A quick review of Security Service Edge (SSE)

Last week we briefly reviewed Secure Access Service Edge (SASE) and why it was a logical step in the transformation of business networking. Gartner researchers introduced the concept in 2019 in response to changing use cases and buying decisions. SASE is a concept that combines networking services and security services into one platform.

Gartner introduced Security Service Edge (SSE) in 2021, and it represents the security components of SASE. This concept allows companies to adopt a SASE-like approach to security without adopting the SASE networking solution. The complete SASE concept includes a handful of key components:

• ·Secure Web Gateway (SWG) — URL filtering, malware protection, firewall.
• Cloud Access Security Broker (CASB) — Granular access control for software-as-a-service (SaaS) applications.
• Zero Trust Network Access (ZTNA) — Provides secure access to company applications and services.
• Firewall-as-a-Service (FWaaS) – Cloud-delivered network security that can be combined with on-premises firewalls or ZTNA.
• Software-Defined Wide Area Network (SD-WAN) — WAN edge device that connects corporate sites and provides intelligent routing.

This is not a complete list, but it gives you an idea of the core SASE services. The simplest way to explain SSE is that it includes everything in the above list except SD-WAN.

Benefits of SSE

SSE describes a platform of comprehensive security that includes protection for endpoints, cloud workloads, and SaaS applications. It is a cloud-hosted service, though it may include some on-premises or agent-based components. The right SSE solution will improve multiple layers of security and reduce the complexity of endpoint protection. Some of the primary benefits of SSE are unified policy management, single-agent deployment, and simplified vendor management.  

So, what kind of company can benefit from SSE rather than SASE?  Here are some examples:

• SSE is the perfect solution for companies that are not 100% on-premises. Secure access to SaaS applications, cloud workloads, and other online resources can be improved with SSE protection.
• Recent research conducted by Avasta and commissioned by Barracuda showed that 38% of respondents will adopt a new security solution after a breach, and 37% will change security based on the results of a cybersecurity assessment. These companies want to leverage the benefits of SSE but often do not need adjustments to their networking solutions.
• Companies looking to replace VPNs, RDP access, or legacy security solutions will reduce IT overhead with a consolidated security platform. These companies will also improve user experience and increase security around remote access with an SSE platform. This may be a more immediate need than a network upgrade. Companies can adopt the security pillar of SASE now and add the networking pillar when they’re ready.
• Some organizations have special configurations or proprietary networking components that aren’t compatible with SD-WAN. These companies can still leverage the benefits of consolidated, cloud-based security services.

Industry research has found that most respondents see value in SSE and are likely to consider adoption in 2023. Visit our website for more information on Barracuda network protection and cloud security products.