Book Image

Diving into Secure Access Service Edge

By : Jeremiah
Book Image

Diving into Secure Access Service Edge

By: Jeremiah

Overview of this book

The SASE concept was coined by Gartner after seeing a pattern emerge in cloud and SD-WAN projects where full security integration was needed. The market behavior lately has sparked something like a "space race" for all technology manufacturers and cloud service providers to offer a "SASE" solution. The current training available in the market is minimal and manufacturer-oriented, with new services being released every few weeks. Professional architects and engineers trying to implement SASE need to take a manufacturer-neutral approach. This guide provides a foundation for understanding SASE, but it also has a lasting impact because it not only addresses the problems that existed at the time of publication, but also provides a continual learning approach to successfully lead in a market that evolves every few weeks. Technology teams need a tool that provides a model to keep up with new information as it becomes available and stay ahead of market hype. With this book, you’ll learn about crucial models for SASE success in designing, building, deploying, and supporting operations to ensure the most positive user experience (UX). In addition to SASE, you’ll gain insight into SD-WAN design, DevOps, zero trust, and next-generation technical education methods.
Table of Contents (28 chapters)
1
Part 1 – SASE Market Perspective
7
Part 2 – SASE Technical Perspective
15
Part 3 – SASE Success Perspective
20
Part 4 – SASE Bonus Perspective
Appendix: SASE Terms

SD-WAN Experience

Based on the broad market failure of SD-WAN projects, service providers that studied their failure and adapted their strategy based on that hard education have been able to help clients achieve SD-WAN success. The organizations that have successfully installed SD-WAN across all or the majority of their sites have leveraged many of the lessons learned from the failed projects.

Today, there are production SD-WAN networks that consist of more than 10,000 sites. These implementations are generally a hub-and-spoke or dual hub-and-spoke design. Over time, the mechanisms required for successful full mesh designs will be refined allowing full mesh with minimal overhead. The early days of SD-WAN required three to five times the hardware cost to support the active management of large quantities of tunnels. Compare this with the fact that the average router installed over the history of routing managed one connection that had no encryption. The processor overhead for tunnel...