Page 265 - Cyber Defense eMagazine September 2025

policy with specific configurations can be assigned to selected SASE gateways to meet business
requirements alongside a policy with common configurations.

Centralized Orchestration and Data Lake

The cloud-native orchestration and Data Lake platforms are essential in SASE architecture.

Data Lake Platform

All SASE gateways send the statistics, security logs, and alarms to a centralized data lake platform. The
data lake platform is integrated with User and Entity Behavior Analytics (UEBA) that correlates all logs
into actionable threat intelligence. Troubleshooting becomes easier as the operations team can quickly
review the logs or reports to determine the root cause and apply the workaround or direct fix. Machine
Learning (ML) is also integrated to further enhance the capabilities of MLOps. The platform now baseline
the user and device behavior. Any deviation from this behavior would notify the operations teams to take
corrective steps promptly. This further reduces the MTTD and MTTR.

Orchestrator Platform

The orchestrator platform simplifies the work for operations and design teams. The teams can easily

1. Create policies through workflow and apply them to all SASE gateways at once.
2. View any gateway that is out of sync from the configuration perspective.
3. Upgrade, downgrade, and rollback configurations to minimize service disruptions.
4. Navigate to the analytics tab to analyze logs and generate reports for the business teams.

Reduction in Cost

SASE significantly lowers CapEx and OpEx because enterprises no longer need to deploy multiple
solutions. SASE provides comprehensive SDWAN and SSE features on a single platform. SDWAN
replaces MPLS circuits with broadband, reducing WAN costs substantially. It also offers networking
services like DHCP, QoS, Multitenancy, routing, and switching. SSE features include SWG, CASB,
FWaaS, DLP, and ZTNA. Operational expenses are also decreased since enterprises can utilize an
orchestration platform for automation and policy management, as well as a Data lake platform to
decrease MTTR and MTTD. The entire solution is cloud-native, resulting in significant cost reductions in
power costs, and a smaller number of technicians is required during an outage situation.

SASE Client Registration and Gateway Connection

The SASE client is an agent used to connect to the SASE gateway. The first phase is for the client to
register with the gateway. During registration, the user authenticates through Single Sign-On or Multi-

Cyber Defense eMagazine – September 2025 Edition 265
Copyright © 2025, Cyber Defense Magazine. All rights reserved worldwide.