SASE implementation
SASE implementation in Southern California
Zero trust access, cloud security and SD-WAN for organizations with remote staff, cloud apps and multiple sites.
The short answer
SASE moves network security to the cloud, so users get the same protection at the office, at home or on the road, and zero trust access replaces VPN. WCC designs and implements SASE on platforms including Cisco, Fortinet and Palo Alto Networks, migrating users in phases so work isn't disrupted.
What's included
The parts of a SASE design
| Component | What it does |
|---|---|
| Zero trust network access (ZTNA) | Replaces VPN with access to specific applications based on identity and device |
| Secure web gateway (SWG) | Filters web traffic and blocks threats wherever users work |
| Cloud access security broker (CASB) | Visibility and control over SaaS apps like Microsoft 365 |
| Firewall as a service (FWaaS) | Firewall protection delivered from the cloud for branches and remote users |
| Data loss prevention (DLP) | Stops sensitive data from leaving through email, web or cloud apps |
| SD-WAN | Connects offices over multiple internet links with smart routing and failover |
Platforms
Choosing a SASE platform
Fortinet FortiSASE
A natural fit if you already run FortiGate firewalls, with one management console.
Palo Alto Prisma Access
Strong threat prevention for security-focused and regulated organizations.
Cisco
Fits Cisco and Meraki environments, with Duo and Umbrella integration.
We also evaluate platforms such as Zscaler and Cato Networks when they fit better. See our technology partners.
How it works
How we implement SASE
Assess and choose
Review your firewalls, VPN, apps and users, then recommend a platform and design.
Fit before vendor
Pilot
Start with a small group, often IT staff and one department, alongside your current setup.
Prove it first
Migrate and retire
Move users in groups, then retire old VPN and web filtering once everyone is moved.
Managed SASE after
FAQ
SASE implementation questions
What is SASE?
SASE, or secure access service edge, combines networking and security into one cloud service. Instead of separate firewalls, VPNs and web filters at each office, users connect through the cloud, where security policies apply wherever they work.
What does a SASE implementation include?
Usually some combination of zero trust network access to replace VPN, a secure web gateway, SaaS visibility and control (CASB), cloud-delivered firewall, data loss prevention and SD-WAN for branch offices. We scope only the pieces you need.
Which SASE platforms do you work with?
We work with Cisco, Fortinet FortiSASE and Palo Alto Networks Prisma Access, and can evaluate other platforms such as Zscaler and Cato Networks. The right choice depends on your existing firewalls, users and applications.
How long does SASE implementation take?
Replacing VPN with zero trust access often takes about 6 to 10 weeks. A broader rollout covering web security, firewall and multiple sites usually takes about 3 to 6 months. We run the new platform alongside your existing tools and move users in groups to avoid disruption.
How much does SASE implementation cost?
Implementation projects typically run $25,000 to $150,000 or more depending on users, sites and scope. Platform licensing is a separate monthly cost per user, and SD-WAN hardware, where needed, is priced per site.
Is SASE the same as SD-WAN?
No. SD-WAN connects and routes traffic between offices and the internet. SASE adds the security layer on top, delivered from the cloud. SD-WAN is often one part of a SASE design. See SD-WAN installation.
Is SASE the same as zero trust?
Zero trust is the security approach: verify every user and device before granting access, and give only the access they need. SASE is one of the most common ways to put zero trust into practice. NIST SP 800-207 describes zero trust architecture.
Will SASE replace our firewall?
Sometimes. Cloud-first organizations with mostly remote staff can often retire branch firewalls. Organizations with data centers, plant networks or strict segmentation usually keep on-site firewalls and add SASE for remote and cloud traffic.
Get a recommendation
Talk to us about SASE
Tell us about your users, sites and current firewall and VPN. We'll recommend a platform and send a fixed project price.