Explore The Key Components of SASE

The Core Components of SASE

SASE combines various IT functions into a single solution. Some of the key capabilities of SASE include:

• Acesso à rede de confiança zero (ZTNA): ZTNA offers secure remote access to corporate resources based on user context (location, time of day, device state) and application-by-application access rules.
• Secure Web gateway (SWG): SWGs protect remote workers against online threats, offering URL filtering, and malicious content detection.
• Firewall como serviço (Firewall as a Service, FWaaS): FWaaS offers next-generation firewall (NGFW) capabilities via a scalable, cloud-based service.
• Cloud Access Security Broker (CASB): CASB acts as an intermediary for traffic to cloud applications and software as a service platforms, allowing access control and enforcement of corporate security policies and data loss prevention (DLP).
• WAN definida por software (SD-WAN): SD-WAN intelligently routes traffic over the corporate WAN based on knowledge of the health and performance of available links.

Network Security Services

Some corporate network security features that SASE typically offers include:

• Firewall as a Service (FWaaS): FWaaS offers firewall capabilities as a cloud-native, service-based offering. With FWaaS, organizations flexibly and scalably secure on-prem and cloud-based assets.
• Intrusion Prevention Systems (IPS): An IPS can be deployed at the network or host level and can identify and block attempted intrusions. Network IPS provides protection against distributed denial-of-service (DDoS), credential stuffing, and other network-level attacks.
• Threat Intelligence and Advanced Threat Protection: SASE solutions can be configured to ingest threat intelligence feeds. These fuel advanced threat prevention capabilities and enable them to block novel and evolving cybersecurity threats.
• Segurança DNS: DNS queries provide hints regarding the websites that remote users or malware are attempting to contact. By blocking or revising responses for malicious domains, SASE solutions can prevent visits to malicious or inappropriate sites.
• Network Traffic Filtering and Monitoring: CASB enables inspection and filtering of web traffic. This inspection can be used to identify and block malicious content and to enforce corporate security and acceptable use policies.

Intelligent Routing and Traffic Optimization

SASE includes SD-WAN and other traffic optimization features to provide the following:

• Intelligent Routing: SD-WAN monitors the current health of network links and routes traffic over the best available medium, optimizing network performance and user experience.
• Granular Visibility and Control: All network traffic passes through a SASE appliance, which has deep application visibility and control. This provides you with insight into WAN traffic and the ability to implement very granular controls.
• Qualidade de Serviço (QoS): SASE has traffic visibility and can understand and identify various types of application traffic. Organizations can implement QoS policies and prioritization to ensure the performance of important and latency-sensitive traffic.
• Dynamic Policy Enforcement: SASE solutions have in-depth visibility into application traffic and the usage of the corporate WAN. This enables you to intelligently update security policies based on context, including user and device identity, location, and more.

SASE Deployment with Harmony SASE

Check Point Harmony SASE offers integrated, cloud-based security with industry-leading threat prevention capabilities.

To learn more about deploying SASE in your organization with Harmony SASE, check out this reference guide.