SASE and SSE

SASE (secure access service edge) puts the security checks in the provider's cloud, at points of presence near the users, instead of hauling every site's traffic back to a firewall at headquarters. It is SD-WAN plus SSE (security service edge), the security part on its own. A secure web gateway (SWG) filters URLs and content and scans web traffic for malware. A CASB (cloud access security broker) sees and controls the use of SaaS applications, such as blocking uploads of sensitive files to an unapproved one. ZTNA (zero trust network access) checks each user and device and opens one application to them, never the whole network, in place of a remote-access VPN. FWaaS (firewall as a service) is a next-generation firewall run by the provider.

Staff at home, in a branch or in a café get the same policy, tied to who they are rather than where they sit.

See it on real machines