About the Author
纳维队is responsible for leading service provider marketing, positioning Silver Peak as a key enabling channel for service providers to expand managed service offerings, become more customer-centric...
全生物
When we go shopping for new clothes, we often select different brands for shoes, shirts/blouses, or pants/dresses. We rarely select a single brand for all these clothing items simply because we want the best brand quality for each of those three categories. Similarly, when it comes to technology, why would we not want the best choice for networking and security technology platforms when it comes to SASE? Does one size fit all?
Sase是Gartner术语，用于描述已出现的安全访问服务边缘框架，以便将WAN和网络安全功能的融合定义为将支持企业数字转换计划的单个云交付的模型。Sase包括许多关键组件，因为我们在早期突出显示Sase博客和视频。
One of the key foundations of a SASE framework is a robust SD-WAN component. So how will enterprises and service providers evaluate and assess the networking and security technology components of a multi-vendor or single vendor SASE technology vendor solution?
对于大多数企业来说，软件定义的广域网（SD-WAN）被出现为将现有传统WAN的选择技术，以便于支持云第一环境的网络连接架构 - 其中大多数业务应用程序托管在云中而不是数据中心。高级SD-WAN解决方案Aruba EdgeConnect.SD-WAN边缘平台可以减少网络复杂性，提高应用程序性能，并在驻留在云中的用户和应用程序之间实现更有效的连接。Aruba EdgeConnect可以由组织部署为DIY（自己做）或作为来自托管服务提供商的托管SD-WAN服务的一部分。
The promise of SASE for service providers is to make it easier to deliver a converged or bundled managed networking and security service. As I wrote in a previousSase Blog.那service providers will likely need to revamp their existing siloed (separate security and separate networking) organizational structures to be able to deliver integrated managed networking and security services to enterprise customers, which is really what SASE is all about.
通过在现有的传输服务之上采用Sase架构，服务提供商努力创建可以支持客户要求的托管网络和安全练习。这使得服务提供商能够通过新的差异化服务加速上市时间。通过拥有传输提供连接到SASE框架的连接，服务提供商将值添加到端到端服务。最终，Sase的目标是为云托管应用程序提供更好的最终用户体验和安全性。
由于Sase部署处于采用生命周期的早期阶段，因此市场可能会看到清晰的方法。例如，中小型企业更有可能被全集的管理SASE产品所吸引，其中简单和“一站式购物”优先于高级功能。
另一方面，大型区域或全球企业将不愿意妥协安全，可靠性或用户体验的质量。他们将采用双供应商方法，配对最佳品种SD-WAN技术，支持多云的斜坡访问和先进的WAN面对功能，具有完全成熟的，最好的云交付的安全合作伙伴提供安全网站网关（SWG），云访问安全代理（CASB）和零信任网络访问（ZTNA）服务。对于SALE来说，所有企业和服务提供商都没有“一定尺寸适合所有”。
图1. SASE部署选项。检查标记=管理;diy =做你自己
SASE服务可以在各种部署选项中消耗，如图1所示。这五个部署方案突出了服务提供商也能够提供管理的SD-WAN或管理云安全服务，并支持实施自己的企业（DIY）SD-WAN或云安全解决方案。最近Ponemon调查，如图2所示，71％的企业受访者将在部署SAS架构的SD-WAN和云传递的安全性时选择最好的品种供应商。
图2所示。资料来源：Ponemon Institute。SD-WAN，SASE和零信任安全体系结构的状态。4月2021年4月
Service providers must consider offering multiple managed options to enterprises who may be at different stages of their SASE journey. Do they offer the best of breed SD-WAN and best of breed cloud security and hope that the integration between the chosen technology vendors works? How easy is it to integrate SD-WAN and cloud security solutions?
一个Aruba EdgeConnect.is a best-of-breed SD-WAN platform that has been integrated and proven with the leading network cloud security vendors, including Zscaler, Netskope, Check Point, iBoss, and Palo Alto Networks Prisma Access. This enables service providers to configure, deploy, and offer a SASE service providing their customers the flexibility of cloud-delivered security options without compromising on best of breed technologies. It also enables service providers to offer a solution for the SASE hybrid scenarios (rows three and four in the table above) and potentially offer an existing DIY enterprise a migration to a fully managed SASE service.
Sase是一个刚刚开始为大多数组织的旅程，服务提供商在整个历史中一直是网络和安全连接技术演变的一个组成部分。服务提供商应仔细考虑利用最佳品种SD-WAN平台的优势以及最好的云安全。采用这种Sase方法将帮助服务提供商根据单个技术供应商来减轻符合其管理SASE服务的所有组件的风险，并且它将将其作为客户的可值得信赖的顾问。
