The mobile workforce has been growing over the years, but recent events, like COVID-19, have led to a sudden increase in remote workforce jobs, with many companies not prepared or able to quickly adopt technologies to securely enable the transition.
For companies seeking to securely connect and scale remote workforces – either temporarily or for the long haul – one option to consider is a cloud-based service. A Secure Access Service Edge (SASE) provides a fundamental solution for this need, as it combines networking services and security services delivered from a single cloud platform.
How remote workforce jobs have evolved
Years ago, working with technology and protecting users was relatively simple. Users commuted to an office where they used stationary desktop computers to access company resources via local area networks. As time went on, users were able to gain some mobility with laptops and occasionally connected to corporate resources with virtual private networks (VPNs).
Even before its recent rise, remote work was becoming more popular. The 2019 State of Remote Work Report revealed that 42 percent of remote workers plan to work remotely more frequently in the next five years, and that more than half of on-site workers want to start working remotely. Not only are users becoming more mobile, they are using multiple devices, such as laptops, tablets and smartphones, in order to be productive. Additionally, applications have been moving out of the data centre to the cloud, adding to the complexity.
SASE: providing connectivity with security
Traditional VPN technologies can still be used to apply some level of security and access but are not ideal for the rapidly changing environment and increasing performance expectations of users. The need for direct-to-internet connectivity from anywhere on any device, securely, has led to the adoption of technologies like Software Defined Perimeter (SDP) and Zero Trust Network Access (ZTNA).
ZTNA is a fundamental component of a SASE solution to implement the “never trust, always verify” philosophy and authenticate access to the cloud, restrict access and minimize data loss. ZTNA provides users access to organizational resources located in public or private clouds while the company has complete inspection and security over the data being accessed. However, ZTNA products based on an SDP can lack content inspection capabilities needed for consistent protection.
Some vendors blur the lines between the two technologies, but you should ask a few questions before adopting a solution, especially if rapidly deploying to previously unmanaged or unknown devices:
Q: Does the solution allow for specific controls on what applications and protocols a user/group can access?
Traditional VPN brings users fully onto the network with no control of their lateral movement. Segmented application access is essential for security purposes.
Q: Can my users access SaaS, private cloud and public cloud applications securely from a point of presence (POP) relatively close to their physical location?
Modern users have high standards for user experience and bandwidth. As applications move out of the data centre, applying security close to the user is essential to enable user productivity.
Q: Is it possible to inspect my traffic to ensure that malware prevention and data loss prevention (DLP) policies are applied?
Remote access creates an additional threat vector to organizational resources. If traffic is not inspected to apply DLP and anti-malware policies, the attack surface is significantly increased.
Q: Does the solution have functionality for unmanaged device access?
Users may require the ability to work using unmanaged devices, especially in critical situations. Allowing secure access to resources from unmanaged devices can reduce or eliminate shadow IT while enabling user productivity.
Q: Can my vendor handle peak bandwidth without disruption or outage?
Some vendors might be unable to handle significant increases in usage as organizations increase remote workforce jobs. It is critical that your vendor can dynamically scale to handle these situations and prevent service disruption.
Q: Does the solution provide the ability to connect to endpoints for troubleshooting or management needs?
Being able to connect to endpoints is extremely valuable for troubleshooting, management and support purposes to help you provide support for your users when they need you the most.
Q: How difficult is it to implement and transition from my hardware VPN solution?
Real world factors need to be considered when selecting a vendor. Ease of deployment, ease of management and time to value are key areas for any organization to evaluate. Ideally, SASE solutions should be manageable using as few administrative interfaces as possible and be quick to deploy based on existing policies.
A true ZTNA approach to secure connectivity
By considering these questions, you can ensure you are adopting a true ZTNA approach that will enable you, when ready, to onboard a SASE vendor. SASE is critical in enabling your users to work remotely with limited bandwidth disruptions and provides security while accessing the internet, SaaS applications, cloud applications and private data centre resources. As practitioners, we must enable our users to be productive while ensuring we take all the necessary security precautions. If a “Zero Trust” vendor isn’t inspecting traffic, are they really providing secure access?
To learn more about securing remote workforce jobs without compromising connectivity, contact your CDW Account Manager.
