASE and SDWAN represent the necessary convergence of security (the perimeter) and networking (the pathway) in the age of cloud and hybrid work.

Beyond Buzzwords: What SDWAN and SASE Really Mean for the Modern Enterprise Network

For many IT leaders, the networking and security landscape over the past few years has felt like an endless alphabet soup. Two acronyms, in particular, have dominated strategic conversations: SDWAN and SASE.


Both are frequently discussed in the context of modernization, cloud migration, and supporting the hybrid workforce. This has led to widespread confusion, with many vendors incorrectly presenting them as competing solutions, or worse, claiming that one automatically includes the other without proper implementation.


At Cloud 9 Advisers, we act as pragmatic, expert advisers to help you cut through this noise. Simply put: SDWAN optimizes the network; SASE secures the edge. They are not competing technologies, but essential components that, when unified correctly, form the foundation of a modern, secure, and resilient network.

Understanding their individual roles is the first step to making the right strategic investment.


Part 1: Demystifying SDWAN (Software-Defined Wide Area Network)

SDWAN is fundamentally a revolutionary approach to Wide Area Networking (WAN). Traditionally, WANs relied on complex hardware—specific routers, expensive leased lines (like MPLS), and manual configurations—to connect separate locations.


SDWAN separates the control plane (the intelligence of the network) from the data plane (the physical connections). By shifting control to software, it gains two critical advantages: intelligence and flexibility.


The SDWAN appliance at each location becomes application-aware, meaning it knows the difference between a voice packet, an email, or a large file download. This intelligence is then used to optimize traffic flow in real time across any combination of underlying links (fiber, broadband, 4G/5G, etc.).


The Pragmatic Benefits of SDWAN

While SDWAN was originally designed to connect multiple locations effectively, it offers distinct and significant benefits even for companies with a single location:

Audience

Primary Problem Solved

Core SDWAN Benefit

Single Location

Internet instability, QoS issues for real-time apps, reliance on expensive single circuits.

Reliability & Efficiency: It aggregates multiple, low-cost internet links into a unified connection. It uses that power to ensure mission-critical applications (like UCaaS or a cloud ERP system) always have the bandwidth they need, while less critical traffic is given lower priority. It provides a more robust, stable connection than any single circuit ever could.

Multiple Locations

High cost of traditional WAN (MPLS), complex management, and traffic backhauling for security.

Virtual Network & Cost Reduction: This is the original design intent. It creates a seamless, virtual network that spans multiple physical locations, making management centralized and simple. Critically, it allows companies to swap expensive MPLS with low-cost broadband, reducing ongoing network costs while improving agility and allowing for dynamic, automated routing around outages or congestion.


SDWAN’s value is in resilience and performance. It is the key to providing the high-quality, low-latency connectivity required for the sensitive, real-time applications we discussed in our last article on Call Survivability.


Part 2: Demystifying SASE (Secure Access Service Edge)

If SDWAN is the intelligent highway, then SASE (Secure Access Service Edge) is the integrated, cloud-native security perimeter applied to that highway's entrance and exit ramps.


SASE is an architectural framework, not a single product. It was introduced to address the reality that the traditional network perimeter—the firewall in your server room—is obsolete. Users now access corporate data from home, coffee shops, and client sites using personal devices, reaching applications hosted in multiple clouds.


The goal of SASE is simple: Secure and reliable access to corporate resources from any location, without sacrificing user experience or performance.


A comprehensive, robust SASE solution is built upon the convergence of several key security and networking components, all delivered via a single, cloud-based platform. If a vendor is missing even one of these components, they are selling a partial, non-SASE solution.


The Five Essential Components of a True SASE Platform

A good SASE solution brings together the following technologies into a unified stack:

  1. Secure Web Gateway (SWG): Provides secure, cloud-based internet access. It acts as the first line of defense, blocking malicious websites, filtering URLs, and applying advanced malware detection before traffic even reaches the user’s device or the corporate network.

  2. Cloud Access Security Broker (CASB): The CASB provides critical visibility and control over cloud applications (SaaS). It monitors user activity within apps like Microsoft 365, Salesforce, and Dropbox, enforces security policies, and prevents data leakage by encrypting sensitive data both in transit and at rest.

  3. Firewall-as-a-Service (FWaaS): This replaces the traditional physical, on-premise firewall. FWaaS is a cloud-native security layer that controls access to corporate resources and blocks unauthorized traffic, applying consistent security policies to users regardless of their location.

