大型企业SASE解决方案及应用实践

摘要：针对大型企业的数字化转型和提升安全防护水平的需求，基于安全访问服务边缘（SASE）架构设计了企业一体化安全运营系统Q-SASE及其技术实现方案。Q-SASE 不仅可以对分支机构众多的企业提供统一安全防护水平、统一安全访问策略和统一安全运营能力，还可以在后疫情时代支持移动办公场景的终端身份管理和可信安全接入。在大型企业中的落地实践验证了Q-SASE 技术方案的可行性和有效性。

关键词：SASE；云安全资源池；零信任；网络安全态势感知；安全运营中心

Abstract: In response to the digital transformation and improvement of the security protection level of large enterprises, based on the secure access service edge (SASE) architecture, an enterprise integrated security operation system Q-SASE and its technical scheme are designed, which can not only provide a unified security protection level, unified security access policies, and unified security operations for enterprises with many branches , but also support identity management and secure access of user equipment in mobile office scenarios in the post-epidemic era. The feasibility and effectiveness of this Q-SASE technical solution have been verified through the implementation practice in large enterprises.

Keywords: SASE; cloud security resource pool; zero trust; network security situational awareness; security operations center