Secure Access Service Edge Solution

The Vendor is required to provide a cloud-native Enterprise Secure Access Service Edge (SASE) Enablement platform delivering integrated networking and security services across users, devices, and applications.
- Administrative Hierarchy and Federated Management
• Support for hierarchical or multi-tenant organizational structures.
• How global security policies can be enforced as non-overridable by departmental administrators.
• Delegated administrative roles, scopes, and RBAC granularity.
• Policy inheritance, conflict resolution, and override behavior.
• How logs, configurations, and analytics are isolated across tenants.
- Core SASE Capabilities
• Identify which SASE capabilities are native, integrated, or roadmap.
• Secure Web Gateway (SWG) inspection and policy enforcement.
• Firewall-as-a-Service (FWaaS) architecture and policy model.
• Zero Trust Network Access (ZTNA) capabilities and app-level access controls.
• CASB, DLP, DNS Security, IPS, sandboxing, and SSPM features.
• Management-pane architecture; number of consoles required, single management plane/policy engine, unified data lake and API support for automation and integration with existing IT tooling.
- Networking and Connectivity
• Native SD-WAN functionality and supported transports.
• Support for remote users, branch sites, campuses, and data centers.
• Traffic optimization, QoS, and failover behavior.
• Integration with existing WAN or network infrastructure.