  4. Zero Trust Network Access (ZTNA): This is the modern replacement for traditional VPNs. ZTNA is critical because it never grants blanket access to the entire network. Instead, it operates on a principle of "never trust, always verify," granting users access only to the specific applications they need, only after identity verification, and only from a compliant device. This hides corporate resources from the public internet entirely.

  5. Identity and Access Management (IAM): An integral part of the Zero Trust model. IAM provides the centralized control over user identities, authentication (often multi-factor, or MFA), and authorization. It is the engine that validates who a user is and what they are allowed to access, enforcing policy consistently across the entire SASE stack.


And finally, the often-misunderstood component:

  • Software-Defined Wide Area Networking (SDWAN): A true SASE architecture includes SDWAN functionality. The networking side of SASE is responsible for optimizing the transport layer—selecting the best path for traffic based on business requirements and dynamically routing it across various links (broadband, 5G, private connections). It ensures the high-performance delivery of traffic to and from the secure SASE cloud edge.


SDWAN + SASE: The Convergence Strategy

The modern B2B enterprise is defined by dispersed data, dispersed users, and dispersed applications. The only way to manage this complexity effectively is through convergence.


The strategic relationship can be summarized simply:

  • SDWAN is the foundation of high-performance connectivity. It delivers the path optimization, quality of service (QoS), and resilience (call survivability) that your business demands.

  • SASE is the strategic security framework. It delivers the identity-centric access control (ZTNA), threat prevention (SWG, FWaaS), and data protection (CASB) that your business requires, regardless of where the user is located.


By consolidating these functions into a unified, cloud-based platform—the core tenet of SASE—businesses gain:

  1. Simplified Management: Moving from managing six different boxes (router, firewall, VPN concentrator, web filter, etc.) to managing one policy stack in the cloud.

  2. Consistent Security: Every user, no matter where they are or how they connect, gets the exact same security inspection and policy enforcement.

  3. Cost Efficiency: Reducing hardware footprints and maintenance costs, leveraging lower-cost internet links, and consolidating vendor contracts.

  4. Agility: The network scales instantly to accommodate mergers, acquisitions, or sudden shifts to remote work, without needing to deploy physical hardware.


Simplifying the Strategic Choice

The choice between SDWAN and SASE is a false one; the correct answer is a converged solution.


However, the vendor landscape is complex, with providers offering partial solutions that may excel at the "SDWAN" part but provide poor, bolt-on security, or vice versa. The strategic challenge is identifying the partner that can deliver a truly unified SASE platform—one where the networking and security components are built to work together seamlessly, eliminating gaps and preserving performance.


Don’t get stuck in the alphabet soup of acronyms. Focus on the required outcomes: resilient performance and secure access from anywhere.


At Cloud 9 Advisers, we help technology leaders sift through the noise, evaluate the true integration level of SASE vendors, and select the platform that meets the specific demands of their single or multi-location business model.

KITS: Keep IT Simple.


Learn more about SASE
Learn more about SDWAN

Get Started Now
]]>Thu, 15 Jun 2023 09:40:58 -0500<![CDATA[Case Study: Nonprofit]]>https://www.cloud9advisers.com/News/post/case-study-nonprofit

Nonprofit needed unstoppable Internet and Security

Nonprofit office expansion needed strong security and bulletproof internet. Cloud 9 saved the day!
A long-time Nonprofit client of Cloud 9 Advisers was looking for a budget-conscious solution to improve connectivity as they added new locations across the country and to correct problematic reoccurring outages and “brownouts” they’d been having with their high-speed broadband cable provider. With a handful of critical applications and a lean IT staff, they needed a solution that would streamline their network management and generally improve security. While they had your typical set of security solutions, it was aging and they found themselves managing more than they’d like and didn’t have the staff or the skillset to manage a complex security solution. While they hadn’t had any security incidents, they decided up-to-date services made sense but didn’t want to spend any more than they had in the past. A new and modern managed security solution would be a “nice-to-have” if it fit the budget.


Dual Bandwidth connections


With their two current locations and two more coming on board along the East Coast, they wanted to ensure each site had solid, reliable internet connectivity especially considering their recent experiences. They’d been pushing more apps to the cloud, especially communications and collaboration tools so a high-quality connection was important at each site, but they wanted to avoid the higher costs of Direct Internet Access (DIA) Fiber circuits, if possible. Plus they still had a few highly proprietary database servers running at their headquarters in the Washington, DC area with off-site cloud backups. 


