Cato Networks Survey Exposes a Chasm Between SASE Approaches

Cato Networks has released the findings of its sixth annual IT survey, Security or Performance: How do you Prioritize? With 2045 IT leaders and nearly 1,000 channel partners participating, the survey provides insight into the tradeoffs enterprises must make when choosing between network performance and security robustness. None of the respondents and only a handful of the channel partners currently work with Cato.

Survey Findings

Despite SASE being touted as the solution for security and network performance, respondent scores differed little between those who have and have not deployed SASE. For example, when asked how they react to performance issues with cloud applications, 67% of SASE users and 61% of non-SASE users claimed they would add bandwidth while 19% of SASE users and 21% of non-SASE users would purchase WAN optimization appliances.

Improving remote access performance was a major priority for all respondents. This makes perfect sense in the new work-from-everywhere reality, and this is one of the most straightforward use cases of SASE. Yet even here, SASE and non-SASE users experience the same problems. 24% of SASE users vs. 27% of non-SASE users complain about poor voice/video quality. Slow application response received the same 50% from both SASE and non-SASE users.

Results were similar for network security. Respondents were asked to rate the level of confidence in their ability to detect and respond to malware and cyber-attacks. On a scale of 1-10, despite SASE being touted as the future of network security, the average answer for SASE users was 4, and for non-SASE users just behind at 3.

Ability to detect and respond to malware and cyber attacks

Why then is SASE seen as transformational networking and security platform if the respondents see little difference between legacy and SASE architectures?

SASE: A Tale of Two Approaches

The answer, we believe, has to do with the type of SASE architecture. The respondents’ SASE solutions involve multiple products and components lightly integrated together into a SASE portfolio. While such an approach may bring some improvements over legacy architectures, those benefits pale in comparison to what’s achievable with a full SASE platform.

A “true” SASE architecture describes a global cloud service converging security and networking together. It’s a single platform for all essential security services tightly coupled with intelligent SD-WAN overlay. From one console, enterprises can configure and manage all of their security and networking infrastructure. It’s this vision that carries the full benefits of SASE.

“SASE’s benefits come from a rethinking of security and networking architectures by converging them into the cloud,” says Eyal Webber–Zvik, vice president of product marketing at Cato Networks. “If you continue using SASE portfolios made up from legacy point–solutions and appliance architectures, you can’t expect to realize SASE’s benefits.”