What is SASE?
Secure Access Service Edge or SASE (pronounced “sassy”) is an architecture that combines comprehensive WAN capabilities including SD-WAN, routing, and WAN optimization with cloud-delivered security services or SSE (Security Service Edge).
As users connect from anywhere and access sensitive data in the cloud, SASE brings a more secure and flexible way to connect by not backhauling application traffic to a data center. Instead, SASE intelligently steers the traffic to the cloud and performs advanced security inspection directly in the cloud.
SASE addresses the need for improved application performance and increased network security as the number of remote users increases and as enterprises continue to migrate applications to the cloud.
In an era where modernization, cloud computing and decentralized IT environments are integral to business operations, organizations are continually confronted with network performance and security challenges. These include:
- Connecting users seamlessly from anywhere and on any device
- Safely collecting, storing and analyzing sensitive data hosted in the cloud
- Protecting expanded attack surfaces due to the growth of edge computing
- Complying with constantly evolving regulations and industry standards
What is unified SASE?
To address these competing objectives, HPE Aruba Networking Unified SASE (secure access service edge) emerges as a simplified solution, integrating secure SD-WAN (software-defined wide area network) with SSE (security service edge) capabilities.
SD-WAN empowers geographically distributed enterprises to harness the cloud's potential. It achieves this by reducing capital and operating costs, enhancing the quality of experience for both employees and customers and bolstering agility.
When SD-WAN is seamlessly integrated with SSE solutions, it results in a robust SASE architecture. This convergence is crucial for organizations navigating the complexities of hybrid business environments and cloud computing, ensuring holistic and adaptive security and reliable network performance.
Why should IT teams care?
- Traditional perimeter defenses work well in the data center but cannot adequately safeguard new cloud apps or remote locations.
- As most applications have moved to the cloud, backhauling cloud-defined traffic to a data center for security inspection diminishes application performance and does not scale to meet the needs of a distributed workforce.
- The conventional router-centric model is rigid, complex, inefficient and not cloud-friendly, resulting in a poor user experience.
- Branch offices have accumulated a sprawl of network and security equipment. This equipment is costly and difficult to maintain.
- Inconsistent security policies across devices and inside networks add complexity and risk.
Differentiation in the market
| Business-driven | Quality of experience | Continuous adaptation | Unified platform |
|
|
|
|
Faster move to SASE
EdgeConnect SD-WAN is part of HPE Aruba Networking's unified SASE platform, integrating seamlessly with HPE Aruba Networking SSE for faster SASE adoption. SSE includes advanced security like ZTNA, SWG, and CASB, providing secure remote access and data protection. EdgeConnect SD-WAN also integrates with third-party cloud security vendors for flexibility.
Unified security posture
It's easier to apply universal security policies and centralized access controls across all traffic and locations to enforce Zero Trust access, reduce the attack surface and improve threat detection and response.
Reduced complexity
HPE Aruba Networking Unified SASE streamlines deployment. Networking and security functions are consolidated by eliminating the need for multiple-point solutions, hardware appliances and management platforms.
Optimized user experience
HPE Aruba Networking Unified SASE guarantees a secure, high-performance, low-latency connection to applications and resources by dynamically selecting the fastest connectivity path to support the best user experience.
Scalability
Customers can quickly adapt to changing business needs to support digital transformation initiatives such as hybrid work, cloud migration, edge computing, IoT and OT initiatives.
How to position the HPE Aruba Networking unified SASE platform
Promote targeted application access through zero trust
Emphasize how Zero Trust Network Access (ZTNA) offers finely-tuned access control, granting users and third parties appropriate levels of application access. Highlight that zero trust policies are designed to restrict access to the corporate network, thus maintaining application-level segmentation and concealing private resources from public internet exposure.
Highlight holistic cyber protection
Point out that a secure web gateway (SWG) acts as a robust shield against cyber threats like ransomware, malware and phishing. This is achieved through comprehensive inspection, scanning, and filtering of internet traffic. Further, stress the role of cloud access security broker (CASB) in safeguarding enterprise data in SaaS applications by identifying sensitive information, managing shadow IT risks, and preventing data leaks with stringent access and data transfer controls.
Focus on performance, security and modernization
Stress the importance of EdgeConnect SD-WAN in streamlining and safeguarding branch networks. Explain how it integrates various connectivity options such as MPLS, Internet and 5G, eliminating the need to redirect SaaS traffic through data centers. Also, stress its next-generation firewall features that can replace traditional security appliances and ensure the security of IoT devices within the network.
These key points will help you convey the comprehensive and multi-layered nature of SASE, showcasing its ability to provide effective, scalable and streamlined security solutions tailored to modern enterprise needs.
Finally, get customers talking about their IT and security needs:
- Do you have a cloud initiative? Which apps are you moving to the cloud?
- How do you connect your branch offices? With MPLS?
- Do you experience application performance issues in branch offices?
- How much time does it take to deploy new apps? New sites?
- What are your top IT goals and initiatives?
- What are your biggest challenges in managing your network today?
- Have you considered SD-WAN? SASE? Are you thinking about it as a key project?
How to deploy SASE
Once the customer is on board, your next job is to guide customers through the transition to SASE. A successful SASE deployment typically involves these five key steps:
- Identify SASE objectives and requirements. Start by helping your customers define their business objectives, specific use cases and what they need from SASE. Evaluate their existing network and security setups to identify areas for improvement.
- Advocate for a single-vendor SASE solution. Focus on capabilities, coverage, performance, scalability, reliability, support and pricing. Recommend a comprehensive SASE solution from a single vendor that promises ease of use, flexibility, integration and unity.
- Develop a SASE implementation plan. Work closely with your customers and the vendor to design a tailored SASE strategy. This should include setting up the network topology, security policies, user groups, application profiles and connectivity options. Your role here is vital to ensure that this process aligns with your customer's business goals.
- Guide a phased SASE deployment. Lead your customers through a gradual implementation of the necessary components, such as agents, connectors, SD-WAN devices or private PoPs, using a centralized management console. Advise them to migrate their users, devices, locations and applications in stages, ensuring SASE can coexist with existing solutions for a smooth transition.
- Optimize and expand SASE usage. As the deployment progresses, help your customers utilize the tools and dashboards the SASE solution provides. This will enable them to gain valuable insights, monitor the deployment and continuously optimize the setup.
More information
Aruba and HPE Aruba Networking
Working with Arrow and HPE Aruba Networking offers a valuable opportunity for channel partners. Arrow's expertise and support, combined with Aruba's reliable, fast, and secure networking solutions, create a powerful alliance. This partnership ensures you have access to the tools and resources to successfully sell HPE Aruba Unified SASE across sectors. Additionally, Arrow's complete portfolio of services, from pre-sales assessments to solution design and training, equips you with everything needed to meet customer demands effectively and grow your business.
Read to reach out to Arrow's dedicated HPE Aruba Networking team? Contact us today.