They got lucky at the original two locations, their two largest, and the winning provider was able to find both broadband cable and broadband fiber. The two new locations were going to be smaller satellite locations, so broadband cable and a cheap strong secondary connection were chosen. One site had cable and DSL, the other site had cable and a 4G LTE mobile data-only device. 


Secure Access Service Edge (SASE)


Cloud 9 vendor-neutral engineers realized that dual bandwidth connected to a solid SD-WAN solution would address the customer connectivity requirements by providing rock-solid, bulletproof connectivity (to the point were even if a connection dropped during a VoIP call, the call would stay active) and be able to fully control video and call quality. We also want to address their security "nice-to-haves" as well. 


A real and proper SDWAN solution is arguably the best option for any video and VoIP communication apps, and considerably improved VPN performance.


The customer-selected winning provider included a Secure Access Service Edge (SASE, pronounced sassy)  platform that combined all the benefits of a top SD-WAN, plus was able to replace the customer’s entire security stack and even endpoint protection agents. SASE improves security, boosts network performance, and reduces the number of vendors and devices businesses and IT have to deal with. The winning provider's SASE (security) solution had five key ingredients: SDWAN, Zero-Trust Network Access (ZTNA), Cloud Access Security Broker (CASB), Next-Gen Firewall (NGFW), and Secure Web Gateway (SWG) for devices--and all cloud-based.


As an added and unforeseen bonus especially during the pandemic shutdowns, the SASE solution was able to allow all end-users and devices to authenticate and gain secure access to all the resources both cloud and on-premise, that they are authorized to reach protected by security, located close to them. Once authenticated, the end-users had direct access to those resources, rather than having to be routed to a central location via traditional firewall and VPN. This dramatically reduced latency issues for all users working from home. 


As the Cloud 9 engineering team dug deeper into solutions options the project ballooned and the customer realized they would be able to cover far more than they had originally expected. 

Cloud 9 was able to present and introduce the customer to four top service providers that were able to provide and manage all the internet circuits, even though they we from several different carriers, a far superior security stack with the SASE platform, and fully manage and support  the entire solution. All things considered there was only a minor increase in the total new solution price compared to what the customer was previously spending. However, even better, the customer had originally planned on a 35% increase due to the fact that they knew they wanted dual connections, assumed DIA fiber would be required, and had planned on replacing some of their original security appliances and software. The customer was absolutely thrilled with the entire experience.

About Cloud 9 Advisers

Cloud 9 Advisers helps business leaders make IT buying decisions quickly and confidently. Whether you need impartial advice on the best new tech, or assistance with a project outside your wheelhouse, we have expertise in four critical segments: Cybersecurity, Communications, Connectivity, and Cloud. We work with you to identify, research, evaluate, and compare appropriate solutions and vendors; eliminating months of labor trying to do it on your own.

Get Started Now
]]>Thu, 01 Apr 2021 19:47:36 -0500<![CDATA[Supplier Spotlight: Nitel]]>https://www.cloud9advisers.com/News/post/supplier-spotlight-Nitel

Nitel: Managed Next-Generation Security

By: Nitel USA, see the article here https://www.nitelusa.com/blog/explore-4-levels-of-security-testing/

Cloud 9 Supplier Spotlight:  NITEL

Explore Four Levels of Security Testing

With cloud, big data and mobile solutions becoming mission-critical to organizations of all sizes, IT teams are struggling to keep up with the adoption and innovation of the latest security best practices, leaving their organizations vulnerable to cybercriminals. And it’s not just large organizations cybercriminals are targeting; smaller companies are just as likely to be attacked. They tend to be easier targets, more likely to pay up in the case of a ransomware attack. They can also serve as a back door into other third-party organizations they do business with.


Although managed security is an investment, many organizations simply cannot afford to not conduct on-going security testing. According to a recent Trustwave security report, 41% of those surveyed feared financial damage to their company in the event of a cyberattack or data breach.


Managed security testing is defined as subscription-based proactive scanning and testing of environment security to identify vulnerabilities. However, a comprehensive managed security solution does more than identify vulnerabilities and weak points.


