基于5G云网融合的SASE研究与实践  

Research and Practice on SASE Based on the 5GIntegration of Cloud and Networking

作　　者：李国良 李俊 亚森·艾则孜[2] 李秋阳 尹娜 Li Guoliang;Li Jun;Yasen Aizezi;Li Qiuyang;Yin Na(E-Surfing Internet of Things Technology Co.,Ltd.,Nanjing 210001;Department of Information Security Engineering,Xinjiang Police College,Urumqi 830013)

机构地区：[1]天翼物联科技有限公司,南京210001 [2]新疆警察学院信息安全工程系,乌鲁木齐830013

出　　处：《信息安全研究》2025年第3期287-294,共8页Journal of Information Security Research

基　　金：新疆维吾尔自治区自然科学基金项目(2024D01A55)。

摘　　要：企业在数字化转型中逐渐发展成集团多分支、服务上云、去中心化的模式,网络安全防护面临新的挑战.在研究5G与SASE技术基础上,提出一种基于5G云网融合的安全访问服务边缘(SASE)实践方案.将5G作为SD-WAN承载网络,连接数据中心、混合云及客户端,全国边缘部署安全接入POP节点,配置云访问安全代理(CASB)、安全Web网关(SWG)、零信任网关、防火墙即服务(FWaaS)等核心模块,按需在各模块中调用多种传统安全组件能力,实现从用户出发的安全监控、访问、拦截和审计的能力.实践表明,该方案在各类企业安全防护落地实践中具备可行性和有效性.In the context of digital transformation,enterprises are evolving into multi-branch conglomerates,adopting cloud-based services,and embracing decentralized models.However,this shift presents new challenges for network security.This article proposes a practical approach,based on the integration of 5Gand SASE technologies,for secure access service edge(SASE)implementation.Leveraging 5Gas the SD-WAN transport network,the proposed solution connects data centers,hybrid clouds,and client endpoints.It deploys security access points of presence(POP)nodes nationwide,equipped with core modules such as Cloud Access Security Broker(CASB),Secure Web Gateway(SWG),Zero Trust Gateway,and Firewall-as-a-Service(FWaaS).Additionally,traditional security components can be selectively employed within these modules to enable user-centric security monitoring,access control,interception,and auditing capabilities.Practical implementation of this solution demonstrates its feasibility and effectiveness in various enterprise security protection scenarios.

关 键 词：5G 云网融合 安全访问服务边缘 云安全 边缘安全云 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]