As mentioned in Maslow's Hierarchy of Needs theory, in the process of "self-realization", after satisfying the basic physiological needs, people will have safety needs immediately. For enterprises, while implementing innovative models and applications, new network security requirements also follow. As cloud migration and remote office are gradually adopted by enterprises, SASE that adapts to their security protection needs has gradually emerged. Gartner statistics show that the SASE global market size has reached US$6.6 billion in 2022, and the market size will grow at a compound annual growth rate of 36% in the next five years. It can be seen that SASE services are in a period of rapid development and have brought new development directions for related cloud network service providers.

Recently, the SASE service track has ushered in another heavyweight player, DYXnet, the first line of the Internet technology sub-brand, officially released the SASE service. Xu Jie, the product director of the first line, said in an interview with all media reporters in the communication world: "I noticed that the current customer demand for security subscriptions is increasing, and the front line has accumulated a certain amount of self-research capabilities, which can be well integrated and balanced. With the original SD-WAN network capability and security service capability, the release of SASE by the first line is intended to realize the upgrade from a 'cloud network' service provider to a 'cloud network security' service provider through its own service transformation."

image1.png

Xu Jie, the first-line product director of Internet Technology, was interviewed by all-media reporters from the communication world

Strategic upgrade, SASE service is a "must-do step" for integrated development

"With the enrichment of scenarios such as cloud migration and remote office for enterprises, a single networking mode and the traditional mode of deploying firewalls in fixed branches of enterprises can no longer meet the multi-scenario access and security needs of enterprises. Considering the cost and security challenges comprehensively , SASE has gradually become the best practice solution by virtue of its ability to provide unified 'network + security' fusion services for enterprises," said Xu Jie.

Driven by the new trend, based on its own research and development capabilities, resource advantages and cloud-native technology, the first line promotes the upgrade of the network service architecture to the SASE service architecture, and provides customers with a full-stack solution of "cloud network security integration". Xu Jie said: "In terms of network, we have built 200+ POP nodes in 100+ cities, and our service capabilities cover 700+ cities around the world; Cloud, AWS and other mainstream public cloud manufacturers at home and abroad. In addition, in view of the current enterprises' increasing emphasis on network security services, we promote POP nodes to support SASE security service chain functions, upgrade to SASE POP, and provide SASE services such as ZTNA, SWG, and FWaaS Security services. In the future, we will continue to upgrade and expand SASE service capabilities, create customized network security solutions, and help enterprises build a secure and flexible IT architecture."

Build differentiated advantages and deepen demand scenario empowerment

Xu Jie shared: "Focusing on the vision of transformation and upgrading, whether the launch of new products can resonate with the industry and customers still depends on its own unique advantages. For the construction of differentiated advantages, the first-line SASE service has accumulated years of network service practice, as well as cooperation with well-known The experience of deep integration of security vendors has four major capabilities: agile delivery, flexible subscription, one-stop management and refined control."

For agile delivery , the front line can build a SASE POP within an hour at the fastest according to customer needs, helping them obtain security empowerment nearby; for flexible subscription , customers can subscribe to security and network services on demand throughout the service life cycle , for quick and flexible scaling; for one-stop management , the first-line SD-WAN & SASE management platform helps customers visualize and analyze the global network situation and security threats; for refined management and control , the first-line SD-WAN & The SASE management platform supports the orchestration of security and network policies to match the best network resources and security protection capabilities for different applications.

Not only that, while building its own advantages, the first line also extends its advantages into application scenarios and empowers them on demand, forming three main application scenarios.

For intranet security from headquarters or data centers to branches , enterprises can quickly build a secure intranet through SASE POP. SASE POP's IPS intrusion prevention system can analyze network traffic in real time and in depth based on the latest threat protection library, accurately detect and intercept known malware and intrusion attempts; for enterprises to access the Internet and SaaS services , enterprises can use SASE POP as a unified access exit. In order to converge the attack surface, SASE POP's SWG capability can prevent security threats hidden in the Web; in response to the needs of dispersed remote workers to access the corporate network , the first-line zero trust focuses on the identity of the visitor, giving them control over applications and data. The minimum operation authority, and real-time audit of terminal environment, personnel operation behavior and other factors, dynamically ensure access security.

Moving towards the integration of "cloud network security" and building a firm line of defense for enterprises

It is worth noting that in the process of the first-line comprehensive upgrade of SASE to achieve the integration of "cloud network security", it has redefined and upgraded products, architecture, delivery models, etc., improved multiple capabilities, and built a solid enterprise security defense line.

The first is to promote the integration of SD-WAN and SASE platform management capabilities. On the existing SD-WAN platform, the first-line integration supports various functions of the SASE security service chain, and flexibly calls the configuration and status of security components through APIs, helping enterprises to finely control the network and security posture through a unified platform.

The second is to promote the capability upgrade of the entire service delivery team. First Line focuses on cultivating the technical capabilities of security engineers, passing technical certifications from relevant security certification agencies and security vendors, improving its own "cloud network security" one-stop solution delivery capabilities, and ensuring SASE project delivery from an overall business perspective.

Finally, build an operational response center that integrates "NOC+SOC". With assets as the core and security incident management as the key process, Frontline has built a three-dimensional network security operation system based on "event analysis, risk analysis, early warning management and emergency response processing" to provide enterprises with dual network security support.

"From the construction of relevant capabilities mentioned above to the creation of comprehensive 'cloud network security' integrated services promoted by the front line, the final destination is service. Unlike professional security manufacturers who are good at security technology and security solutions , the front line still focuses on providing services. In future development, focusing on SASE services, the front line will cooperate with head security manufacturers to integrate their security functions and give full play to their respective strengths, thereby providing customers with full life cycle services. "Xu Jie added.

Follow the trend and embrace the “new blue ocean” of AI technology

At the moment when artificial intelligence is rapidly developing, the rise of AIGC and large models has brought more network and security requirements to enterprises. How to better meet customer needs and create its own advantageous services is also something that the front line has been thinking about.

Xu Jie believes that the opportunities and challenges brought about by the development of AI technology are mainly manifested in two aspects:

One is for external customer needs. Xu Jie said that many companies are currently beginning to adopt AI technology to improve work productivity, but they will also face security risks such as data leakage and the destruction of large AI models. For such scenarios, enterprises can implement in-depth monitoring and protect the security of core data and AI models based on the zero-trust network, IPS, and DLP protection capabilities of first-line SASE.

The second is to improve the capabilities within the front line. Xu Jie further introduced that AI technology is still developing, and the front line will gradually apply it to services to provide enterprises with intelligent and high-quality "cloud services" with intelligent and automated network security policy orchestration and operation models. Internet Security” service.

Hundreds of rivals compete for success, but only innovators advance. Sailing sails far, only those who work together will go far. To strive for the "main channel" of the digital economy, with policies as the guide and industry as the basis, promoting the integrated development of "cloud and network security" also requires gathering industry synergy to jointly build an industrial development ecosystem. On the occasion of the comprehensive upgrade of SASE services, we look forward to the front line continuing to help enterprises achieve digital transformation, accelerating collaborative innovation, and ultimately realizing efficient interconnection between "cloud network security" industries.