When working with a qualified managed security provider an organization should not only gain insight into weaknesses, but gain a blueprint on how to prioritize, mitigate and remediate these risks. When your customer engages with a provider of managed security services like Nitel, backed by a cybersecurity Gartner Magic Quadrant Leader Trustwave, they can choose to engage with four levels of testing depending on their budget and business needs, including:
    • Basic threat – Simulates the most common attacks executed in the wild today. This class of attacker typically uses freely-available, automated attack tools.
    • Opportunistic threat – Builds upon the basic threat and simulates an opportunistic attack executed by a skilled attacker that does not spend an extensive amount of time executing highly sophisticated attacks. This type of attacker seeks easy targets (”low-hanging fruit”) and will use a mix of automated tools and manual exploitation to penetrate their targets.
    • Targeted threat – Simulates a targeted attack executed by a skilled, patient attacker that has targeted a specific organization. This class of attacker will expend significant resources and effort trying to compromise an organization’s systems.
    • Advanced threat – Simulates an advanced attack executed by a highly motivated, well-funded and extremely sophisticated attacker who will exhaust all options for compromise before relenting.
Cloud 9 Advisers clientele benefit from Nitel/Trustwave’s crowd-sourced, global threat intelligence through a solution that is scoped to fit their needs. Nitel's intrinsic network knowledge, combined with Trustwave’s highly skilled SpiderLab ethical hacker team, can quickly identify security weak points and guide you to a solution to protect your organization.

Managed Next-Gen Security Solutions

What keps business and IT leaders up at night?
For business leaders everywhere, a data breach is on par with the most damaging things that could happen to an organization. The thought of being the next company to make headlines keeps leaders up at night while IT organizations fight to keep the bad guys out. As threats become increasingly widespread, sophisticated and dangerous, companies look to develop security strategies that protect their environment while staying within budgets that seem to get tighter every year.

Your business is unique, with its own set of needs and priorities. That’s why we offer a suite of security solutions that offers multiple ways for you to protect your business. Whether your business is big or small, whether you value distributed architecture or centralized, you’ll find a solution that fits how you prefer to manage your environment.

ENTERPRISE GRADE PROTECTION

  • Safely enable applications, users and content by classifying all traffic, determining the business use case, and assigning policies to allow and protect access to relevant applications.
  • Prevent threats by eliminating unwanted applications to reduce your threat footprint and apply targeted security policies to block known vulnerability exploits, viruses, spyware, botnets and unknown malware (APTs).
  • Protect your datacenters through the validation of applications, isolation of data, control over rogue applications and high-speed threat prevention.
  • Secure public and private cloud computing environments with increased visibility and control; deploy, enforce and maintain security policies at the same pace as your virtual machines.
  • Embrace safe mobile computing by extending the enterprise security platform to users and devices no matter where they are located.

ROCK SOLID PROTECTION FOR SMB

Our customized solutions deliver next-generation security for every size and type of business. Gain full control and visibility of application traffic passing through your network, even for encrypted traffic, thanks to application detection, user-identity awareness, SSL interception and built-in live reporting.


You benefit from the same critical next-generation security features that large enterprises receive—but sized appropriately for your business. Your business will fend off threats with included next-gen features that take place directly in the data path, including:
  • Firewalling
  • Intrusion Detection and Prevention (IDS/IPS)
  • URL Filtering
  • Dual Antivirus
  • Application Control
SECURITY EXPERTISE ON YOUR SIDE

Nitel has partnered with Gartner Magic Quadrant leader Trustwave to complement our managed next-generation firewall service with a suite of security management services. This 1–2 punch creates a comprehensive managed security solution to reduce your business risk and give you peace of mind. With Nitel overseeing your network health, performance and security, you have a single partner working on your behalf to ensure your business operates optimally and safely.

SECURITY INFORMATIONEVENT MANAGEMENT

Achieve more effective identification and mitigation of security threats. You’ll reduce your burden with around-the-clock support from 10 global security operations centers staffed with experts who have in-depth knowledge and experience working with complex network environments for highly distributed organizations.


Our SIEM service collects, analyzes and stores logs from networks, hosts and critical applications. It extends visibility beyond the network perimeter to the application layer, helping you achieve more effective identification and mitigation of security threats, and compliance validation with numerous regulatory and industry standards.


Advantages:
  • SpiderLabs security research utilizing global event data to identify current and emerging threats
  • Industry-leading compliance expertise
  • Solutions tailored to the specific needs of healthcare, financial, retail and more
  • Collects and reviews over 1 billion events per day

Need to maintain compliance with PCI, DDS, HIPAA, SOX, FISMA, GLBA/FFIEC? Let Nitel help. We’ll help you fulfill your requirements for vulnerability scanning, penetration testing and ongoing evaluation of your environments and applications.

