SASE Security-Service-Edge
The sase module inspects traffic with threat feeds, a vulnerability scanner, DDoS/rate-limit protection, and context-based adaptive authentication.
- URL/domain category filtering combining an inline Radix tree with an async AI tier.
- IDS/IPS threat feeds and a vulnerability scanner feed enforcement decisions.
- Context-based/adaptive authentication: threat intel, impossible-travel detection, and risk-based step-up.
- Enforcement actions include drop, reject, soft-block, log-only, and branded block pages.