Mohammad Jamal Tabbara, Head of Solutions Architect, Middle East, Turkey and Africa at Infoblox, explains how enterprises can achieve the full potential for Secure Access Service Edge (SASE) based platforms.
First identified by Gartner in 2019, Secure access service edge or SASE is a new model for networking and security designed to meet the growing demand for network architectures that are more fluid, secure and easy to manage.
The SASE concept addresses the network complexities associated with distributed enterprises. It is a response to the constraints of traditional hub-and-spoke architectures, tool proliferation, siloed solutions and manual processes that prevent organisations from moving at cloud speed. A SASE network merges networking and security capabilities, is built using cloud-native principles, is delivered in the cloud on an on-demand, SaaS basis and relies on DDI as a foundational, unifying layer.
It is anticipated that in the future, we might see AI playing a crucial role in SASE network security by enabling real-time threat detection and response, as Machine Learning algorithms can soon be able to train itself to detect anomalies and patterns in network traffic, allowing organisations to respond quickly to potential threats or even trigger an automatic remediation on both security and network levels.
SASE: Simplifying the network edge
Using cloud-native architectures, SASE unifies networking and security into a single platform, informed with the user’s network context. Organisations deploy and manage a SASE network from the cloud as SaaS-based capabilities.
In a SASE framework, the burden of managing and securing a network moves from labour-intensive, server-based appliances in the data centre to virtual and containerised applications in the cloud. As a result, SASE networks enable organisations to:
- Simplify management
- Scale elastically
- Dynamically deploy networking and security capabilities as needed
- Consume versatile network and security capabilities as cloud-based applications
Key integration capabilities missing from SASE implementations
You might be forgiven for assuming that if you deploy a unified SASE platform, your network would consequently be enterprise- grade at the Edge. If only it were that simple. Unfortunately, SASE implementations currently lack essential integration necessary for enterprise-edge networking. That should come as no surprise. After all, the vital integration we’re referring to here involves the same core network services that most IT, networking and security organisations consistently undervalue.
How core network services enable SASE networks
In a SASE model, networking and security capabilities are intended to be tightly integrated and interoperable. And yet, to achieve its full potential for integration, a SASE-based platform must be able to harness the network services that are common to all networking and security functions – DNS, DHCP and IP address management. Most SASE implementations, as currently offered, do not adequately integrate these services into their platforms. When incorporated as a foundational layer in SASE-based networking, core network services deliver the following advantages:
- Centralised visibility. Data residing in core network services provide enhanced network visibility for SASE implementations, enabling networking and security teams to monitor and manage devices and application usage centrally across physical, virtual and cloud infrastructure.
- Network user context. Similarly, core network services, such as DNS, enable SASE deployments to optimise network operations and automatically secure application access at the Edge.
- Local survivability for distributed locations. Resilience is a top priority for a SASE network. Applied effectively, core network services can ensure continuous Internet access for distributed locations any time they lose connectivity to headquarters.
Cloud-native delivery for core network services
The SASE framework emphasises the use of cloud-native design in networking components. As you weigh your options for incorporating core network services into the design of your edge network, seek out solutions built using cloud-native microservices and containers. Containerised instances of DDI services are faster and easier to manage than virtualised alternatives. They also consume far fewer resources and deliver extremely low latency, providing you with the dexterity and resilience you need at the network edge.
