Firewall as a service (FWaaS) refers to the cloud-based, subscription-based delivery of capabilities commonly associated with firewall hardware. These capabilities include access controls, advanced threat prevention, intrusion prevention systems (IPS), DNS security, packet filtering, network monitoring, deep packet inspection, and Internet Protocol security (IPsec), typically managed from a single pane of glass. “The firewall inspects inbound outbound traffic, whereas a secure web gateway is for the Internet and is literally a proxy, so if anything bad is happening, it’s happening in the gateway before it gets to you,” said Niko O’Hara, senior director of Engineering at AVANT. “SWG is an additional layer of internet security on top of having a firewall.” Cloud Access Service Broker (CASB) Cloud access security broker, referred to as “CASB,” is software that allows businesses to safely use the cloud by monitoring user activity and enforcing security policies between users and cloud applications. It is a type of Identity and Access Management technique that is used to regulate who or what can view and use resources in a computing environment. Specific data loss prevention policies can enable the detection of sensitive data in the network and stop that data from being transferred. This capability has become increasingly important as “shadow IT’ and the work-from-anywhere” models have gained momentum. Secure Web Gateway (SWG) A secure web gateway, (SWG), enforces policies, supports regulatory compliance, and blocks unwanted and harmful traffic from entering a company’s network. This is accomplished through a combination of malicious website detection (URL filtering), application controls, malware blocking (malicious code detection), and intrusion detection and prevention. Remote Browser Isolation (RBI) Remote Browser Isolation is a technology that enables the user to access websites or applications over a separate server that then sends an image of that web page to the user’s computer without actually accessing the resource from the user’s machine. “You’re looking at an image instead of being on the website, itself, with a local browser,” said AVANT’s Niko O’Hara. Copyright © 2021 AVANT Communications, Inc. AVANT | SASE 6-12 Report | 16