35 - The SASE visibility gap

SASE is not a security strategy. Here is what’s missing.  

If you have been in the MSP space for more than five minutes lately, you have been pitched SASE (Secure Access Service Edge). The idea that you can converge networking and security into a single cloud-delivered model. For clients with distributed workforces or heavy cloud usage, it makes architectural sense. 

But here is what the SASE vendors do not always make clear: SASE is a connectivity and policy enforcement layer. It is not a detection and response capability. And confusing those two things leaves a gap that attackers are happy to exploit. 

SASE does not hunt for threats that have already bypassed controls. It does not correlate signals across your entire environment. It does not provide the human expertise to investigate when something looks wrong. 

This is what we call the MSP security visibility gap: the disconnect between where you deploy security tools and where attacks actually originate. SASE security monitoring is a perfect example. You have deployed the tool. But if nobody is watching what it is telling you, you have visibility without insight – and that's the SASE visibility gap. 

Find out how to close the gap, in our latest podcast.

Thanks for listening!

-

Learn more about our full spectrum network security platform for MSPs & MSSPs: enhanced.io