> **SSE** (Security Service Edge) is the security half of [[Secure Access Service Edge (SASE)|SASE]]. It drops the [[Software-Defined Wide Area Network (SD-WAN)]] and wide-area networking parts and focuses on the security controls. Gartner breaks SSE into three components^[https://ar0x.com/posts/what-is-gsa/]: > - SWG (Secure Web Gateway): a proxy that filters and inspects internet-bound traffic. > - ZTNA (Zero Trust Network Access): the modern replacement for VPN. Instead of dropping you onto the entire corporate network, ZTNA grants access one application at a time. Never trust, always verify. > - CASB (Cloud Access Security Broker): sits between users and cloud services to enforce policy, do shadow IT detection, DLP, and so on.