Cloud Secure Edge Hub
Your people work anywhere. You should still know your data is safe.
Everything you need to decide whether SonicWall Cloud Secure Edge is right for your business, from a team that runs it for its own home working.
The edge of your network has moved
This was a good call, but your people and your data have moved outside the perimeter you built.
- Your people spread outTwo days in the office, three at home, the odd day on the road.
- Your data followedMicrosoft 365, Salesforce, Dropbox, your own data centre.
- But not all of itSome systems stay on site, and people still need to reach them.
- More places to coverBranches, shops and small sites that don’t sit behind head office.
- More people to let inContractors, engineers and suppliers who all need a way in.
Much of what your business does never passes the device you bought to protect it.
Three questions that are hard to answer today
-
Who is on our network right now?
And on what device, in what state, with access to which of your systems.
-
If a laptop was compromised, how far could it get?
With a VPN tunnel and a valid password, the honest answer is usually “a long way”.
-
Who still has access who shouldn’t?
Leavers, old contractors, a supplier you used twice in 2022, all spread across separate systems.
You shouldn’t have to choose between letting your people work anywhere and knowing your data is safe.
We moved our own team onto CSE first. We know where it’s awkward.
Which means we can tell you what to do in what order, and which bits your users will actually notice.
- 20 yearsWorking with SonicWall, and with customers who are still customers.
- In-houseEngineers, not a call centre. The people who scope it are the people who support it.
- Both endsPre- and post-sales support from the same team, so nothing gets handed over and dropped.
- Us tooWe run CSE for our own home working. Everything we tell you, we’ve tested on ourselves.
Getting protected takes three steps
-
See it
This week
An hour with one of our engineers, walking through the console and what your users will see. No slides.
-
Try it on your own users
Two to three weeks
A small pilot group, on your network and your applications. We set it up with you.
-
Roll it out at your pace
Agreed with you
Group by group, site by site, retiring the old remote access as we go. We stay on it afterwards.
Your old VPN stays up throughout. It’s retired when you’re happy, not before.
Already running a SonicWall firewall? You’re closer than you think.
- Gen 7 or newerThe CSE connector is already built into your firewall. Turn it on and your first site is connected.
- No SonicWall firewall?A small software connector runs on a server or virtual machine instead, and does the same job.
Every connector dials out to the edge, so there are no inbound ports and nothing published to the internet. Connect as many sites as you like: you license the users, not the sites.
It’s much more user-friendly for the end users than Mobile Connect.
IT Director, production company
Not ready to talk yet? See where you stand.
Answer a few questions about how your people connect today, and our CSE gap analysis will show where your remote access leaves you exposed.
Pick the conversation that suits you
Both sessions are with our own team and booked through the same page. Choose the one you want when you get there.
Rather pick up the phone? Call 0121 270 1800 or email enquire@netthreat.co.uk.
Guides, videos and webinars
We’re adding to this as we go. Short videos and recorded webinars will appear here first.
-
PDF guide
Cloud Secure Edge in plain English
What CSE is, how it works, and where it fits for a business like yours.
Download the guide (PDF) -
PDF guide
Traditional VPN vs Cloud Secure Edge
A side-by-side look at what changes when you move off the old tunnel.
Download the guide (PDF) -
PDF guide
CSE licensing explained
The two licence types, Private Access and Internet Access, and what each tier includes.
Download the guide (PDF) -
Video, coming soon
Short walkthroughs
Quick looks at setup and what your users see day to day.
-
Webinar, coming soon
Recorded webinars
Catch up on our CSE sessions after they’ve aired.
How Cloud Secure Edge works
Four building blocks, one app for your users, and one console for you.
-
ZTNA
Zero Trust Network Access
A verified user on a verified device gets a trust score, and that score decides what they can reach. It’s re-checked all session.
-
VPNaaS
VPN as a Service
One connection to the edge reaches company resources wherever they sit. No gateways to choose between.
-
CASB
Cloud Access Security Broker
Your SaaS applications brought under the same identity and access rules as everything else.
-
SWG
Secure Web Gateway
Always-on web protection from the CSE app, whether the user is connected to the edge or not.
Six months from now
Your people work anywhere, and you can prove your data is safe. Those three questions have answers, and you don’t have to hedge them.
- Nothing of yours is published to the internet for remote access.
- A lost laptop is an inconvenience, not an incident.
- The next VPN advisory isn’t your weekend.
Or call 0121 270 1800 or email enquire@netthreat.co.uk.
The Scenario
Corporate data no longer lives in one place. It is spread across cloud platforms, SaaS applications and on-premises systems, while staff work remotely and third parties need access too. At the same time, cyber threats continue to grow in number and sophistication.
The Solution
SonicWall Cloud Secure Edge (CSE), formerly Banyan Security, delivers secure remote access to distributed resources wherever they are hosted – keeping security high without compromising ease of use.
Get The Solution Now- Access Tier – Users connect through either the SonicWall Global Cloud Edge or a Private Edge hosted in your own environment.
- Identity & Trust – Access is governed by your identity provider with multi-factor authentication. A Trust Score is calculated from location, connection type, device type and device security posture.
- Resources – Users reach resources via SAML, integration with SonicOS 7 appliances, or a lightweight Connector that makes outbound-only connections.
The 4 Building Blocks of CSE
ZTNA
Zero Trust Network Access. Every connection is continuously verified and access follows least privilege. If a device's posture weakens, its Trust Score drops and access can be restricted automatically.
CASB
Cloud Access Security Broker. Extend centrally managed authentication and device trust policies to your SaaS applications.
VPNaaS
VPN as a Service. WireGuard-based tunnels to on-premises and hosted networks. Customers running SonicOS 7.1.2 or later can use the built-in connector.
SWG
Secure Web Gateway. Filters internet traffic using DNS-layer security, URL filtering and payload inspection to protect against malicious sites, ransomware and phishing.
Licensing - Monthly and Annual
Secure Private Access
| Basic | Advanced | |
|---|---|---|
| VPNaaS – tunnel-based ZTNA: Secure network access to specific network segments | ✔ | ✔ |
| Proxy-based ZTNA: Secure access to private resources such as HTTP and TCP services | ✔ |
Secure Internet Access
| Basic | Advanced | |
|---|---|---|
| DNS Layer Security for internet threat prevention | ✔ | ✔ |
| CASB: Enforce device trust policies across SaaS applications | ✔ | |
| SWG: URL filtering and Malware Protection | ✔ | |
| SaaS Application Security | ✔ |
Monthly subscriptions have a 3-month minimum term, then roll monthly. Annual subscriptions are available on 1, 2 or 3-year terms.