Remote staff and small branches of an insurer need the same inspection, delivered from the cloud, without hauling every session back to one office firewall. Which approach fits?
Select an answer to reveal the explanation.
Short Explanation
You stop making every traveler fly home to be searched, and you search them at a checkpoint near where they are. That cloud checkpoint, combining the network path and the security inspection, is SASE. One firewall in the home office, an empty recovery room, and a disk network do not give remote staff that nearby inspection.
Full Explanation
Secure Access Service Edge combines wide-area connectivity and security inspection in a cloud-delivered service, so users and branches are inspected without backhauling every session to one appliance. The insurer wants that same inspection for remote staff and small branches, which is the SASE approach. One office firewall can inspect traffic that is hauled back to it. The stem forbids that backhaul and asks for cloud delivery. A cold site is space and power for recovery. It is not an inspection point. A storage-area network presents block storage. It does not inspect remote sessions. Exam caveat: SASE is an architecture. The insurer still chooses the specific security functions, such as a web gateway or a zero-trust access broker, inside it. Operational check: connect a remote laptop and a branch, confirm both hit the cloud inspection, and confirm a blocked category is blocked in both places without a hairpin to the office firewall. From a remote laptop and from a branch, confirm a blocked category is blocked in both places.