Security Global SASE

Achieve cost-effective and effortless security improvements simply by connecting your existing network to Global SASE.

What is Global SASE?

Global SASE not only provides a highly secure remote access environment from anywhere in the world but also offers a one-stop solution for everything from planning and implementation to operation and maintenance at sites around the world.

Key security features include a "Secure Web Gateway",  "Zero Trust Network Access", next-generation dual-mode "Cloud Access Security Broker', and "Firewall-as-a-Service".

  • Cloud-Based Architecture  
  • Independent of Public Cloud
  • Security-specific PoP (Point of Presence)(*1), large-scale and low-latency designed architecture
  • Integration of Network and Security
  • Protects the entire network, endpoints, and cloud
  • Designed with a focus on self-service
  • AI-Powered Threat Intelligence
  • Supervised/Unsupervised learning models
  • Based on extensive and diverse datasets trained by FortiGuard Labs
*1 Abbreviated as PoP, refers to the nearest connection point (site) that users of this service utilize

Why KDDI?

BEFORE

Despite efforts to meet the security guidelines set by headquarters and manage operations and maintenance, the following concerns may remain unresolved:

  • Performance Improvement
  • Virus Infections
  • Flexible Resource Management
Before

AFTER

Connecting Global SASE with the VPN gateway to provide a simple, safe and secured managed remote environment.

  • Security Features
  • Posture Check
  • Firewall (FW)
  • User Authentication
  • Security Profile
    - AntiVirus
    - Web Filter
    - IPS
    - File Filter
    - DLP
    - Application Control
    - SSL Inspection
  • Visualization
After

Unlock the Full Potential of SASE for Your Business

KDDI provides a one-stop solution for SASE services with advanced security standards, covering everything from planning and implementation to operation and maintenance. 

Enhanced Security

Reduce security risks through comprehensive management under a consistent security policy

Increased Productivity

Optimize traffic and performance with SD-WAN and ZTNA

Reduced Operational Burden

Centrally manage network and security settings while ensuring consistent enforcement of security policies and logging

Optimized Network Environment for Hybrid Work

Enhance communication performance for remote work while ensuring strong security for external endpoint access.

Achieving Secure Web Access (SWG)

Global SASE provides a comprehensive cloud-based secure web gateway, equipped with standard features such as Anti-Virus, Web Filtering, SSL Decryption, CASB, and more. 

  • Internet Access Restrictions and Security Enhancements
  • Data Visualization and Protection, Strengthening Compliance

Secure Access and Endpoint Protection

Global SASE Posture Check assess endpoint conditions, such as OS version and
antivirus software presence, to determine connection permissions, which reduces the risk of threats compromising the internal network.

  • Malware Prevention and Security Enhancement

Use Cases

1.Supporting Your Network Zero Trust Initiatives

Enabling a Seamless Transition from Traditional Remote Access to Zero Trust Compliant Remote Access.

BEFORE

DC FW
  • One-Time Verification
  • Full Network Access
  • General-Purpose Rule Set
  • Latency Issues Leading to Network Congestion 

AFTER

Access Proxy
  • Continuous Reliability Verification
  • Access to Specific Applications
  • User Context (*2) Rule Set
  • Performance Optimisation by Offloading Security Processing to the Cloud
  • Deploy an access proxy to reduce network load
*2 User context refers to the access context that holds user profile information such as usernames and organizational affiliation. 

2.Secure Internet Access

ID-Based Policies Tailored to Individual Users or User Groups Implemented to Control Access, Reducing Security Risks Associated with the Increasing Reliance on Internet Connectivity During Remote Work and Mobile Environments.

FortiSASE

Device Security

The agent (FortiClient) has Endpoint Protection Platform (EPP) (*3) capabilities that protect endpoints and prevent malware intrusions into devices.

Content Security

Global SASE verifies content to detect and protect against malicious content.

Web Security

The real-time sandbox feature reduces security risks, such as malware infections from users' web browsing activities.

*3Endpoint Protection Platform

Please consult a KDDI consultant.

Click here for details on security measures at overseas locations.

Steps to introducing zero trust for global companies
 

Key Points for Security Measures at Overseas Locations

What is the best solution for your problem?
Please consult a KDDI consultant.