A Framework Born from Necessity

Secure Access Service Edge, or SASE (pronounced "sassy"), was introduced as a concept by Gartner in 2019. At the time, it described a convergence that many enterprise IT teams desperately needed: combining wide-area networking (WAN) capabilities with comprehensive cloud-delivered security services into a single, unified framework.

Five years on, SASE has moved from analyst whiteboard to mainstream adoption. As organizations continue to grapple with distributed workforces, multi-cloud environments, and an expanding attack surface, the SASE model has become increasingly compelling.

What SASE Actually Includes

SASE is not a single product — it's a framework that typically combines the following components:

  • SD-WAN (Software-Defined Wide Area Network): Intelligent routing of traffic across multiple connection types (MPLS, broadband, LTE) to optimize performance and cost.
  • Zero Trust Network Access (ZTNA): Replaces VPNs by granting application-level access based on identity and device posture rather than network location.
  • Cloud Access Security Broker (CASB): Provides visibility and control over cloud application usage, including shadow IT detection.
  • Secure Web Gateway (SWG): Filters internet traffic, blocking malicious sites, malware, and policy-violating content.
  • Firewall as a Service (FWaaS): Cloud-delivered firewall capabilities that inspect traffic without requiring physical appliances at every location.

Why SASE Is Gaining Traction in 2025

Several converging trends are accelerating SASE adoption:

  1. Hybrid work is permanent: With employees splitting time between offices, homes, and travel, the concept of a fixed network perimeter has collapsed. Security must follow the user, not the location.
  2. Branch office sprawl: Retail chains, healthcare networks, and financial institutions with dozens of locations are finding traditional hub-and-spoke WAN architectures expensive and slow to scale.
  3. Security consolidation pressure: IT and security teams are stretched thin. Managing separate products for VPN, firewall, web filtering, and cloud access security is operationally burdensome. SASE promises to consolidate these into a single vendor relationship and management console.
  4. Cloud-first application delivery: When most applications live in the cloud (Microsoft 365, Salesforce, ServiceNow), routing traffic back through a central data center for inspection before it reaches the cloud makes little sense. SASE enables direct, secure cloud access.

The Vendor Landscape

The SASE market has consolidated significantly. Major players include Palo Alto Networks (Prisma SASE), Zscaler, Cloudflare, Cisco (with its Meraki and Umbrella stack), and Netskope. Traditional WAN vendors like VMware (now Broadcom) and Fortinet have also built out SASE offerings. Analysts distinguish between single-vendor SASE (one platform, deeper integration) and dual-vendor SASE (best-of-breed SD-WAN and security vendors partnered together).

Challenges and Honest Considerations

SASE isn't without its complexities:

  • Migration complexity: Transitioning from legacy MPLS and on-prem firewalls to a cloud-delivered model takes careful planning and phased execution.
  • Vendor lock-in concerns: Consolidating onto a single SASE platform creates dependency. Evaluate exit strategies and data portability before committing.
  • Cost clarity: SASE can reduce costs over time, but initial licensing across multiple security modules can be significant. Build a clear TCO model before purchasing.
  • Latency and PoP coverage: SASE performance depends on the provider's point-of-presence network. Verify they have strong coverage in your users' geographies.

Is SASE Right for Your Organization?

SASE is most compelling for organizations with:

  • Multiple office locations or a large remote workforce
  • Heavy reliance on SaaS applications
  • A desire to reduce the number of security vendors they manage
  • Existing SD-WAN deployments that need security integration

Smaller organizations may find that a focused Zero Trust approach combined with a modern firewall meets their needs without the full SASE stack. As with all major infrastructure decisions, align the solution to your actual environment — not the hype cycle.