Say goodbye to outdated VPN solutions

Global Secure Access

Remote work has fundamentally transformed the workplace, prompting companies to reconsider how to ensure secure access to data and applications. The answer lies in Security Service Edge (SSE).

Logo for "9x Partner of the Year" Award Winner oder Finalist
glueckkanja Switzerland

Microsoft’s Approach to Secure Access with Christopher Brumm and Fabian Bader

Security for a connected work environment

Global Secure Access gives Microsoft a central SSE solution for security management that works both in the cloud and on-premises. Comprehensive protection is achieved in part through the integration of Zero Trust principles, which rely heavily on identity protection and Conditional Access. Different rule sets can be defined granularly for dedicated services, whether cloud-based or on-premises. You can learn more about how Microsoft's Security Service Edge (SSE) works in detail in our webcast on the topic.

Icon of a padlock next to a globe symbolizing Microsoft's Security Service Edge (SSE)

Microsoft's Security Service Edge (SSE)

Global Secure Access is designed to deliver security services through the cloud, supporting managed devices across all major platforms. This includes integration with identity providers and security tools such as XDR or SIEM.

The architecture of the SSE solution is divided into two main areas, each with different components:
Icon of a padlock next to a globe symbolizing Microsoft's Security Service Edge (SSE)
  • Internet Access features an identity-centered Secure Web Gateway (SWG) that functions similarly to a forward proxy. It not only protects against malware and other threats but also performs URL category filtering.
  • Private Access is an identity-centered Zero Trust Network Access (ZTNA) solution that allows granular and consistent access to non-public applications regardless of their location, implementing detailed context-based access control.

Integration

Icon of a fingerprint symbolizing identity protection

Entra Governance

  • Integration with Identity & Access Management and Identity Governance features of Entra
  • App segments are mapped as enterprise apps
  • Uses features such as dynamic groups and access packages
Icon of a shield in front of a browser window symbolizing secure access

Conditional Access

  • Integration in Conditional Access right from the start
  • Securing defined resources with Conditional Access
  • Use of the solution as an access condition for resources
Icon of a magnifying glass in front of a monitor symbolizing secure monitoring

XDR & SIEM

  • Integration with Microsoft's own security products
  • Use of the logs generated by Global Secure Access in Sentinel
  • Direct influence of the device risk from Defender for Endpoint on Conditional Access
  • Announced integration with Defender for Cloud Apps as a CASB component in XDR

Use Cases

Outlook

As Global Secure Access technologies continue to evolve, Microsoft is keeping pace with the growing complexity of network security requirements. These advances not only keep your data secure but also allow you to fine-tune access to corporate applications, laying the groundwork for an even more granular and effective security architecture. Watch this space as network security continues to develop.

Latest articles

Contact us now

Jan Geisbauer
In most of our emergency operations, we repeatedly find that IT was not well enough prepared for attacks. A proactive security check is therefore an efficient investment in more security to reduce downtime.
Jan GeisbauerSecurity Lead