The iboss Zero Trust SASE replaces onsite proxy appliances to improve security and reduce costs
Download this Solution Brief Download PDF
CHALLENGES
Onsite legacy proxy appliances are up for renewal and must be replaced, leading to substantial increases in cost due to pricing increases and lack of labor to perform the hardware refresh. To make things worse, on-prem proxy appliances are overloaded with traffic from Microsoft O365 and other SaaS applications, causing downtime or slowdowns affecting user productivity. This will lead to even higher costs as more appliances will need to be purchased to support this new load. At the same time, the data center hosting the proxy appliances is being decommissioned or reduced in size as infrastructure migrations to AWS and Azure are occurring. This makes it more challenging to host the appliances and increases costs further. With the workforce able to work remotely, ensuring security is applied while users are out of the office is a problem, as proxy appliances are not designed to secure a mobile workforce.
PAIN POINT
High Proxy Appliance Renewal Costs – Proxy appliances, such as Broadcom or McAfee, are up for renewal at increased prices
iboss SOLUTION
Replace Proxies with Secure Access Service Edge – The iboss Zero Trust SASE is an instant replacement for legacy proxies before renewals come due, resulting in substantial savings
KEY BENEFITS
Quickly replace legacy proxies to avoid high renewal costs
Automatically extend security and visibility to remote users
Consolidate point products such as VPN, Proxies, and VDI with ZTNA, SASE, and Browser Isolation for lower costs
Reduce management overhead from managing multiple security products with a single solution
Gain visibility from detailed logging for every interaction between users and sensitive private resources
Reduce significant CAPEX cash spending by moving to a per-user subscription model
SOLUTION
The iboss Zero Trust Secure Access Service Edge is an advanced security solution that completely replaces the functionality delivered by legacy on-prem proxies with a global consolidated cloud security service. The iboss Zero Trust SASE includes ZTNA, CASB, malware defense, compliance policies, Browser Isolation, and logging that applies to users inside and outside the office. It scales to secure traffic volume as functionality is delivered within the cloud security service instead of only within appliances hosted within the data center.
In addition, the iboss Zero Trust SASE can extend the Secure Access Service Edge into the data center by providing onsite gateways that are direct drop-in replacements to legacy proxies, such as Broadcom or McAfee Proxies, which allows local resources to be protected and a migration to occur with no network topology changes. This ensures a fast and smooth transition to iboss before the high-cost renewal date for the on-prem proxy arrives, resulting in substantial savings. Because the iboss Zero Trust SASE consolidates multiple point products into a single solution, costs are reduced even further.
The iboss platform includes ZTNA to replace VPN, Secure Access Service Edge to replace legacy proxies, and Browser Isolation to replace legacy VDI. As the security technology stack gets consolidated and costs are reduced, users get better security and an improved end-user experience.
KEY CAPABILITIES
- Consolidates VPN, Proxies, and VDI into a single solution that includes ZTNA, Secure Access Service Edge, and Browser Isolation
- Includes CASB, malware defense, DLP, Exact Data Match, compliance policies, and logging for users onsite and remote
- Improves the end-user experience while increasing security by isolating access to resources
- Provides secure and authenticated resource access to contractors through Browser Isolation which supports SSO
- Can extend natively into the data center with iboss onsite gateways that protect local resources without needing to send traffic to the cloud security edge
PAIN POINTS
| Pain Point | iboss Solution |
|---|---|
| High Proxy Appliance Renewal Costs – Proxy appliances, such as Broadcom or McAfee, are up for renewal at increased prices | Replace Proxies with Secure Access Service Edge – The iboss Zero Trust SASE is an instant replacement for legacy proxies before renewals come due, resulting in substantial savings |
| Proxy appliances fail to protect remote users – As users work remotely, on-prem proxy appliances cannot protect their connections without forcing traffic back through the data center via a VPN which is slow and expensive | Protect Users Regardless of Location - The iboss Zero Trust SASE protects onsite and remote users equally, with remote users being connected directly through the iboss cloud security service for protection. |
| Microsoft O365 Traffic is Saturating Proxies – With increased Microsoft O365 and SaaS use, connection speeds have slowed to a crawl resulting in lost user productivity | Security Delivered at Scale without Slowdowns – The iboss Zero Trust SASE can secure any traffic volume with infinite processing capability available within the cloud security service. This increases user productivity and lowers costs. |
| Contractors need access to sensitive resources – Third parties and contractors need controlled, secured, and authenticated access to sensitive resources within the enterprise to prevent data loss and breaches. | Contractor Access is Provided Through Browser Isolation – Browser Isolation, the replacement for VDI, allows contractors to access resources through a pane-of-glass using SSO authentication while ensuring security and logging are in place for all transactions. |
