Is SASE/SD-WAN a foolproof solution for ensuring remote workers access your system securely?
Sort By:
Oldest
Head of Information Technology3 years ago
We used Okta with Device Trust and that works pretty well for ensuring that people are accessing at least some of the applications from devices that we manage. That works well for the most part. Of course, there are super smart people that can figure their way around it. It's not bad, but the new chip added to the latest Mac OS has thrown some kinks in that. They're going to be re-releasing all of Device Trust.Co-Founder, SVP, CISO3 years ago
When I was at Atmel Semiconductor, we had 20 data centers all over the world, so we had our office in a suitcase—all we needed to do was connect and it had everything. This was before SD-WAN, but we had a firewall, WiFi, and we had some IP phones that we could just put out in a conference room. It would set up a point-to-point VPN and once you plugged it in, you had everything, including a file server. It was a pretty hefty suitcase.We did a lot of M&A, so it was like, "Okay, we're going to Germany now. Bring the suitcases." We could just get the biggest conference room, open up the suitcase, plug it in and have a complete office within 15 minutes. I imagine that would work at places like WeWorks, but you need to engineer that and produce a bunch of them.
CISO in Software3 years ago
I miss the good old secure days when we had a private internet connection from your office to Equinix and then your internet core was at Equinix. Then you had ExpressRoute or Direct Connect to your cage. Everything was happy and fast and good, but things change and now we're all remote.
And all these remote workers are working without agents, I assume. You could have CrowdStrike, SentinelOne, etc., but I still haven't found a good way to keep the end-users safe. We just have Macs and use SentinelOne. I don't know if it does anything.
Director of Enablement4 months ago
Yes, and no. Yes: SD-WAN is a technology that allows you to move faster, deploy quicker and manage easier. SASE on the other hand is a framework that enables and empowers you to make the right business decisions. A core pillar of SASE is ZTNA, which should constantly interrogate the user and device to validate they are who they say they are, and they are accessing resources they’re meant to. When done right, SASE is a game changer. However..
No: you cannot buy a tool or product to give you foolproof protection. People are inherently vulnerabilities, and they will find ways to circumvent your technology. Solutions can help your journey, but if you don’t deploy things correctly (or have the time to ensure your policies are correct), then you might just end up spending 7 figures to bring more security holes into your network.
Director of IT in Energy and Utilities4 months ago
I think the future of SD-WAN is a question mark. There is a potential for the concept of the WAN to go away totally and be replaced with communication that is inherently not trusted among a ton of end points. The end points can be an end user device, appliance like a printer or a vending machine, a server or anything else that is defined by those who manage the communication