Secure Service Edge Platforms
Best Secure Service Edge Platforms include:
Cisco now offers OpenDNS Umbrella Web Filtering. Cisco acquired OpenDNS in August 2015, and rebranded the product as Cisco Umbrella.
Prisma Access from Palo Alto Networks is designed for SASE to deliver the networking and security that organizations need in a purpose-built cloud-delivered infrastructure. Prisma Access uses a common cloud-based infrastructure that delivers protection from over 100+ locations around…
Embracing a secure access service edge (SASE) architecture, Netskope's NewEdge is a security private cloud that powers the real-time, inline security services of the Netskope Security Cloud allowing security to be deployed at the edge where and when it’s needed.
Forcepoint ONE is a cloud platform that enables users to adopt Zero Trust and Security Service Edge (SSE, the security component of SASE), unifying crucial security services, including Secure Web Gateway (SWG), Cloud Access Security Broker (CASB) and Zero Trust Network Access (ZTNA)…
Lookout's Secure Access Service Edge (SASE) solution transforms legacy perimeter security into a set of cloud-delivered, converged network and security capabilities that are available when and where they are needed. Lookout Security Service Edge (SSE) integrates CASB, ZTNA, SWG and…
Skyhigh's Security Service Edge (replacing McAfee's MVISION Unified Cloud Edge) secures data across the web, cloud (SaaS, PaaS, and IaaS), and private apps—from anywhere, any application, and any device. The solution provides data visibility, data loss prevention, and advanced threat…
The iboss Zero Trust Edge, from iboss headquartered in Boston, aims to prevent breaches by making applications, data and services inaccessible to attackers while allowing trusted users to securely and directly connect to protected resources from anywhere.
Proofpoint Cloud App Security Broker (CASB) secures applications such as Microsoft Office 365, Google’s G Suite, Box, and other services, providing visibility and control over cloud apps.
Lumen® SASE Solutions unify network and security management for a distributed enterprise. A centralized, cloud-based experience is offered to make it easy to design a solution, then add sites and users. It provides a unified view of network traffic and security operations to drive…
Check Point’s Harmony Connect, bolstered with technology acquired with Odo Security in November 2020, is a Secure Access Service Edge (SASE) Solution, that unifies 11 different cloud security services, is built to prevent sophisticated cyber attacks, and is designed to improve the…
The Zscaler Cloud Security Platform is a SASE service built from the ground up for performance and scalability. As a globally distributed platform, users are a short hop to their applications, and through peering with hundreds of partners in major internet exchanges around the world…
What are Secure Service Edge Platforms?
Secure Service Edge (SSE) platforms secure cloud-based services, web access, and applications. SSE’s cloud framework brings together Cloud Access Security Broker Services (CASB), Zero Trust Network Access (ZTNA), Secure Web Gateways (SWG), and Firewall-as-a-Service (FWaaS) capabilities. It provides threat protection, access controls, application, and data security. Secure Service Edge platforms facilitate the management of complex security and access requirements without adversely impacting application users. SSE evolved from Secure Access Service Edge (SASE).
Similarities and Differences between SSE and SASE
Both platforms offer unified cloud-based solutions that bring together network access and security components. In SSE user security features are emphasized over network connectivity features. SSE provides security to networked services, while SASE balances security for users with networking functions that can support a range of network services, data, and applications across multiple, large, distributed networks. SASE’s functions also include Privileged Access Management, Identity Management, and networking capabilities.
SSE can be considered a subset of SASE, as SASE installations will include SSE solutions while SSE implementations do not require the full range of SASE functionality. Unlike SASE, SSE implementations do not include SDWAN services, WAN optimization, or Quality of Service (QoS) features. SSE is geared toward end users and can have a narrower focus on securing access to cloud services and applications for a single business unit or location.
Secure Service Edge Platforms Features
Secure Service Edge platforms include many of the following components and features:
- Secure access to cloud services across SaaS, IaaS, and PaaS
- Secure access to the web and applications
- Cloud Access Security Broker Services (CASB)
- Zero Trust Network Access (ZTNA)
- Secure Web Gateways (SWG)
- Firewall-as-a-Service (FWaaS)
- Cloud Data Protection (CDP)
- Cloud Security Posture Management (CSPM)
- Cloud Browser Isolation (CBI)
- Threat Detection
Secure Service Edge Platforms Comparison
Consider the following when purchasing Secure Service Edge platforms.
SSE vs SASE: SSE can be implemented incrementally as a path to a complete SASE solution, involving less cost and complexity while still being sufficient to safely secure a remote workforce. A SASE solution will involve more planning but will comprehensively address, a wide range of cloud-based resources, IoT, edge computing, network traffic controls, and WAN acceleration,
Licensing options: Many vendor platforms offer both SSE and SASE with licensing options that facilitate upgrading from SSE to SASE as needed.
Single Vendor vs Multiple Vendor Approach: It is possible to build out an SSE framework with all its components coming from a single vendor or by picking and choosing components from multiple vendors. A single vendor approach simplifies installation, integration, and support, while a multi-vendor approach can potentially offer additional or enhanced functionality.
Business IT infrastructure and requirements vary greatly, thus businesses will benefit by obtaining a custom price quote based on their environment and needs. Pricing is driven by the number of locations and users. Prices begin at around $130 and range to a few hundred dollars a month per location with the additional cost of $6 to $10 a month per user.