Systematic Literature Review on Secure Access Service Edge (SASE) and Zero Trust Network Access (ZTNA) Implementation to Ensure Secure Access

Abstract

Secure Access Service Edge (SASE) and Zero Trust Network Access (ZTNA) are among the technologies used to secure access. This study aims to delve into the effectiveness of SASE and ZTNA in bolstering secure access for organizations, particularly considering the shortcomings of traditional security measures in the era of widespread cloud services and remote work. The study was conducted as a systematic literature review. Searches within the past five years (2018-2023) in Google Scholar, Scopus, Web of Knowledge, ACM Digital Library, and ScienceDirect identified 25 papers for the analysis. The keywords search used has included and excluded the necessary scope of the study. The result has revealed three core principles and components of SASE, as well as two distinct ZTNA architectures. Implementing SASE and ZTNA yields substantial security improvements, such as reduced data breaches, enhanced control over network traffic, improved user authentication, and mitigation of lateral network movement. Seven concrete benefits of SASE and ZTNA adoption were uncovered, emphasizing their critical role in modern cybersecurity. To maximize the advantages of these technologies, continuous evaluation and adaptation are recommended to counter evolving threats effectively. The review also spotlights four primary challenges tied to adopting and implementing SASE and ZTNA, emphasizing the need for meticulous planning and expertise. Five integration approaches of SASE and ZTNA were identified in the studies. Organizations choose a combination of these approaches to achieve their desired security and networking goals. Lastly, the review outlines four future directions for SASE and ZTNA, suggesting the adoption of customized frameworks tailored to each organization's unique security needs. In essence, this systematic review underscores the significance of SASE and ZTNA in contemporary cybersecurity. It stresses the importance of careful planning, assessment, and adaptation, acknowledges the complexities of integration, and advocates for customized solutions to strengthen organizational security in the face of evolving threats.