MANAGED SECURITY TESTING

Reveal potential vulnerabilities in your environment with thorough penetration testing. Expert “ethical hackers,” armed with the same techniques as today’s cybercriminals, attempt to hack into your network or application to help you identify network-connected assets, learn how those assets are vulnerable to attack and understand what could happen if those assets were compromised.

Learn More

Contact Cloud 9 Advisers for expert guidance and help with any compliance, risk management, monitoring, edge security and any other cybersecurity issues. We'll guide you to the right vendors, like Nitel, from our Supplier Portfolio. 

Your Agent.  Your Advocate. Your Adviser.


Because it’s all about you. 


Cloud 9 Advisers will save you time during the often exhausting process of finding, evaluating, and selecting new technologies and competitive providers. We become an extension of your team and help manage the entire bidding and procurement process. We will save you money by using the buying power of thousands of other clients through our curated Supplier Portfolio, and finding the right companies from our portfolio to bid on your requirements. We provide you clarity by distilling all the information from each bidder, and clear the clutter so you can make the right decision on the best solution and provider. Cloud 9 gives you confidence throughout the decision-making process by continually evaluating the bidders and negotiating the best price and terms, so you can focus on what you do best. 


Technology Partners. Strategic Advisers.


Contact Cloud 9
]]>Tue, 04 Feb 2020 12:06:38 -0500<![CDATA[SASE, the next-gen SD-WAN?]]>https://www.cloud9advisers.com/News/post/Is-SASE-the-next-gen-SDWAN

The Four Pillars of SASE: Why Your Legacy Network Architecture is Obsolete

Gartner makes the claim that the shift to SASE will make obsolete existing networking and security models.


Secure Access Service Edge (SASE): The Foundational Shift Driven by Cloud, Mobility, and the Demise of the Traditional Perimeter

A true SASE framework moves security policy from the physical office location to the user’s identity, fundamentally transforming how enterprises connect and protect their digital assets.

The SASE architecture is a fundamental shift, moving the security perimeter from a physical location to a cloud-native, identity-centric service edge.

Secure Access Service Edge (SASE): The Foundational Shift Driven by Cloud, Mobility, and the Demise of the Traditional Perimeter

In 2019, Gartner introduced the Secure Access Service Edge (SASE) model, describing it as a fundamental architectural shift that would eventually render existing networking and security models obsolete. While many in the industry initially treated it as hype, the events of the last few years—namely, the explosion of cloud application usage and the permanence of the dispersed, mobile workforce—have made this prediction an undeniable reality.


Today, every enterprise is facing unprecedented pressure on its legacy network and security architecture. Users, applications, and data have migrated from the confines of the corporate network to the cloud and the edge. This digital transformation improves agility and competitiveness, but it requires a corresponding evolution in how we connect and, more importantly, how we secure those connections.


The SASE category represents this necessary evolution. It converges the capabilities of the WAN edge (networking) with network security (security) into a single, unified, cloud-native service. However, the market is crowded with vendors claiming SASE capabilities, when, in reality, they are offering little more than traditional products loosely "service-chained" together.


To cut through this noise and ensure you are making a strategic, future-proof investment, you must evaluate solutions against the four non-negotiable pillars of a true SASE architecture.


The Problem: When SDWAN Alone Is Not Enough

SDWAN is a critical part of the modern network, solving performance, resilience, and efficiency problems. But as valuable as it is, it is only one part of the larger SASE story.


The traditional approach to security—regardless of whether you use SDWAN—was to backhaul all traffic from remote users and branch offices back to a central, on-premise security stack. This approach is fatally flawed today:

  1. High Latency: For users accessing cloud applications like Microsoft 365, forcing traffic halfway across the country just to hit a corporate firewall and then turn back to the cloud introduces unacceptable latency and degrades performance.

  2. Inconsistent Security: Creating a patchwork of appliances (VPN concentrators, firewalls, web gateways) and physically stringing them together via "service chaining" results in fragmented visibility, inconsistent policy enforcement, and complex management. As Gartner noted, service chaining is emphatically not SASE.

  3. The IP Address Conundrum: Legacy security is tied to a network anchor, typically the IP address of a device or location. In a world where the office can be a coffee shop, an airport, or a home network, an IP address is useless as a hook for security enforcement.

