The following is an excerpt from Netskope’s recent book Designing a SASE Architecture for Dummies. This is the sixth in a series of seven posts detailing a set of incremental steps for implementing a well-functioning SASE architecture.
Throughout this series, we repeat that the data center is just one more place people and data have to go—it’s no longer the center of attention. When you’re far along in your SASE implementation using NG-SWG, it’s time to reconsider the data center.
Perhaps a few applications that are either too unwieldy to move or too precious to let out of your sight remain in the data center. To access these applications, you could use Netskope Private Access, which eliminates the VPN while providing secure access from anywhere in the world.
As for all those other boxes and bits that have been replaced by NG-SWG services in a SASE architecture? This is your opportunity to dramatically reduce the complexity and upkeep cost of your network, with those old systems depreciating out of existence and receding into the past while you and your enterprise look forward.
Providing Secure Access to the Data Center
| Out with the Old | In with NG-SWG | Netskope NG-SWG Integrates with . . . |
|---|---|---|
| Firewalls, intrusion prevention system (IPS), Domain Name System (DNS) | Provides firewall protections as one of many services | Legacy data center controls for ingress |
True SASE yields ongoing operational cost savings. Table 5-6 shows a snapshot of what that can look like with a successful SASE implementation. Your finance people will be among the many stakeholders to thank you!
Ongoing OpEx Savings
| Domain | What Happens | Savings |
|---|---|---|
| Multi-cloud access | Enable multi-cloud strategy Improve user experience Streamline procurement and adoption Enable business unit–led apps | 30% on connection and infrastructure 20% on future cloud costs |
| VPN replacement | Remove VPN appliances Direct-to-Net traffic for bandwidth-heavy apps Reduce virtual local area network (VLAN) and firewall policy changes | 80% on hardware 50% on security changes and admin |
| Business partners | Manage third-party access Direct access to published apps Apply granular controls for activity Remove lateral movement opportunities | 80% on hardware 20% on support time |
| Mergers & Acquisitions (M&A) | Onboarding and integration become more efficient Consolidates current and future network and security costs Synchronizes policy | 40% on hardware Onboarding is five times more efficient |
If you’d like to read the complete Designing a SASE Architecture for Dummies book, you can download a complimentary copy here!
