Latest / CYBR.Signal / SASE vs SSE

Transcript

SASE vs SSE · CYBR.Signal

• 0:00
  SPEAKER_00: Hey everybody, happy Cyber Sunday, Michael Farnum here.
• 0:03
  SPEAKER_00: Hope you're doing well.
• 0:05
  SPEAKER_00: Want to talk today about some concepts that a lot of us heard have heard about over the last probably three years, and then a kind of a newer subset of that term that's been around for probably less than a year.
• 0:21
  SPEAKER_00: And what I'm talking about is the acronym called SASE, Secure Access Service Edge.
• 0:30
  SPEAKER_00: I always have to take a second on that one.
• 0:33
  SPEAKER_00: And then what I think would probably be considered a subset of that, which is SSE, which is Security Service Edge.
• 0:43
  SPEAKER_00: Now both of these terms were coined by Gartner, and y'all hear I'm pretty sure y'all have heard me talk about not liking some of the acronyms that come out, and it's almost like they're trying to make stuff up.
• 0:55
  SPEAKER_00: Um, but regardless, SASE is a pretty accepted acronym right now.
• 1:01
  SPEAKER_00: So um, but essentially what SASE was was uh an attempt to bring in all of these SD-WAN and software-defined networking and CASBI and all of these things and combine um access to whatever resources that you were gonna have, whether that was cloud, whether that was in your data center, whether that you had remote users, whether you had um remote offices still, whatever in a typical data center with a corporate office, whatever that is, that was an attempt to bring all of that networking and the security side of it together so you could secure the access across the board, and then and then give a common way of everybody connecting.
• 1:48
  SPEAKER_00: So SD WAN was in there as well, so software-defined, wide area networking.
• 1:53
  SPEAKER_00: And then what they did was break down this SSE to be more focused.
• 2:00
  SPEAKER_00: You can argue this, but it's really more focused on the remote user side of things and uh just the security that they have to get into whatever that is, whether cloud resources, data center, whatever, but not as focused on the networking side because it really just gave them a you know one-shot access into whatever resource you were looking at.
• 2:21
  SPEAKER_00: So the reason I wanted to find define all of those and explain how I see it, and I think which is pretty accepted across the board, those two definitions, um, is because it's leading from a point or coming from a point where the point I talked about last week, which was Intel and knowing your use case, um, and then kind of a combo of that, and when I talked about all of these feature gaps that you see in all of these startups, you really have to know when you're looking at a provider, one, what your use case is, are you trying to really just hit your remote users and you think you've got the rest of it, the networking kind of taken care of, or you do for now, and you need to focus on your remote users, which obviously has been a big issue over the pandemic.
• 3:05
  SPEAKER_00: Um, and then if whatever that use case is kind of tells you which one you want to focus on, and let's say you want to focus on just remote users for now, and so that's gonna kind of be the SSE and not the full-blown SASE or SASE, then you've got to look at your provider and figure out where they're coming from because there are some there are a lot of companies that have gotten into this space that came from either like the content delivery network space or they came from the SD-WAN space, or they started in the CASB space when everybody when SaaS was all of the newness and everybody was trying to secure access to um software as a service type applications.
• 3:50
  SPEAKER_00: So you really got to know that use case and then know where your providers who you're looking at to fulfill this need, which side of the coin they come from, because you could choose one that may not be as strong in us in one place uh uh in the security side as they are in the networking, and vice versa, they may be more secure in them in the networking, not the security.
• 4:13
  SPEAKER_00: Um, I think I said that right.
• 4:15
  SPEAKER_00: But hopefully you understand what I'm talking about.
• 4:18
  SPEAKER_00: Basically, so know again lesson I used last time, know your use case, and a lesson I used a while back.
• 4:23
  SPEAKER_00: Um, know where they come from and where they started, so you'll you can kind of figure out where their strengths are.
• 4:29
  SPEAKER_00: Make sure it fits the use case that you're looking for.
• 4:33
  SPEAKER_00: Hope that uh helps.
• 4:34
  SPEAKER_00: You got any questions, comments?
• 4:36
  SPEAKER_00: Please let me know below, and I'll see you next Cyber Sunday.