SASE云安全研究与实践  

Research and practice of SASE cloud security

作　　者：叶朝阳 王欣 张士聪 詹智勇 刘伊莎 YE Chaoyang;WANG Xin;ZHANG Shicong;ZHAN Zhiyong;LIU Yisha(Zhejiang Province New-Type Internet Exchange Point Co.,Ltd.,Hangzhou 311215,China)

机构地区：[1]浙江省新型互联网交换中心有限责任公司,浙江杭州311215

出　　处：《电信科学》2022年第1期140-149,共10页Telecommunications Science

摘　　要：互联网发展到今天,与传统网络相比已出现了翻天覆地的变化,在当今网络的变革中,“云化”成了企业IT架构演进的主流方向,因此对云安全的要求也越来越高,主要介绍了通过SASE云安全架构的实践部署,解决客户上云安全问题。提出了独特完整的SASE解决方案,该方案将安全功能与SD-WAN功能结合,构建统一管控平台、集中部署核心安全资源池按需调用,实现对恶意软件或恶意活动的实时监控、智能分析和自动拦截。实践证明该方案在统一管控、入侵检测与防御、精细化访问控制等方面达到预期效果,能够充分保障企业的云上安全。With the development of the Internet today,earth shaking changes have taken place compared with the tra-ditional network.In today's network reform,"cloud"has become the mainstream direction of the evolution of enter-prise IT architecture,so the requirements for cloud security are becoming higher and higher.The practical deploy-ment scheme of SASE cloud security architecture was introduced to solve the problem of cloud security for custom-ers.A unique and complete SASE solution was proposed,which combined security functions with SD-WAN func-tions,and realized real-time monitoring,intelligent analysis and automatic interception of malware or malicious ac-tivities by building a unified management and control platform and centralized deployment of core security resource pool.Practice has proved that the scheme achieves the expected results in unified management and control,intrusion detection and defense,fine access control and so on,and can fully ensure the cloud security of enterprises.

关 键 词：云安全 SASE SD-WAN 

分 类 号：TN929[电子电信—通信与信息系统]