Home / IT as a service / Connect / Secure access (SASE)

Secure access (SASE) Access to one system at a time, wherever people work, without a VPN.

Secure access connects people to the systems they are allowed to use, and nothing else, whether they are at the office, at home or at a customer’s site. Internet traffic is checked on the way. We design, run and support it as part of Connect.

  • Check Point Advanced Partner

What a VPN does not solve

All or nothing

A VPN opens the network to whoever holds the password. One stolen password reaches everything behind it.

Slow connections

Traffic from a home office goes through the head office before it reaches the cloud. People notice, and switch the VPN off.

Unmanaged internet

At the café and the kitchen table there is no filtering. The laptop is on its own.

Different rules everywhere

The branch, the home office and the cloud each have their own rules. Nobody sees the whole picture.

What SASE and ZTNA mean

SASE: networking and security from the cloud

Secure Access Service Edge moves the network edge to the cloud. Private access, internet access, security for cloud services and links between sites are delivered as one service with one policy, instead of separate boxes at each location.

ZTNA: access per application

Zero Trust Network Access is the access model inside SASE. Each person gets the specific applications their role allows, checked per session against identity and device, and never the whole network.

This also applies to suppliers. A machine supplier who needs access to one control system for servicing gets exactly that, for an agreed period, and everything is logged.

Examples

The supplier who needs service access

Without secure access

A supplier needs access to one system for a week to service it. IT creates a shared VPN account. The account opens the whole network, and nobody removes it afterwards.

With secure access

The supplier gets a personal account with access to exactly that one system. The rest of the network is invisible. The access expires on Friday.

The new branch office

Without secure access

A firewall is ordered, shipped and configured on site. The site-to-site VPN takes weeks to tune, and the branch ends up with rules that differ from the head office’s.

With secure access

The equipment on site is connected, and the branch gets the same rules as everyone else.

What is included

Access to systems

For employees, consultants and suppliers: access to one system at a time, tied to who you are and which device you use.

Safe internet use

Employees’ internet traffic is filtered and checked for threats. This applies wherever they are, with the same rules as in the office.

Control of cloud services

You get control of which cloud services are used, and how. You see which tools employees actually work in.

Sites

Branches and production sites are connected under the same rules. Traffic takes the best route, with failover where a site has a backup line.

Who gets in

MFA and conditional access decide who gets in. The device is checked too: encryption, updates and protection.

Operation and support

Design, rollout, monitoring, changes and support by the same team that runs your network. Documented like the rest of Connect.

Connect, Workspace and Secure

Workspace covers each employee’s PC and Microsoft 365, Connect the network, and Secure the security services. You can buy all three under one agreement, or one at a time.

Contact

Tell us where your people work and which systems they need.