SASE Policy

According to the MEF Forum, SASE Policy is defined as “A policy that’s assigned to a SASE Session that determines how a SASE Service handles IP packets in the SASE Session.”

It is a defined set of rules for governing action. The policy mechanisms of SASE are leveraged to enforce the desired effect. SASE Policy is essentially a composite collection of policies that are prioritized and start from a position of zero trust. If all communication is denied or blocked until it meets the minimum requirements for authentication and authorization, then the service can effectively support secure communications. Once all the security-focused policy’s requirements have been met and the initiated communications session is allowed in the environment, then policies that forward and direct traffic can ensure that quality, path, performance, and other networking or applications policies are enforced.

At a high level, many SASE policies exist to collectively...