secure access service edge<\/a> (SASE) builds off of SSE remote security to add software defined wide area network (SD-WAN) networks for location independent segmentation.<\/p>\n\n\n\nAll of these solutions play important roles in securing businesses, non-profits, and government agencies, but buyers need to fully understand their own needs to understand which product provides the best fit. Additionally, given the wide range of capabilities within any product category, or even the products from a specific vendor, buyers also need to fully test tools to ensure that the theoretical capabilities match needs and expectations.<\/p>\n\n\n\n
Use Case Comparisons<\/h3>\n\n\n\n
To best illustrate when and how to use SWG and firewall technologies, it helps to consider a variety of specific use cases. When exploring the needs to secure a headquarters, remote contractors, an international office architecture, or a cloud-based application, the benefits of and need for SWG and firewall solutions will vary considerably.<\/p>\n\n\n\n
Headquarters Protection<\/h4>\n\n\n\n
A municipal government maintains a central headquarters building (city hall) with a data center. Previously established firewall protection is sufficient but they want additional protection against rising internet threats. They might add an on-prem SWG appliance to improve the layers of security between users and potential threats.<\/p>\n\n\n\n
Remote Contractor Protection<\/h4>\n\n\n\n
A medical transcription company employs thousands of international and domestic contractors that use bring-your-own-device (BYOD) laptops and phones to access web-based applications (Google Docs, Office 365, Box, etc.). To protect against malware uploaded to company repositories, require all contractors to access resources through a secure web gateway that monitors up and down traffic for signs of trouble.<\/p>\n\n\n\n
Multi-Office Global Infrastructure<\/h4>\n\n\n\n
A growing restaurant chain continues to rapidly expand overseas and needs to protect a wide number of restaurant networks, branch headquarters, and even monitor remote users. Without the sunk cost of existing infrastructure, they can deploy FWaaS and SWG in tandem to protect a wide variety of network and user data connections with reduced deployment and configuration requirements.<\/p>\n\n\n\n
High Performance Web App<\/h4>\n\n\n\n
A streaming site builds cloud-based infrastructure to host and run the back-end applications to deliver video and audio content. Without users, much of the SWG features won\u2019t be useful for this environment, and even a powerful NGFW would cause too many delays with packet inspections. Instead, deploy simple packet-screening firewalls, WAFs, and database firewalls to protect specific components of the architecture with minimal operational delay.<\/p>\n\n\n\n
SWG & Firewall Considerations<\/h3>\n\n\n\n
To determine which solution or combination of solutions might be the best fit, a buyer needs to answer specific questions about how the technology will fit into the existing security stack and the resources available to use it. Honest answers to these questions filter out unrealistic hopes and deliver practical, functional solutions.<\/p>\n\n\n\n
Replace Existing Technology or Add-on More Technology?<\/h4>\n\n\n\n
An organization with extensive and older legacy solutions might be ready to rip and replace all solutions with a multi-purpose solution. However, a handful of expensive, recently purchased solutions make it more attractive to add on a separate solution to add specific features. Pick a full-featured SWG or firewall solution when performing rip-and-replace, or select a tool with the specific security features required when adding on to the security stack.<\/p>\n\n\n\n
What Architecture Is Required: Full-Control, Cloud, or SaaS?<\/h4>\n\n\n\n
Organizations with heavy compliance or secrecy needs require full control of all security controls in a local data center, but those prioritizing scalability requirements might prefer cloud-based solutions. SaaS solutions remove direct control and often reduce customization options, but organizations of all sizes enjoy the reduced maintenance and management demands of SaaS solutions. Select the correct SWG or firewall configuration to match the required architecture.<\/p>\n\n\n\n
How Much Delay Is Tolerable?<\/h4>\n\n\n\n
High speed applications and communications systems can\u2019t tolerate extensive packet and connection inspections. Data, connections, and security controls need to be streamlined to balance security with high speed data transmission. Different combinations of SWGs and firewall types can be used to perform specific security screens for different data flows within the network architecture for effective and rapid information transmission.<\/p>\n\n\n\n
Is There a Resource Match?<\/h4>\n\n\n\n
Each tool will require different financial and technical resources to install, configure, maintain, and operate the solution. When comparing solutions, factor in all expected expenses and labor requirements to ensure sufficient resources to effectively reach the tool\u2019s potential capabilities. This analysis will prevent the wasteful acquisition of expensive shelf-ware or a tool that can\u2019t be used effectively with the current resources.<\/p>\n\n\n\n
Does the Security Solution Fit the Existing Security Stack?<\/h4>\n\n\n\n
All security tools must fit into an existing security stack and processes without too many traumatic overhauls. Verify integration capabilities of the SWG or firewall under consideration with other related security tools such as IDS\/IDP<\/a>, privilege access management<\/a> (PAM), security information and event management<\/a> (SIEM), and network monitoring<\/a>. This will ensure smooth transitions and compatibility with existing processes.<\/p>\n\n\n\n<\/span>Bottom Line: Deploy Both SWG & Firewall Capabilities<\/span><\/h2>\n\n\n\nAs SWGs and firewalls continue to add features, advanced versions may reach the point where only one solution might provide effective security. Of course, that single solution will be quite expensive and complicated to implement, so expect more simple solutions to continue to satisfy needs for years to come. Once you figure out which solution(s) might be a good fit, contact the company for a demo and come armed with a list of features to explore in depth.<\/p>\n\n\n\n
SWGs and firewalls help to secure the network perimeter, to consider other solutions might be required for a full security stack, read more about network security architecture<\/a>.<\/strong><\/p>\n\n\n