To address the move of applications to the cloud and more users being located outside traditional office buildings, SASE has been introduced as a new concept that brings together networking and security functions in one uniﬁed framework designed to deliver strong security from edge to edge, delivered as a service— including the data center, branch oﬃces, roaming users, and beyond. The networking component of SASE is SD-WAN, the foundation of SASE.
At Nuage Networks, we have been providing scalable and flexible SD-WAN and embedded security prior to SASE’s inception. Nuage SASE is an extension of those SD-WAN and security functions which we deliver at any point of the network, including – on-premises, at cloud edge and in cloud. Our SASE solution is open, flexible and works with cloud security vendors to create the comprehensive network and security framework required for digital transformation.
Nuage SASE framework is delivered in four ways, providing maximum deployment flexibility:
Embedded Security Capabilities – Nuage SD-WAN provides a comprehensive set of security capabilities such as Stateful Firewall, URL/Web Filtering, Layer 7 ACLs and Intrusion Prevention and Detection (IPS/IDS) without any third-party investment.
VNF-based security – The 7850 NSG can host a VNF such as a hosted firewall from any security vendor, extending the embedded security with a preferred security vendor’s security function.
SASE integrated with cloud-security vendor – The 7850 NSG is integrated with cloud-hosted security brokers, allowing Nuage SD-WAN to offer cloud-enabled security and advanced SASE capabilities such as ZTNA (Zero Trust Network Access), CASB (Cloud Access Security Broker) and DLP (Data Loss Prevention).
SASE via CSP Telco Cloud or Nokia SASE POP – Nuage SD-WAN provides ‘service-chaining’ to any existing CSP investment in hosted security/SASE within their Telco Cloud. Alternatively, a cloud hosted and managed offering, Nokia Cloud Managed SD-WAN Service, is available to CSPs that want SD-WANaaS. With this option Nokia has pre-integrated the managed SD-WAN platform to leading cloud-based SASE offerings including Check Point Harmony, Palo Alto Prisma and Zscaler.