SASE Architecture Simulator

SASE Architecture Lab

Remote user location

Architecture

Access request

Latency

Legacy (hub-and-spoke)-- ms

SASE (nearest PoP)-- ms

Improvement--

Zero Trust checks

Waiting for request...

Every request is verified independently of network location — identity, device posture and context are checked before access is granted, regardless of whether the architecture is legacy or SASE. SASE additionally moves the security stack (SWG, CASB, ZTNA, FWaaS) to a PoP near the user instead of routing everyone back to a central data center.

LEGACY: HUB-AND-SPOKE

-- ms