> ## Documentation Index
> Fetch the complete documentation index at: https://docs.megaport.com/llms.txt
> Use this file to discover all available pages before exploring further.

# SSE and SASE within the Megaport Network

> This help topic explains the differences between SASE, SSE and how Megaport provides the private and how high-performance backbone to integrate SASE and SSE functions into your network.

export const Gloss = ({term, anchor, langDir = 'en'}) => {
  const errorPrefix = '\x1b[31;1;4mERROR\x1b[0m: Gloss -';
  if (typeof term !== 'string') {
    term = String(term);
  }
  if (typeof anchor !== 'string') {
    anchor = String(anchor);
  }
  if (!term || term === 'undefined') {
    console.error(`${errorPrefix} the \`term\` property is required — rendering an empty string instead`);
    return <></>;
  }
  if (!anchor || anchor === 'undefined') {
    console.error(`${errorPrefix} the \`anchor\` property is required — rendering an empty string instead`);
    return <></>;
  }
  const lang = langDir === 'en' ? '/' : '/' + langDir + '/';
  const glossaryPage = lang + 'glossary/#' + anchor;
  return <a href={glossaryPage}>{term}</a>;
};

export const Image = ({src, alt = '', caption, width, height, shadow}) => {
  const errorPrefix = '\x1b[31;1;4mERROR\x1b[0m: Image -';
  if (typeof src !== 'string') {
    src = String(src);
  }
  if (!src || src === 'undefined') {
    console.error(`${errorPrefix} \`src\` is required — rendering an empty string instead`);
    return <></>;
  }
  const img = <img className={['mega-image-style', shadow ? 'shadow' : ''].join(' ')} src={src} alt={alt} width={width} height={height} style={{
    display: 'block'
  }} />;
  return caption ? <figure>
      {img}
      <figcaption style={{
    textAlign: 'center',
    width
  }}>{caption}</figcaption>
    </figure> : img;
};

As organizations move toward cloud-native environments, the way organizations secure and connect their networks has fundamentally changed.

This topic explains the differences between <Gloss term="Secure Service Edge (SSE)" anchor="sse" /> and <Gloss term="Secure Access Service Edge (SASE)" anchor="sase" />, and how Megaport provides the private and high-performance backbone to integrate SSE and SASE functions into your network.

## Understanding SSE and SASE within the Megaport network

**SSE -- The security component**

SSE is a set of cloud-delivered security services. It is designed to protect users and data regardless of where they are located.

* **Key services** -- <Gloss term="Secure Web Gateway (SWG)" anchor="swg" />, <Gloss term="Cloud Access Security Broker (CASB)" anchor="casb" />, and <Gloss term="Zero Trust Network Access (ZTNA)" anchor="ztna" />.
* **Goal** -- Secure User-to-App and App-to-App traffic.

**SASE -- The comprehensive architecture**

SASE provides a comprehensive approach for networking and security.  It represents the convergence of networking (<Gloss term="SD-WAN" anchor="sdwan" />) and security functions into a single, global, cloud-native service.

* **The formula** -- SASE = SSE + SD-WAN
* **Goal** -- Simplify management and improve performance by combining connectivity and security.

As a Network as a Service (NaaS) provider, Megaport plays a critical role by hosting SD-WAN and security services. By providing a secure and private underlay as well as <Gloss term="virtualized network functions (VNFs)" anchor="vnf" /> hosting capability, Megaport enables the seamless integration of SSE and SASE features directly into your network architecture.

**Megaport's role -- Connectivity layer**

While SSE and SASE providers such as Palo Alto Networks, Cisco, and Fortinet manage the security inspection and policy, Megaport provides the private software-defined network that carries the traffic between your locations and the cloud.

Megaport bypasses the inherent instability of the public internet by utilizing a private and dedicated backbone. By using Megaport, you ensure your SSE and SASE traffic doesn't get slowed down by public internet congestion and high-jitter or high-latency hops.

**Network overview -- SSE and SASE via the Megaport network**

The following network diagram illustrates how the Megaport network carries private traffic to integrate SSE and SASE functions into your network.

<Image src="/images/mve/sse-sase-mp.png" alt="Network overview: SSE and SASE via Megaport SD-WAN" shadow={true} width={800} />

## Summary of features provided by SSE and SASE

The following table summarizes SSE and SASE features.

| **Feature**                | **SSE**                                                   | **SASE**                                                                                                                                                                                                          |
| -------------------------- | --------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Primary functions**      | Data and access security                                  | Network + security                                                                                                                                                                                                |
| **Common component**       | CASB, FWaaS, SWG, ZTNA                                    | SD-WAN + SSE                                                                                                                                                                                                      |
| **User/branch deployment** | Via a lightweight agent on the laptop or a browser portal | SSE Agent plus site-to-site and site-to-cloud tunnels automated by SD-WAN (<Gloss term="Internet Protocol Security (IPsec)" anchor="ipsec" /> /<Gloss term="Generic Routing Encapsulation (GRE)" anchor="gre" />) |
| **Vendor examples**        | Zscaler, Netskope, Cloudflare                             | Cisco, Fortinet, Palo Alto                                                                                                                                                                                        |

## Implementing SSE using Megaport services

**Architectural overview**

Some SSE platforms, including Cloudflare, Netskope, Cato, and Palo Alto Prisma Access, integrate with Megaport by providing private connectivity to Megaport-enabled data centers and cloud on-ramps.

