Definition

Secure Access Service Edge - coined by Gartner in 2019 - converges WAN connectivity (SD-WAN) with cloud-delivered security functions (SWG, CASB, ZTNA, FWaaS, DLP) into a single platform delivered as a service. The architectural premise: as applications moved to cloud and users went hybrid, the security perimeter has to move with them rather than backhaul traffic to data centers. SASE is the broader umbrella that includes both connectivity (SD-WAN) and security (SSE). The pure-security subset is called SSE. Symantec's SSE stack - Cloud SWG, CloudSOC CASB, ZTNA - covers the security side of SASE; SD-WAN integration is via third-party partnerships (Cisco, Versa, etc.). For most enterprises in 2026 the practical question is "SSE first, SD-WAN second" since the security side has more immediate value.

Symantec products that implement this

  • Symantec Cloud Secure Web Gateway - Cloud-delivered web security with SSL inspection, URL filtering, sandboxing, content disarm, and CASB integration. The cloud successor to the ProxySG appliance.
  • Symantec CASB (CloudSOC) - Cloud Access Security Broker for SaaS - visibility into shadow IT, inline enforcement on sanctioned apps, API-based scanning for data at rest, and user behavior analytics.
  • Symantec ZTNA (Zero Trust Network Access) - Identity-and-application-aware Zero Trust access to internal apps. Replace VPN with per-app policy enforcement, posture checks, and least-privilege access for hybrid work.

Related terms

Deep-dives on SASE