What SASE brings to SD-WAN

OP-ED · 1 APRIL 2022
By Jérôme Beaufils · Lire en français
Since it appeared almost 10 years ago, SD-WAN has allowed companies to increase Internet access performance while reducing WAN infrastructure costs, especially MPLS. The explosion of the Cloud, mobility and cyber threats has exposed the limits of SD-WAN.
This is one of the reasons that led Gartner to create the SASE model.
SASE fills 5 gaps in SD-WAN.
1. Advanced security
To guard against cyberattacks, companies with SD-WAN must invest in additional appliances (NGFW, IPS, proxy, network anti-malware, etc.), which generates setup, licensing and maintenance costs.
The SASE model has a security stack built into the Cloud that secures remote sites and mobile users in the same way, while reducing the local attack surface.
2. Mobility
The hybrid model (based in particular on remote work) is here to stay. Employees and partners access the information system from anywhere. SD-WAN is meant to replace MPLS and was not designed for this.
The SASE model connects users automatically to the nearest PoP, with the same level of security and optimised performance (without backhauling traffic).
3. Cloud-ready
Connectivity to Cloud providers (private or public) and SaaS is essential for business agility and access to business applications. SD-WAN is limited in this respect and requires proprietary appliances and costly network connections (ExpressRoute, etc.).
SASE, on the other hand, relies on Cloud data centres natively connected to these Cloud instances and SaaS applications, with no integration needed.
4. Performance
Global connectivity is a major business issue.
SD-WAN relies on third-party Internet backbones that are unpredictable and therefore uncontrolled.
The SASE model includes a private, global, optimised and guaranteed backbone.
5. Simplicity
The diversity of applications has created complexity. IT teams need technologies that reduce their workload, not add new difficulties.
SD-WAN and its separate security products create an operational burden (management, build, run, troubleshooting).
SASE brings all its network and security features together in a centralised, unified and consistent interface.


