Remote work has fundamentally transformed the workplace, prompting companies to reconsider how to ensure secure access to data and applications. The answer lies in Security Service Edge (SSE).
Global Secure Access
Remote work has fundamentally transformed the workplace, prompting companies to reconsider how to ensure secure access to data and applications. The answer lies in Security Service Edge (SSE).
Security for a connected work environment
Microsoft introduces Global Secure Access, a central Security Service Edge (SSE) solution for security management that operates both in the cloud and on-premises. Comprehensive security is achieved through the integration of Zero Trust principles, which emphasize robust identity protection and conditional access. This allows for the granular establishment of different rule sets for specific services, whether they are cloud-based or on-premises. Discover the details of how Microsoft's Security Service Edge (SSE) functions in our webcast on the topic.
Microsoft's Security Service Edge (SSE)
Global Secure Access is designed to deliver security services through the cloud, supporting managed devices across all major platforms. This includes integration with identity providers and security tools such as XDR or SIEM.
The architecture of the SSE solution is divided into two main areas, each with different components:
- Internet Access features an identity-centered Secure Web Gateway (SWG) that functions similarly to a forward proxy. It not only protects against malware and other threats but also performs URL category filtering.
- Private Access is an identity-centered Zero Trust Network Access (ZTNA) solution that allows granular and consistent access to non-public applications regardless of their location, implementing detailed context-based access control.
Integration
Entra Governance
- Integration with Identity & Access Management and Identity Governance features of Entra
- App segments are mapped as enterprise apps
- Uses features such as dynamic groups and access packages
Conditional Access
- Integration in Conditional Access right from the start
- Securing defined resources with Conditional Access
- Use of the solution as an access condition for resources
XDR & SIEM
- Integration with Microsoft's own security products
- Use of the logs generated by Global Secure Access in Sentinel
- Direct influence of the device risk from Defender for Endpoint on Conditional Access
- Announced integration with Defender for Cloud Apps as a CASB component in XDR
Use Cases
