Identity-centric SASE with Cisco SD-WAN and Microsoft’s Security Service Edge Solution

In today’s rapidly evolving IT landscape, enterprise WAN requirements have evolved with hybrid work becoming the norm. Security for both on-premises and cloud workloads is crucial, especially for secure access to the internet, Microsoft applications, and other critical office applications. Organizations need a flexible solution that protects against advanced threats, optimizes application performance, and simplifies network management.

Cisco Catalyst SD-WAN offers unparalleled choice, meeting customers where they are in their security journey and supporting an open ecosystem. Catalyst SD-WAN allows customers to build secure access service edge (SASE) architectures tailored to their business needs by seamlessly integrating with a broad spectrum of third-party secure service edge (SSE) vendors and, now, Microsoft.These integrations help organizations maximize their investment in cloud security by simplifying the integration process with Catalyst SD-WAN.

Bridging the Gap Between Networking and Security

With Cisco Catalyst SD-WAN and Microsoft, businesses can enjoy a more unified and consistent experience for networking and security, all managed through a single dashboard.

The new integration with Microsoft’s Security Service Edge solution (SSE) bridges the gap between connectivity and protection, ensuring that data transmitted across the network is not only optimized for performance but also safeguarded against threats. Combining Cisco Catalyst SD-WAN with Microsoft’s SSE solution delivers a resilient, high-performance, and scalable WAN alongside a comprehensive suite of cloud-based security services designed to protect data, manage risks, and ensure compliance.

Key Benefits of the Microsoft’s SSE Solution Integration

Cisco Catalyst SD-WAN and Microsoft’s SSE solution integration provides secure access to the internet and SaaS applications with an identity-centric secure web gateway (SWG). This integration enhances the security of branch internet traffic by efficiently redirecting it through Microsoft Entra Internet Access, part of Microsoft’s SSE solution, for secure inspection, helping ensure that traffic from branch edges to the public internet or SaaS applications is thoroughly protected. The result is a secure networking solution that offers peace of mind and operational efficiency for enterprise customers.

• Enhanced security posture: Branch internet traffic is securely redirected to Microsoft’s Security Service Edge solution for advanced inspection and protection against internet-based threats, helping to ensure secure access to public internet and Microsoft SaaS applications. IT teams gain AI-powered visibility into network traffic and security events, enabling fast detection and response to threats.
• Improved cloud security: The integration leverages Microsoft’s advanced security capabilities to protect against malicious internet traffic and other cyberthreats with a comprehensive, cloud-delivered network security toolset that includes web content filtering, threat protection, information protection, and identity management.
• Seamless deployment and configuration: This integration simplifies the deployment and management process by providing an integrated solution for both networking and security. A single solution helps you to reduce operational complexity by eliminating the need for multiple point products, simplifying management, and helping you deliver a unified experience for your users. With a few clicks users can deploy thousands of branches, providing ease of configuration and the added advantage of using a Cisco validated design. Templatized workflows using SIG templates makes setup easy with end-to-end validation and enables organizations to quickly deploy new applications and services.

How Microsoft’s SSE Solution Integration Works

• Secure tunnels: Secure tunnels are created for advanced inspection, helping ensure that traffic to the internet and Microsoft SaaS applications is securely managed and enhancing bandwidth at the branch. Multiple tunnels with load balancing and ECMP give users the ability to select the nearest PoP/DC, perform an application health check through the tunnels, and steer traffic through the right tunnel.
• Traffic redirection: Relevant traffic from SD-WAN branch edges is efficiently redirected to Microsoft’s SSE solution. Users are able to select specific users and traffic, such as applications or IP addresses, to be sent to Microsoft via tunnels instead of sent directly to the internet. Enabling traffic redirection gives users granular control over traffic and allows remote workers to connect to the internet securely.
• Inspection and protection: Microsoft’s SSE solution inspects the traffic to provide robust protection against threats. Microsoft Entra Internet Access enforces unified access controls through a single policy engine and leverages multiple Entra ID integrations, including universal conditional access and continuous access evaluation (CAE), token theft protection, and data exfiltration controls.

Looking Ahead

As enterprise WAN requirements continue to evolve with hybrid work becoming the norm and applications spread across hybrid cloud and SaaS environments, both on-premises and cloud workload security are crucial. Organizations need a solution that protects against advanced threats, optimizes application performance, and simplifies network management. The Cisco Catalyst SD-WAN and Microsoft’s SSE solution integration is a forward-looking response to this need, offering businesses a powerful tool to navigate the complexities of modern networking and security challenges.

Source: cisco.com