CyberRatings.org, a non-profit firm dedicated to making cybersecurity product efficacy transparent, has released its first Secure Access Service Edge (SASE) rating. Zscaler’s Firewall as a Service (FWaaS), including its Zero Trust Network Access (ZTNA) capabilities, were tested independently by CyberRatings utilising Zscaler Internet Access and Zscaler Private Access. Overall, Zscaler received a ‘AA’ rating, with individual test components receiving ‘AA’ to ‘AAA’ ratings.
SASE technology is a relatively new addition to the market. It’s a new technology package that’s supplied as a service:
- Data security (Cloud Access Security Broker and Data Loss Prevention)
- Access control (FWaaS and ZTNA)
- Threat protection (Secure Web Gateway, anti-malware, and intrusion prevention)
“The pandemic accelerated adoption of new technologies such as SASE that securely enable a distributed workforce. This first-of-its-kind test provides the cybersecurity industry with a reliable and independent way to evaluate SASE offerings,” said Vikram Phatak, CEO of CyberRatings.org.
Because these technologies are so new, CyberRatings spent several months developing the apparatus to test FWaaS and ZTNA alongside Keysight’s network and cloud product teams. Keysight offered CyPerf to test application stability, performance, reliability and TLS / SSL functionality.
“The distributed nature of hybrid/cloud networks calls for a new way of testing. Keysight developed its industry-first cloud-native CyPerf test solution to help users validate services like SASE, software-defined wide area network (SD-WAN), and cloud network firewall. We are excited to partner with CyberRatings in this first independent test of SASE technology,” said Ram Periakaruppan vice president and general manager, Keysight’s Network Test and Security Solutions.
CyberRatings has a three-phase approach for assessing SASE solutions, with the first phase focusing on FWaaS and ZTNA. The discovery and handling of exploits, malware, and evasions will be tested in phase two. The cloud access security broker (CASB) and data leak protection will be addressed in the third phase (DLP).
