Intelligent SME.tech Issue 04 | Page 23

JONATHAN ANDRESEN , SENIOR DIRECTOR , MARKETING + PRODUCTS , ASIA PACIFIC AND JAPAN , BITGLASS
intelligent

// EDITOR ’ S QUESTION ?

JONATHAN ANDRESEN , SENIOR DIRECTOR , MARKETING + PRODUCTS , ASIA PACIFIC AND JAPAN , BITGLASS

E nterprise security architectures are undergoing a dramatic shift , in which two key terms are redefining the lexicon of infosec security professionals : secure access service edge ( SASE ) and Zero Trust network access ( ZTNA ).

Combined with the twin challenges of managing laptops and VPNs for suddenly remote workers , and implementing Digital Transformation , staying ahead of the latest cyberbreaches can be a daunting task for small and medium-sized businesses .
Today , data is stored , accessed and shared in more devices , apps , web destinations and geographical locations than ever before . With the rise of cloud , BYOD and remote working , relying on network access is no longer sufficient .
The Zero Trust model replaces the networkfocused access control approach with strong authentication and authorisation technology that enables administrators to apply granular access controls . These controls permit users to access specific applications based on their particular role ( s ) in the organisation .
So Zero Trust is a system in which users are given Zero Trust by default . Excessive permissions are avoided and access to corporate resources ( whether those are files , data patterns , cloud apps , on-premises tools , or something else ) is limited to an as-needed basis for only the properly authorised users ( known as least-privilege ).
Organisations leveraging Zero Trust frameworks deploy modern , intelligent security measures so they can secure any and all corporate resources granularly , wherever they reside and wherever they are accessed from .
For SMEs , SASE makes perfect sense . Given their limited IT and financial resources , SASE simplifies security and network architectures by integrating disparate network and cloud security functions into a single unified clouddriven platform .
For example , replacing a data centre secure web gateway ( SWG ) or a cloud proxy SWG with a cloud with on-device increases performance , scalability , cost savings , while improving the user experience .
On-device SWGs decrypt and inspect traffic locally on each device , forgoing the need for on-premises appliances , VPNs , network hops and cloud proxies . What ’ s more , with SME traffic now a mix of both SaaS application traffic and web traffic an integrated SWG + CASB ( cloud access security broker ) solution provides more comprehensive security and data protection .
So , what ’ s the relationship between Zero Trust security and SASE ? Are they mutually exclusive or compatible ?
In fact , both are highly complementary . While Zero Trust is a philosophy about ensuring proper authentication and as-needed access to data and systems , SASE refers to clouddelivered platforms deployed at the edge which provide consistent and comprehensive protections wherever data goes .
As an integrated platform that comprise a variety of complementary security technologies , SASE platforms are indispensable when creating a Zero Trust framework . �

TODAY , DATA IS STORED , ACCESSED AND SHARED IN MORE DEVICES , APPS , WEB DESTINATIONS AND GEOGRAPHICAL LOCATIONS THAN EVER BEFORE .
Intelligent SME . tech
. tech
23