41:02This recording is not available yet.
Rise of Secure Access Service Edge (SASE)
Download resourcesCategories
Vendors and tools discussed
Sponsored by
About this session
Jonathan Andresen, senior director at Bitglass, presents Secure Access Service Edge as the security model for a business that now runs between mobile devices and other companies' data centres. He sets the scene with cloud, mobility and pandemic-accelerated digital transformation, then asks whether IT still knows where its data is, who accesses it and on which device. Traditional firewalls, on-premise DLP, web gateways, VPNs and MDM were built for a perimeter that no longer contains the data, and cloud-to-cloud traffic never touches them; the shared responsibility model leaves the customer accountable for how employees use SaaS and for IaaS defaults such as open S3 buckets. SASE, he explains, merges cloud security and network security into one cloud-delivered subscription, and he contrasts appliances relocated to the cloud with public-cloud-native architectures that scale without backhauling. His three-step path is a multi-mode CASB (forward proxy, API and agentless reverse proxy), on-device web security replacing gateway appliances, and zero trust network access in place of the VPN, with four-nines uptime as a vendor requirement. Use cases cover remote workers, file sharing and Microsoft 365.
Secure access service edge has quickly emerged as a hot topic in cybersecurity, but what exactly does it mean and why should organizations care? As cloud migration, BYOD adoption, and remote work have skyrocketed in prevalence, it has become increasingly apparent that organizations need to think differently about security. While legacy tools like firewalls are no longer equipped to handle the modern IT ecosystem, SASE platforms like Bitglass are built for this
exact moment. In this presentation, you will learn: The core components of a SASE platform like Bitglass. The functionality you need to secure cloud, web, and remote access use cases. Architectural considerations you should keep in mind when comparing SASE vendors. SEED QUESTIONS: How do I determine where to begin my SASE and digital transformation journey? How do I justify the cost of SASE?
Key takeaways
- Map where your data actually lives and moves, including cloud-to-cloud flows that never touch on-premise controls, before choosing security tooling.
- Read the cloud shared responsibility model: the provider secures its service, but you own data classification, identity, access and how employees use it.
- Start SASE with a multi-mode CASB (forward proxy, API scanning of data at rest, agentless reverse proxy for BYOD) rather than a single-mode product.
- Replace VPNs with zero trust network access so users see only the applications they are entitled to, with data and threat inspection applied.
- Hold cloud security vendors to four-nines uptime and prefer public-cloud-native architectures over appliances relocated to the cloud.
Speakers
Jonathan Andresen
Jonathan Andresen is Senior Director, Marketing & Products Asia-Pacific at Bitglass. Mr. Andresen joined Bitglass in April 2020 and has been working in the enterprise IT and telecommunications sector since 1996, relocating to Asia in 2003. Prior to… Read moreRead less
Jonathan Andresen is Senior Director, Marketing & Products Asia-Pacific at Bitglass. Mr. Andresen joined Bitglass in April 2020 and has been working in the enterprise IT and telecommunications sector since 1996, relocating to Asia in 2003. Prior to joining Bitglass, Mr. Andresen held various product, marketing, and strategy management positions in Asia-Pacific at McAfee, MobileIron, Blue Coat Systems (now Symantec) and Nortel Networks. Mr. Andresen’s career includes earlier positions with Teleglobe, MetroPhotonics and Canada’s Department of Foreign Affairs. Mr. Andresen holds a Master's Degree in International Management from Canada’s Carleton University and an undergraduate degree from Queen’s University.
