Figure 1: The 3Cs model

SASE at a glance

A cloud native architecture, SASE is used to deliver connectivity and security services in a complaint manner to an edge estate. Initially coined by Gartner, it was Ìýwidely accepted within the information technology (IT) and Ìýtelecom industries. Backhaul connectivity constraints, including latency, are addressed in a controlled manner to ensure the distributed data is secure.

SDWAN and SASE are both edge centric solutions, though SDWAN focuses on connectivity while SASE refers to security and compliance. It is essential for both the technologies to work together to make the ecosystem more secure, robust, and seamless to access and consume services from anywhere in the world.

Figure 2: SASE core components and characteristics

SASE landscape and current market dynamics

The ÌýSASE model, its Ìýend-to-end integrated ecosystem landscape, and its key components and elements are depicted in Figure 3.

Ìý

Figure 3: SASE – End to end landscape view

Currently, the SASE market is a crowded space with various technologies and vendors bringing their own points of view. In the near future, great convergence and consolidation is expected. Here are the three types of solution providers and their focus areas:

• Connectivity centric solution providers: Most traditional networking vendors, like Cisco and VMware, are expanding their product portfolios to the edge to improve user experiences and to optimize wide area network (WAN) connectivity.
• Security centric solution providers: Vendors in this category of offerings primarily focus on the security aspects by customizing technology solutions. Some of the key players in this segment are Akamai Technologies, Palo Alto Networks, etc. and these are sometimes bundled along with SDWAN offerings.
• Compliance solution providers: While it is important to have secure connections, it’s equally crucial to have control over Ìýthe data that is being accessed, which is why compliance and governance are essential across industries. Some of the players in this segment focus on identity management (IDAM) and compliance solutions that include, but are not limited to antivirus, data protection, and data loss prevention. Some of the players in this segment are Zscaler, McAfee Antivirus, Cisco virtual private network (VPN), Microsoft multifactor authentication (MFA), etc.

Some of the vendors providing SASE technologies as a whole, in addition to the major players mentioned earlier are Versa Networks, Cato Networks, Fortinet, Aruba, Cloudflare, Perimeter 81. The vendors in this category are emerging technology companies that can offer differentiated value propositions.

Analysts’ predictions

• For flexible, cost effective scalable bandwidth, approximately will use only internet WAN connectivity by 2023, compared with approximately 15% in 2020.
• From less than 5% in 2020, will adopt cloud delivered standard wire gauge (SWG), cloud access security broker (CASB), zero trust network access (ZTNA), and branch office firewall as a service (FWaaS) capabilities from the same vendor by 2024.
• By 2025, at least will have explicit strategies and timelines for SASE adoption encompassing user, branch, and edge access, up from 10% in 2020.

SASE adoption models¹

As SASE evolves as a model and framework, Ìýand the transformation models require time to mature, the existing models have some advantages before becoming full-fledged matured models. Key approaches for SASE adoption include process, people, measurement, technologies, and strategy. The strategy will be a combination of short, medium, and long term.

Benefits

• Improves user experience and optimization.
• A more secure, robust, and compliant estate.
• Enables seamless work from anywhere models.
• Optimization of costs and scalability.

Use cases

• Local breakout capabilities for the small and midsized business (SMB) segment.
• Expand the services delivery-landing zone closer to the users to address latency sensitive applications.
• New innovative ways of operating for sectors such as education, media and entertainment, healthcare, banking and financial services industry (BFSI),etc.
• Expanding work areas to edge locations will enable companies to address emerging needs such as COVID-19.

Challenges

Currently, there are no industry wide frameworks and standards for SASE because it is evolving Ìýand there is a long way to go before we Ìýhave a SASE with widely accepted, recognized frameworks and standards, measurements, and KPIs.

• Interoperability between Ìýtechnologies.
• Common KPIs for service.
• Maturity of commercial models across locations.
• Service switching flexibility between vendors.

91¿ì»îÁÖ’s role and value proposition

91¿ì»îÁÖ plays multiple roles with respect to SASE, including that of a system integrator, a consumer, and a solutions or strategic partner.

• System integrator— In its capacity as a system integrator (SI), 91¿ì»îÁÖ provides solutions that meet these emerging model requirements and enable customers to leverage the validated and proven solutions bundled along with its own accelerators and differentiators. Some of the key differentiators in this area include the edge framework BoundaryLess Universal Edge (BLUE), cybersecurity framework (CDP), infrastructure automation accelerators like ServiceTheater, software defined networking (SDN) deployment, etc. As a result, SASE day one and day two operations will be simpler, unified, and autonomous. These accelerators leverage the best of breed technologies, software defined, and programmable infrastructure.
  
  Overall execution models will be tailored to align with the respective industries along with localizations. These solutions can be applied to various industries, including telco edge, mobile edge computing (MEC), device edge, and enterprise edge solutions. For enterprise edge solutions like manufacturing, retail, oil and gas, BFSI, etc., customizations with integration into SASE models may be needed. Specific use cases will be based on industry verticals such as media and entertainment, content delivery networks (CDNs), etc.
  Ìý
• Consumer/customer role — End user devices are configured with multifactor authentication (MFA), data loss prevention (DLP), and antivirus technologies from ÌýVMware, McAfee, Zscaler, and others to ensure uniform security, compliance, and data protection for its employees and customers, in order to enable Ìýthe “Anywhere Working Model“.
  Ìý
• Strategic partnerÌý— Develops joint solutions with key global technology companies such as Cisco, VMware, Palo Alto Networks, and Zscaler as well as emerging players, Ìýto help customers from different industry verticals to transform their landscape by adopting SASE.

Wrapping up

SASE is fast becoming an essential model that every company Ìýwill have to adopt and maintain, as well as follow the maturity curve, until the overall industry governance, framework, and standards are apparent. Working from anywhere without compromising security and compliance is a necessity, so SASE Ìýis integral Ìýto the ecosystem. 91¿ì»îÁÖ is poised to deliver differentiated offerings through joint solutions created in partnership with established and startup technology vendors.Ìý

To learn more about how 91¿ì»îÁÖ’s solutions and unique capabilities can help your company achieve a seamless digital transformation, please contact us at sdx-cis@wipro.com

Rambabu Kata
Senior Consultant, 91¿ì»îÁÖ

Rambabu Kata (Ram)Ìýis an IT professional with 26 years of industry experience in IT, delivery, architecture, practice, and pre-sales. He has a Bachelor’s degree in electronics and communication engineering and a Master's in marketing management.

Govindan Kutty
Practice Director – Data center & Hybrid Cloud Practice at 91¿ì»îÁÖ

Govindan is an IT professional with 25 years of industry experience in IT delivery, solution engineering, and practice development. Govindan currently heads the solution engineering and innovation center.