Introduction to SSE
SSE (Security Service Edge) is the security component of SASE (Secure Access Service Edge). It encompasses a set of security services delivered from the edge of the network, ensuring secure access to applications and data.

Core Components of SSE
The core components of SSE include ZTNA (Zero Trust Network Access), CASB (Cloud Access Security Broker), SWG (Secure Web Gateway), and FWaaS (Firewall as a Service).

ZTNA (Zero Trust Network Access)
ZTNA is a security architecture that enforces strict access controls. It ensures that only authenticated and authorized users, endpoints, and applications can access other users, endpoints, and applications. This model minimizes the risk of unauthorized access by assuming no implicit trust, even within the network.

CASB (Cloud Access Security Broker)
CASB helps organizations discover and manage cloud applications in use. It controls shadow IT (unauthorized applications) and blocks risky apps according to the organization’s security policy. CASB provides visibility and control over cloud service usage to prevent data breaches and ensure compliance.

SWG (Secure Web Gateway)
SWG controls and protects corporate web traffic by shielding users and machines from malware, threats, and enforcing web access policies. It acts as a barrier between the organization’s network and the internet, filtering harmful content and preventing unauthorized access to malicious websites.

FWaaS (Firewall as a Service)
FWaaS filters network traffic based on predefined security policies. It leverages multiple security zones to contain internal threats and reduce lateral movement within the network. This cloud-based firewall service provides scalable and flexible protection without the need for physical hardware.

Additional Capabilities of SSE
SSE also includes capabilities such as quick detection and blocking of access to zero-hour malicious entities (newly discovered threats). It provides holistic situational awareness of the network, enabling organizations to respond immediately to cyber attacks and maintain a strong security posture.

Introduction to SASE
SASE (Secure Access Service Edge) is a technology framework that delivers both WAN (Wide Area Network) and security controls as a cloud service, located close to the edge of the network. It is also referred to as Zero Trust Edge (ZTE), emphasizing its focus on zero trust principles.