The Secure Access Service Edge is Alibaba Cloud's first one-stop office security management and control platform. Enterprises can quickly build an office security system including zero trust intranet access, office data leakage prevention, online behavior management and audit, and office access acceleration without investing in complex and expensive security hardware.
With identity driven as the core, the pure SaaS based zero trust gateway follows the principle of never trust, the principle of zero exposure of intranet applications, and the principle of minimum authorization to effectively solve the borderless security problems brought about by enterprise digital office.
Unified management and control of office security
Based on the SASE (Secure Access Service Edge) security model, one platform can realize the management of enterprise mobile office and branch offices' Internet access, and realize the unified closing of protection, unified policy setting, unified log analysis, and unified security operation and maintenance.
Access acceleration
With the intelligent routing capability of POP nodes, edge security nodes and cloud security access service clients covering the world, employees can enjoy a faster, more stable and safer office experience at any time and anywhere.
Minimal deployment
Pure SaaS service,The IaaS layer has a deep connection with the Alibaba Cloud basic platform. You only need to install a security client to start using it. From then on, you can bid farewell to the complicated operation and maintenance of the software/hardware security gateway.
Product application scenarios and functions
Integrated protection of office safety
Provide unified security management capability for enterprise mobile office and branch offices to access the Internet
Application access control
It supports accurate identification of 5000+common application features, and can control enterprise employees' access to high bandwidth consumption, leakage risk (file outgoing), reduced work efficiency and other types of Internet applications by labeling applications
URL access control
Relying on Alibaba Cloud's threat intelligence data, it can provide users with 30+categories of URL feature databases of tens of millions of scales, which can identify and intercept employees' access to malicious websites, prevent office terminals from being recruited, and also ensure the security level of the enterprise's internal network
Zero trust intranet access control
Self developed HTTPS encryption transmission protocol, based on dynamic identity authentication, supports end-to-end (tcp) and end-to-end (HTTP/HTTPS) access control with minimum permissions. Compared with traditional VPN access, it has the characteristics of faster access, more efficient operation and maintenance, more convenient deployment, and higher system security
Integrated audit of office behavior
Full scene office behavior audit, enterprise employee behavior can be seen, checked and controlled
Real time access log
Multi dimensional access display, real-time control of enterprise employee behavior
Audit of Internet access behavior
Support real name multi-dimensional audit staff's online behavior, keep audit logs for 6 months, and meet the requirements of network security law and equal assurance compliance
Audit of intranet access behavior
Support the intranet access behavior of real name audit staff, and keep the audit log for 6 months to meet the needs of enterprise internal review
Practical scenario of office security
One stop office security platform
SD-WAN Security
One stop office security platform
SD-WAN Security
Enterprise Office Security Center
Based on the integrated architecture system of cloud+network+edge+end, the office security platform SASE seamlessly integrates the capabilities of "security+network" and realizes the unified management of the security of enterprise's office assets under the cloud.
Minimal deployment
Only one lightweight security client needs to be installed, and multiple security functions can be enabled on demand, without additional deployment costs!
Extreme office experience
The security client supports the automatic routing function. In combination with Alibaba Cloud's network acceleration capabilities, employees can enjoy high-quality office network resources at any time and anywhere.
Full scenario support
Security client supportsIt is deployed on operating systems commonly used by enterprises such as MacOS, Android and IOS, and can cover office terminals such as enterprise PCs, mobile devices and cloud desktops.
Hybrid cloud management and control
The unified security access control of enterprise IDC or other cloud assets can be achieved with simple configuration.
More products and services
Intelligent access gateway
Smart Access Gateway (SAG) is a one-stop fast cloud deployment solution provided by Alibaba Cloud.Enterprises can achieve encrypted access to the Internet nearby through intelligent access gateways, and obtain a more intelligent, reliable, and secure cloud experience.
The Cloud Security Center is a unified security management system for real-time identification, analysis, and early warning of security threats. Through security capabilities such as anti blackmail, anti-virus, anti tampering, and compliance inspection, it helps users achieve automated security operation closed-loop for threat detection, response, and traceability, protects cloud assets and local hosts, and meets regulatory compliance requirements.
SaaS cloud native firewall, comprehensively combing the Internet exposure and risk of cloud assets, and one click protection;IPS virtual patch can intelligently prevent high-risk vulnerabilities;Integrated threat intelligence, support for blocking active outreach, visibility of access relationships between businesses, network traffic audit, etc.
SSL Certificates provide HTTPS protection for websites and mobile applications (APP), encrypt website traffic, and prevent data theft.Alibaba Cloud SSL certificates have always been committed to providing enterprises with more comprehensive website security capabilities and solutions. At present, hundreds of thousands of users have chosen our certificates for website HTTPS encryption and comprehensive website security solutions.
