The 2021 Annual Hybrid Cloud Conference, hosted by the China Academy of Information and Communications Technology (CAICT) and the China Communications Standards Association, took place in Beijing on December 23-24, 2021. The conference received support from the Cloud Computing Open Source Industry Alliance, Hybrid Cloud Industry Promotion Alliance, and Cloud Network Industry Promotion Matrix. The event was graced by the presence of Jia Zijun from the Information Service Industry Department of the Ministry of Industry and Information Technology and Dai Xiaohui, Vice Chairman and Executive Deputy Secretary-General of the China Communications Standards Association, who both gave speeches.
During the conference, the latest Trusted Cloud evaluation results were announced, and CypressTel emerged as the recipient of four awards.CypressTel was awarded the 2021 SASE Outstanding Case Certificate for its global network security project OneSec.
- CypressTel has received the SASE Maturity Capability Assessment Enhanced Level Certificate.
- CypressTel was included in the first batch of the Hybrid Cloud Industry Panorama, which comprises Hybrid Cloud Network, Hybrid Cloud Management Platform CMP, and Hybrid Cloud Management Service MSP.
- CypressTel received certification for the first batch of the Cloud-Network Quality Assurance Program.
The use of cloud computing technology is continuously increasing, and as more businesses adopt enterprise cloud solutions, the traffic accessing cloud services also grows. However, this increase in traffic also leads to certain security risks. Additionally, with the advancements in mobile device performance and 4G and 5G network technologies, more users are accessing enterprise networks through mobile devices. The traditional network architecture that relies on centralized security strategies implemented by headquarters and data centers is no longer sufficient to meet the needs of current enterprise access methods and traffic composition. To address this, the concept of Secure Access Service Edge (SASE) has been proposed, which is based on the new architecture concept of cloud computing. It provides a new solution for enterprise network interconnection and security in multi-branch scenarios.
To promote and compile the "Trusted Cloud-Based Security Trust System Part 3: SASE Maturity Capability Requirements," the Cloud Computing and Big Data Research Institute of CAICT, with the participation of experts from multiple leading companies, has taken the initiative. CypressTel's security capabilities have received industry recognition once again after undergoing the Trusted Cloud SASE Enhanced Level Assessment. The CypressTel product OneSec (SASE) meets all the requirements of the "Trusted Cloud-Based Security Trust System Part 3: SASE Maturity Capability Requirements." The expert group from CAICT conducted a professional and comprehensive assessment of CypressTel's OneSec (SASE) security capabilities, unified management, network capabilities, and cloud deployment. CypressTel achieved the "Enhanced Level" comprehensive recognition in the SASE maturity capability assessment. This assessment is currently the only authoritative SASE maturity capability evaluation in China, providing further recognition of the professionalism of OneSec (SASE).
SASE Outstanding Case for 2021
During a conference, the Deputy Director of the Cloud Computing Department of CAICT announced that SASE is a new approach that combines cloud, network, and security. The aim is to establish a group of experienced SASE service providers and exemplary case studies that can demonstrate high maturity and effectiveness. This will help lay a strong foundation for the innovative application and deep development of SASE in China.
CypressTel was awarded the "2021 SASE Outstanding Case" for its innovative solution called "Global Network Security Project OneSec." The evaluation of CypressTel's SASE case was based on multiple factors such as distinctive features, innovation, user effectiveness, user demand analysis, key technologies, solution, innovation points, application effectiveness, and promotion value. The recognition of CypressTel's product solution capabilities and service standards by the industry is a positive affirmation of their work.
SASE Best Practice
The customer in this scenario is a prominent high-tech company based in Shenzhen, that specializes in laser displays and has over 20 branch offices around the globe. The company has implemented a unified internet egress deployment with comprehensive security policies across its entire network. However, with the growth of digital transformation and remote work, the current approach has proven to be insufficient in meeting performance and flexibility demands.
Network Analysis:
Numerous branches are unable to manage branch internet egress uniformly.
There is a lack of professional operations and maintenance personnel at branches, making it difficult to centrally manage WAN devices and leading to high operational costs.
There is a lack of overall network redundancy, which can result in business interruptions.
There is an inability to quickly activate and deploy new branch sites.
Security Analysis:
From a security perspective, there are several concerns outlined:
Some branches lack necessary security equipment, making it difficult to maintain consistent security control across the network.
Absence of a unified security strategy can increase the complexity of operations and maintenance, making it challenging to enforce consistent security measures and respond effectively to security incidents across the network.
Remote and mobile employees introduce challenges in maintaining security control, as it can be more difficult to monitor and enforce security policies outside of the traditional office environment.
To address these concerns, the network infrastructure uses the CypressTel OneSec (SASE) solution, which comprises four main components:
SD-WAN: This technology separates network services from physical components, allowing for independent application traffic transport. SD-WAN streamlines network security and operations through centralized control and management.
Secure Access: The Zero Trust Network Access (ZTNA) approach is a security system that allows access only on a need-to-know basis. This means that access is granted based on factors such as user identity, device, and traffic analysis, ensuring that only authorized users can access resources. This approach is especially useful in securing applications in the context of an increasingly mobile workforce.
Cloud Web Security: This component ensures secure web application access by isolating web browsing activities in a dedicated cloud environment, preventing sensitive data loss due to malicious network attacks.
Cloud Firewall: The cloud-based firewall analyzes network traffic and blocks malicious behavior. It protects the entire network by applying cloud-based security policies.
The CypressTel OneSec (SASE) solution simplifies network operations by providing centralized policy control, visualization, and easy maintenance. It uses a Hub-Spoke architecture, where the cloud serves as the central hub and branches as spokes, making it easier to access CypressTel Cloud Connection Nodes (CCNs) and reducing application access latency. The dual-network dual-link architecture offers improved network redundancy and resilience.
By implementing these security measures and utilizing the CypressTel OneSec (SASE) solution, the network aims to address the identified security concerns and provide a unified approach to security management and control.