To overcome these structural limitations, the architecture must evolve beyond the old data center and embrace the cloud-native design principles of SASE.


Pillar I: Converged WAN Edge and Network Security

A true SASE architecture is defined by convergence. It cannot be a collection of disparate appliances or services loosely managed by different dashboards.


The Requirement: The WAN edge (SDWAN functionality, traffic optimization, and routing) and the comprehensive network security stack (Firewall-as-a-Service, Secure Web Gateway, CASB, ZTNA) must be folded into a single, cloud-native software fabric.


The Pragmatic Benefit: This convergence delivers the simplicity, scalability, and pervasive security that customers demand. By operating as a single software stack, the platform can perform single-pass architecture inspection, where traffic is decrypted, inspected against all security and networking policies simultaneously, and then re-encrypted. This greatly reduces processing time and latency compared to chaining separate security devices, ensuring high performance while maintaining security coverage.


In essence, SASE mandates that networking and security cannot be two separate domains managed by different tools; they must be a single, centrally controlled entity.


Pillar II: Cloud-Native, Global Service Delivery

The nature of cloud applications—specifically, their sensitivity to latency—demands that networking and security be delivered as close to the endpoint as possible. The edge is the new cloud, and it requires a distributed approach.


The Requirement: SASE offerings must be purpose-built for scale-out, cloud-native, and cloud-based delivery. This means relying on a vast, globally distributed network of Points of Presence (PoPs) to minimize the physical distance between the user and the security enforcement point.


The Pragmatic Benefit: The geographical footprint is critical. It is not sufficient to simply run the service on a hyper-scaler with a limited number of PoPs, as this still forces users in remote regions to connect over long distances. A true SASE solution requires providers with a deep, global footprint and the agility to instantiate a PoP in response to emerging customer demands. This optimized, low-latency delivery ensures that security inspection does not negatively impact the performance of real-time applications.


Pillar III: A Network Designed for All Edges

The traditional network focused almost exclusively on the site (the branch office or the headquarters). The modern enterprise must focus on securing all edges equally—the site, the cloud, and the individual mobile user.


The Requirement: SASE services must be capable of connecting and securing more than just physical sites. This requires an agent-based capability, managed as a cloud service, that can be installed on laptops and mobile devices to extend the full security stack to the individual user, regardless of their connecting network.


The Pragmatic Benefit: Offerings that rely solely on on-premises, box-oriented delivery or only cater to a limited number of fixed cloud PoPs will inevitably fail to meet the requirements of an increasingly mobile workforce and emerging latency-sensitive edge applications. A genuine SASE architecture ensures that an employee working from a home office or a client site receives the same level of security and performance optimization as if they were sitting in the corporate headquarters.


Pillar IV: Identity and Real-Time Condition

This is arguably the most revolutionary pillar of SASE, representing the complete departure from the legacy model.


The Requirement: Security access and policy enforcement must be based on the user's identity and their real-time context (device type, time of day, location, and posture of the device), not the static IP address.


The IP Address Conundrum: Anything tied to a physical IP address is useless for security policy enforcement when users and resources are constantly moving. The legacy data center is no longer the center of the network universe. The new center of secure access networking design is the Identity—with the policy following that identity wherever they go.


The Pragmatic Benefit: SASE allows IT leaders to customize the security level and network experience based on risk. For example:

  • A user accessing a critical financial application from a corporate laptop in the office receives full access.

  • The same user attempting to access that application from an unmanaged personal device (different identity/condition) from a foreign country receives restricted, or zero, access.

All policies are tied to the user's validated identity (which can be a person, a device, or an IoT entity), eliminating the vulnerability inherent in IP-based enforcement and fully embodying the principles of Zero Trust Network Access (ZTNA).


A Pragmatic Call to Action

The introduction of SASE is not marketing buzz; it is a true reflection of our times. The technologies have changed considerably, forcing a profound rethinking of legacy enterprise networks.


As this market category matures, the marketing noise will continue to grow. Your responsibility as a technology leader is to move past the vendor claims and evaluate potential solutions against these four non-negotiable architectural pillars. If the solution cannot prove a cloud-native, globally converged architecture where policy is tied to identity, it will not deliver the simplicity, scale, or security your business needs to thrive in the cloud-first era.


KITS: Keep IT Simple.

Learn about "Sassy"

]]>Tue, 15 Oct 2019 12:47:06 -0500