Action Items “ZTNA can be great in a SASE context, but not as a standalone component. “You still need to have defense-in-depth with access controls, policy controls, and behavioral monitoring and control. You have to have all three.” Rich Korn, Masergy “The choice of what to prioritize always begins with the question of what’s not working well. What do people complain about? What’s keeping people from being optimally productive? What causes end customers pain? Those are the places you want to start.” Mark Peay, Cato In addition to SD-WAN, ZTNA, CASB, SWG, and FWaaS, there is a number of other capabilities that should also be considered, including DNS protection, Remote browser isolation, sandboxing, and API/ application protection. Your Trusted Advisor will be instrumental in helping you to assess the full range of options. Start with a thorough review of your circumstances, and then build a strategy based on a three- to five- year time horizon leveraging a cross-functional team representing security, networking, compliance, Finance, IT management, and, of course, your Trusted Advisor. Copyright © 2021 AVANT Communications, Inc. AVANT | SASE 6-12 Report | 24
Top SASE Vendors Page 23 Page 25