USE CASES/BUSINESS VALUE
| Use Case/Challenges | Solution Description | Benefits |
|---|---|---|
| Need to replace Broadcom/McAfee Proxies before renewal | The iboss Zero Trust SASE provides onsite gateways that are direct drop-in replacements for legacy proxies with the same capabilities. | Quickly avoid high renewal costs and modernize security and connectivity during the process. Remote users will get the same security as onsite users because the onsite gateways extend the cloud security edge and support the same capabilities. |
| Need to secure remote workers | The iboss Zero Trust SASE is a cloud security service that allows remote workers to connect directly to cloud applications without the need for a VPN while ensuring security and visibility are in place. | Reduces the high costs associated with sending large volumes of traffic through the VPN, the unnecessary bandwidth overhead on data centers, and improves user security and productivity from faster connections. |
| Need to avoid buying more legacy proxies due to Microsoft O365 use which requires more capacity | The iboss Zero Trust SASE provides the same capabilities as legacy proxy appliances but scales horizontally to support any traffic volume. | Substantially reduce costs related to high-priced proxy appliances by leveraging the iboss Zero Trust SASE to handle the security and logging load in the cloud. |
| Need to reduce or eliminate data center space and have no place for legacy proxy appliances | The iboss Zero Trust SASE provides the same capabilities as the on-prem proxies but delivers those functions in the cloud. The iboss cloud service can also be connected directly to existing data centers through cross-connects or direct links to offload the resources needed within the data center to support the on-prem proxy appliances. | Significantly reduce costs and achieve cloud transformation by migrating legacy proxy appliances from self-hosted within the data center to a cloud-delivered service that has the same capabilities at scale. |
| Need to allow contractors and third parties access to sensitive resources | The iboss Zero Trust SASE provides third-party access through Browser Isolation which supports SSO via Azure, Okta, Ping, or any SAML capable Identity Provider. Isolated sessions are VDI-like, prevent data from touching third-party devices, and only provide access to authorized resources. | Reduce or eliminate the cost of expensive infrastructure related to VDI and replace it with instant Browser Isolation delivered by the iboss Zero Trust SASE. Browser Isolation is available globally and can connect users in any region without infrastructure costs. |
TECHNICAL SOLUTION
Legacy proxies are typically installed at data centers or core offices to protect organizations from malware and data loss and apply compliance. Proxy appliances have limited capacity and are designed to protect onsite users. Remote users suffer from slow connections that are backhauled via VPN through the hosted proxy appliances, resulting in substantial lost productivity and a poor end-user experience. In addition, the high renewal costs for proxy appliances increase upfront cash spending, which worsens if more appliances are purchased to handle increased traffic loads.
The iboss Zero Trust SASE can solve those problems by quickly replacing on-prem proxies, such as Broadcom and McAfee appliances, with a cloud-delivered Secure Access Service Edge. The iboss service includes CASB, malware defense, DLP, Exact Data Match, compliance policies, HTTPS decrypt and logging at scale and delivered in the cloud.
iboss’ Zero Trust Secure Access Service Edge
A Single Unified Edge – Eliminating VPNs, VDIs, & Legacy On-Prem Proxies
The iboss Zero Trust SASE is built from a containerized architecture which allows the Policy Enforcement Points, or gateways, to be deployed within the data center. These gateways extend the same security and logging capabilities within the cloud secure access service edge locally to the data center without sending traffic to the cloud security service first when accessing local resources. This allows fast migrations from legacy proxies while providing the fastest, most optimal connections for onsite users accessing local resources.
A Complete Platform:
ZTNA + Secure Access Service Edge
Providing both Connectivity and Advanced SaaS Security Services
The iboss Zero Trust SASE provides extensive network and security capabilities that completely replace VPN, Proxies, and VDI with ZTNA, Secure Access Service Edge, and Browser Isolation. This increases security, improves the end-user experience, consolidates technology, and substantially reduces costs.
iboss SASE Benefits & Use Cases
Replaces legacy VPN, proxy appliances and Virtual Desktop Infrastructure (VDI) with a single service
Enhances security with inspection of all content including files, data, and cloud application traffic
Connects users to applications in the office automatically
Eliminates proxy and security appliance bloat and renewal costs
Eliminates costly proxy appliance mgmt. overhead
Reduces complexity, cost & operational overhead related to managing network security infrastructure
Connects call center agents, contractors and guests through a pane of glass to prevent data loss
Increased effectiveness of network & security staff
Allows centralized security policies to protect all transactions and sensitive cloud data
Download this Solution Brief Download PDF