SASE for Business: Secure Access Service Edge

SASE (secure access service edge) combines networking and security in a single cloud service. Instead of sending traffic back to a firewall at headquarters, users and offices connect to the provider’s nearest point of presence, where security policy is applied before traffic continues to the internet, cloud apps or your data center. It typically brings together SD-WAN, a secure web gateway, a cloud access security broker (CASB), zero trust network access (ZTNA) and firewall as a service.

Networking and security together

One platform and one policy instead of separate SD-WAN, firewalls and VPN.

Zero trust remote access

Staff reach only the apps they need, from anywhere, without a traditional VPN.

The same protection everywhere

Office, home or travel: every user gets the same security policy.

What does SASE include?

Component	What it does
SD-WAN	Connects sites and sends traffic over the best available link
Secure web gateway (SWG)	Filters web traffic and blocks malicious sites
CASB	Controls use of cloud apps and protects data in them
Zero trust network access (ZTNA)	Gives users access to specific apps instead of the whole network
Firewall as a service (FWaaS)	Cloud-delivered firewall for all locations and users

How is SASE different from SD-WAN?

SD-WAN handles connecting your sites and choosing the best path for traffic. SASE adds a full security stack delivered from the cloud and extends it to remote users who aren’t at any site. The security half on its own is often sold as SSE (security service edge). If you already have SD-WAN, you can add SSE rather than replacing everything. See SD-WAN solutions.

When does a business need SASE?

Staff work remotely or hybrid and rely on a VPN that’s slow or hard to manage
Most applications are in the cloud rather than your own data center
Several locations each have their own firewall to maintain
You’re replacing an MPLS network
Compliance requires the same security controls for every user

How do you plan a move to SASE?

List your sites, users and the applications they use.
Start where the payoff is clearest, often remote access or a pilot site.
Decide between a single-vendor platform and pairing separate SD-WAN and security vendors.
Check that the provider has points of presence near your users.
Make sure each site has good internet underneath, with backup.
Retire VPNs, branch firewalls or MPLS as their contracts end.

What we help with

Comparing single-vendor and two-vendor SASE designs
Planning a phased move from VPN, firewalls or MPLS
Sourcing the internet and backup connections underneath
Lining up contract dates so you don’t pay twice during the move

Who it’s for

Businesses with remote or hybrid teams
Multi-site companies managing several firewalls
Organizations replacing MPLS or a legacy VPN
IT teams that want one security policy for every user

How we help

Tell us your sites, user count and what you run today for networking and security. We compare SASE options, design the rollout and source the connectivity underneath it.

Options we compare

We’re vendor-neutral. Depending on your requirements, options can include:

Cato Networks
Palo Alto Networks Prisma SASE
Fortinet
Zscaler
Netskope
Carrier-managed SASE services

The provider compensates us, so our guidance is free to you — see how it works.

Frequently asked questions

What is SASE?

SASE (secure access service edge) is a cloud service that combines networking, such as SD-WAN, with security functions, such as secure web gateway, CASB, zero trust access and firewall, applied wherever users connect.

Do I need SD-WAN to use SASE?

No. Many businesses start with the security half, often called SSE, especially zero trust remote access, and add SD-WAN later.

Does SASE replace my firewall?

It often replaces branch firewalls and VPN appliances. Some businesses keep a firewall at headquarters or the data center during the transition or for specific needs.

Is SASE only for large companies?

No. Several providers package SASE for mid-size and smaller businesses, often as a managed service.

Is it really free?

Yes. The provider you select compensates us, so our comparison and sourcing cost you nothing.

Thinking about SASE?

Tell us about your sites, users and current setup. We’ll compare platforms and map out a phased plan.

Talk to an Expert

Explore more: all solutions · SD-WAN · MPLS · cybersecurity · MDR · backup and failover.

Product and company names are trademarks of their respective owners. Discover Communications is independent and not affiliated with the providers listed.

SASE: Secure Access Service Edge