SD-WAN first or security first?

[[419685]]

The right secure access service edge (SASE) architecture can enable enterprises to ensure that users have direct and secure access to cloud-hosted applications and services, regardless of where they are located or what device they are using to access them. The Internet of Things also needs to adopt SASE to solve security issues. Transforming the overall business driver of WAN and security architecture to SASE can provide users with the best application quality experience.

Getting Started with SASE

When an enterprise embarks on a SASE journey, it can start with SD-WAN or cloud security, or both. But people may not want to be forced to transform both at the same time - they want to transform these architectures based on their needs and progress.

Enterprises can first evaluate their WAN and security requirements based on business needs:

• What level of cloud application performance and reliability -- application service-level agreements (SLAs) -- do enterprises require?
• Which routing functions need to be replaced by SD-WAN?
• What connectivity and security challenges do mobile and remote workers face?
• Do the applications your enterprise runs benefit from WAN optimization?
• What basic firewall features do branch offices need, and which can be provided in the cloud?
• What security, segmentation, and compliance requirements must users meet? What security requirements are there for IoT devices?
• Is it possible to predict what types of threat vectors will emerge in the future? The answer is of course no, so enterprises may need to adopt security innovations from vendors.

SASE evaluation and proof of concept testing

Next, enterprises need to evaluate the SD-WAN and security capabilities of various vendors. Many enterprises do need to adopt best-in-class WAN technology and cloud-delivered security without compromising the integrity of either. But it is unlikely to find a vendor that excels in both areas.

According to a recent Ponemon Institute Security Best Practices Survey of more than 1,800 network and security IT professionals, more than two-thirds of IT teams want to adopt best-in-class network and cloud security for SASE. More than 70% of respondents expressed a desire to integrate multi-vendor services to simplify deployment and ongoing operations without compromising network or security capabilities.

Integrated Automation Orchestration for Best-in-Class Performance

Advanced, open SD-WAN platforms that support application programming interfaces (APIs) can bring new levels of automation to seamlessly connect best-of-breed cloud security services now and in the future, avoiding vendor lock-in and compromise. SD-WAN platforms support foundational security features at the branch, such as zone-based firewalls and segmentation, enabling enterprises to migrate to SASE architectures at their own pace.

Driving business value - the ultimate goal of SASE

The only reason for an enterprise to transform its network and security architecture is to drive business outcomes. Otherwise, why embark on a SASE journey and pay the associated costs? Incremental business value can be achieved using SASE:

• Provide users with the best quality of experience for cloud computing applications to improve productivity, customer satisfaction, and ultimately increase business profitability.
• Implement more consistent security policies across the enterprise to reduce business risk and protect your brand.
• Reduce capital and operating costs by simplifying WAN architecture, centralizing network and security management, and eliminating backhaul of cloud-bound traffic over costly leased lines.
• Ultimately, enabling enterprises to achieve greater returns on existing cloud computing investments.