Cloud Access Security SSE/CASB

A cloud service that controls users' access to the internet and SaaS applications regardless of location: secure web gateway (SWG), CASB and ZTNA on one platform.

When you need it

• If employees are mostly outside the office and traffic does not pass through the company firewall
• If dozens of SaaS applications are in use and nobody knows which data goes where (shadow IT)
• If managing box firewalls at many branches is becoming hard

When you do not need it

• If most employees are in the office and few SaaS apps are used, your current firewall's web filtering is enough.

Agent on the user device + cloud PoP. Usually bought together with ZTNA as part of a SASE transformation.