You can also implement SSE solutions with a Megaport Virtual Edge (MVE), which hosts virtualized network functions (VNFs) such as <Gloss term="Next Generation Firewall (NGFW)" anchor="ngfw" />, CASB, SGW, and ZTNA, at the edge of Megaport’s global private network. The MVE also facilitates secure access from cloud-based SSE platforms to private applications hosted in data centers and CSPs.

While SASE focuses on the convergence of SD-WAN and security, an SSE-centric MVE deployment prioritizes the security stack and serves as a private on-ramp to cloud security providers.  Instead of sending sensitive corporate traffic solely over the unpredictable public internet, user traffic is directed to a localized MVE.

**Deployment workflow**

1. **Provision the MVE** -- Deploy an MVE instance in the metro area geographically closest to your users or branch offices to minimize latency.

2. **Appliance activation** -- Once the virtual appliance is active on the MVE, it is registered with your SSE vendor's central management console (for example, Prisma Access Strata Cloud Manager, FortiSASE). This allows you to push granular security policies and identity-based access controls to the edge.

3. **Establish connectivity** -- To complete the path, you configure Virtual Cross Connects (VXCs) from the MVE directly to your Cloud Service Providers (CSPs) or your SSE vendor’s cloud points of presence (PoPs).

This setup creates a secure private underlay where traffic is first secured on the MVE and then transported across Megaport's private backbone.

This bypasses internet congestion, mitigates DDoS risks, and provides a more stable, predictable path for your SSE-protected data.

## Implementing SASE using Megaport services

**Architectural overview**

You can implement SASE SD-WAN with MVE, which hosts SD-WAN virtualized network functions (VNFs) directly on Megaport’s global private SDN.

Instead of relying solely on the public internet, traffic from branch offices or remote users connects to a localized MVE. The MVE runs certified SASE or VNF appliances from partners such as Cisco, Fortinet, Palo Alto Networks, Versa, and so on, which integrate the SSE security stack with networking optimization (SD-WAN).

**Deployment workflow**

1. **Provision the MVE** -- Deploy an MVE instance in the metro area geographically closest to your users or branch offices to minimize latency.

2. **Configure security policies** -- Once the virtual appliance is active, it will automatically register and authenticate with the vendor’s central orchestrator to incorporate SD-WAN security policies.  For example, Palo Alto Panorama and Fortinet FortiManager.

3. **Establish connectivity** -- Configure VXCs from the MVE to CSPs such as AWS, Azure, or Google Cloud. This creates a connectivity where traffic is secured at the edge and then transported across Megaport’s private backbone, bypassing internet congestion and reducing egress costs.  A 100% private underlay to key locations, such as an enterprise headquarters office or a manufacturing facility, can be created through Megaport's private data center interconnects globally.

## MVE vendor image deployment

The following table provides a list of documentation explaining how to deploy a host MVE for your chosen vendor. This is the first step before implementing SSE and SASE services.

As Megaport continues to add new vendors, if a specific vendor is missing, check the [MVE Overview](/mve) section for the most up-to-date list of supported vendors.

For detailed configuration steps, please consult the product documentation provided on each vendor's website.

| **Providers**                    | **Solution** | **Links**                                                                                   |
| -------------------------------- | ------------ | ------------------------------------------------------------------------------------------- |
| 6WIND Licensed Network Functions | SASE         | [Planning Your 6WIND Deployment](/mve/6wind/plan-deployment)                                |
| Anapaya                          | SSE          | [Planning Your Anapaya Deployment](/mve/anapaya/plan-deployment)                            |
| Arista VeloCloud SD-WAN          | SASE         | [Planning Your Arista VeloCloud SD-WAN MVE Deployment](/mve/vmware/plan-deployment)         |
| Aruba                            | SSE, SASE    | [Planning Your Aruba EdgeConnect SD-WAN MVE Deployment](/mve/aruba/plan-deployment)         |
| Aviatrix                         | SASE         | [Planning Your Aviatrix Secure Edge Deployment](/mve/aviatrix/plan-deployment)              |
| Check Point CloudGuard           | SSE, SASE    | [Planning Your Check Point Deployment](/mve/checkpoint/plan-deployment)                     |
| Cisco                            | SSE, SASE    | [Planning Your Cisco MVE Deployment](/mve/cisco/plan-deployment)                            |
| Fortinet                         | SSE, SASE    | [Planning Your Fortinet Secure SD-WAN Deployment](/mve/fortinet/plan-deployment)            |
| Juniper                          | SASE         | [Planning Your Juniper Deployment](/mve/juniper/plan-deployment)                            |
| Netskope One SD-WAN              | SASE         | [Planning Your Netskope One SD-WAN Deployment](/mve/netskope/plan-deployment)               |
| Palo Alto Networks               | SSE, SASE    | [Planning Your Palo Alto Networks VM-Series MVE Deployment](/mve/palo-alto/plan-deployment) |
| Peplink FusionHub                | SASE         | [Planning Your Peplink FusionHub Deployment](/mve/peplink/plan-deployment)                  |
| Versa                            | SASE, SSE    | [Planning Your Versa Secure SD-WAN Deployment](/mve/versa/plan-deployment)                  |

## Helpful references

* [Connections Overview](/connections/overview)
* [MVE Overview](/mve)
* [Using IPsec with Megaport](/encryption/ipsec)