In this lesson,
we will learn about deperimeterization.
The deperimeterization refers to the shift away
from relying solely on a traditional flat-network perimeter
and instead focusing on verifying and securing
every user and device
regardless of their location within the network.
The concept of deperimeterization
acknowledges that a network boundary
is no longer defined by a geographic location.
This is because users, clients, and vendors
often need to access our network infrastructure
from remote locations.
Deperimeterization concepts include
Software-Defined Networking,
Software-Defined Wide Area Network,
and Secure Access Service Edge.
Let's learn more about these deperimeterization concepts.
First, we have Software-Defined Networking or SDN.
Software-Defined Networking
is transforming network architecture,
especially in large scale cloud environments.
At its core, Software-Defined Networking allows software
to control network functions,
replacing traditional hardware-based methods.
But it's more than just software replacing hardware.
Software-Defined Networking uses controllers
or application programming interfaces
to manage the underlying infrastructure
and direct traffic as it moves throughout the network.
Software-Defined Networking
separates a network into three layers:
the control plane, the data plane,
and the management plane.
The control plane handles decisions
like routing and traffic management,
while the data plane is responsible for the movement
of the actual traffic between devices.
The management plane provides oversight
and allows administrators to make changes
to the software-defined network.
In traditional networks,
these functions are all contained within physical devices.
But with Software-Defined Networking,
they are handled virtually.
This allows for greater flexibility
and automation within software-defined networks.
By using Software-Defined Networking,
organizations can set policies
and automate the deployment of network components
in cloud environments.
This enables faster setup, increased agility,
and more effective use of automation.
However, it comes with challenges,
such as needing to secure
the central Software-Defined Networking controller,
which if compromised could disrupt the entire network.
Different types of Software-Defined Networking
or SDN models include open SDN,
hybrid SDN, and SDN overlays.
Each offering different advantages
depending on the organization needs.
The biggest benefit of Software-Defined Networking
is that it allows networks
to scale and adapt in real time,
which is essential in high availability architectures
or disaster recovery scenarios.
However, the downside is that losing connectivity
to the Software-Defined Networking controller
or having it compromised
could bring down the entire network.
In terms of security,
Software-Defined Networking enables better monitoring
and more granular control of network traffic,
making it easier to detect unusual patterns
and respond quickly to potential threats.
Second, we have Software-Defined Wide Area Network
or SD-WAN.
Software-Defined Wide Area Network
builds on the concept of Software-Defined Networking,
but is specifically designed to manage
and optimize connections across wide geographic areas.
It is ideal for organizations
with multiple branch offices, remote sites,
or employees working from different locations.
Software-Defined Wide Area Network
allows companies to securely connect their offices
and remote workers to the central network
regardless of their physical location.
Traditionally, connecting branch offices
over a long distances
required expensive dedicated lines,
but Software-Defined Wide Area Network
allows organizations to use cheaper internet connections
while still ensuring security and performance.
It does this by intelligently routing traffic
based on the type of application
and best available network path.
For example, critical business applications
like video conferencing can be prioritized
and given a more stable connection,
while less urgent traffic can use less reliable routes.
This ensures that all resources are used efficiently
without compromising performance or security.
Another key benefit
of Software-Defined Wide Area Network
is its ability to enforce security policies
consistently across all connected sites.
No matter where a branch office
or remote user is located,
Software-Defined Wide Area Network
applies the same rules and access controls,
ensuring a uniform security approach
across the entire organization.
It also makes network management simpler
by centralizing control in the cloud,
where administrators can monitor and adjust settings
for all locations from a single interface.
Software-Defined Wide Area Network supports the idea
of deperimeterization by acknowledging
that users and devices
need access to the network from anywhere,
not just from inside a physical office.
With Software-Defined Wide Area Network,
the focus shifts from protecting
a single geographic perimeter
to securing all network connections
no matter where they originate.
This shift allows organizations
to maintain strong security standards
while also improving the flexibility
and efficiency of their wide area networks.
Third and last,
we have Secure Access Service Edge or SASE.
Secure Access Service Edge is a framework
that combines networking and security
into a single cloud-based service.
With Secure Access Service Edge,
organizations can ensure secure access
to data and applications
no matter where users are located.
This is especially important
as more employees work remotely
and need to access company resources
from various locations.
Secure Access Service Edge
works by integrating multiple security
and networking tools such as firewalls,
secure web gateways,
and zero trust network access
into one cloud delivered service.
This allows organizations to manage everything
from one central point
while still applying consistent security policies
across the entire network.
For example, if an employee is working from home,
Secure Access Service Edge
ensures that their connection to company systems
is secured and continuously monitored
just as it would be if they were in the office.
One of the key benefits
of Secure Access Service Edge
is its ability to protect data
as it moves between different environments,
like from an on-premise server
to a cloud-based application.
Secure Access Service Edge
applies security measures to each connection,
making sure that data is encrypted,
monitored, and accessible only by authorized users.
This continuous security is important
in today's environment
where data moves between cloud platforms,
offices, and remote locations.
So by integrating security and network functions,
Secure Access Service Edge simplifies the way
organizations manage security across their network.
Instead of using separate tools for different tasks,
everything is handled through one cloud-based service.
This makes it easier to enforce security policies,
monitor user activity,
and ensure that all connections are secure
regardless of where they originate from.
Secure Access Service Edge plays a vital role
in this shift toward deperimeterization,
where network security
is no longer tied to physical locations,
but extends to wherever users or devices are.
So remember. deperimeterization
is about moving away from relying
on traditional network perimeters
and focusing on securing every user and device
no matter where they are.
This approach acknowledges that networks
now extend beyond physical locations
because users, clients, and vendors need remote access.
Software-Defined Networking allows software
to control and manage network traffic
by separating network functions from hardware.
Software-Defined Wide Area Network
optimizes and secures connections
between geographically distant locations
such as branch offices or remote sites.
Secure Access Service Edge integrates the networking
and security functions into one cloud-based service,
ensuring secure access and continuous monitoring
across various environments.