SSE

HIGH PERFORMANCE TRAFFIC VISIBILITY FOR SSE

Gartner’s Security Service Edge (SSE) concept offers a highly-scalable and convenient model for providing users everywhere with safe access to the Internet, Web, XaaS services, and private apps. SSE uses edge clouds to deliver security services via three primary components:

• A Secure Web Gateway (SWG) for managed device access to the Internet, Web and non-Corporate SaaS,
• A Cloud Access Security Broker (CASB) for access by managed and unmanaged devices to SaaS and cloud apps, and
• A Zero Trust Network Access (ZTNA) framework for secure access to private apps and data assets (on premise or in the cloud) by managed and unmanaged devices.

Each of these core functions requires detailed visibility into global network traffic for each enterprise customer. This visibility includes accurate identification of applications and services in both encrypted and clear flows, and granular insights into evasive and anomalous traffic to support threat detection. An accurate detailed view of traffic is also essential to all other SSE components, such as Data Loss Prevention (DLP), a Next Generation Cloud Firewall (NG CFW), a Web Application Firewall (WAF), and an Intrusion Detection/Prevention System (IDS/IPS), and Extended Threat Detection and Response (XDR).