--- title: "Cisco Secure Access (SSE) Explained: ZTNA, SWG and CASB" description: What Cisco Secure Access is, how its ZTNA, secure web gateway, CASB and firewall-as-a-service work together, and where it fits in Cisco's User Protection Suite. image: https://blog.iptel.com.au/hubfs/Blogs/Cisco%20Secure%20Access/Cisco%20Secure%20Access.gif --- [![IPTellogo-byline-2020-dark-v2-pnd-optimised-500 (1)](https://blog.iptel.com.au/hs-fs/hubfs/IPTellogo-byline-2020-dark-v2-pnd-optimised-500%20(1).png?width=200&height=59&name=IPTellogo-byline-2020-dark-v2-pnd-optimised-500%20(1).png "IPTellogo-byline-2020-dark-v2-pnd-optimised-500 (1)")](https://iptel.com.au) - [Home](https://iptel.com.au/) - [Solutions](https://iptel.com.au/solutions) Technologies - [Cisco Access Manager](https://iptel.com.au/technologies/cisco-access-manager) - [Cisco Catalyst Center](https://iptel.com.au/technologies/cisco-catalyst-center) - [Cisco Meraki](https://iptel.com.au/technologies/cisco-meraki) - [Cisco SDA Fabric](https://iptel.com.au/technologies/cisco-sda-fabric) - [Cisco Spaces](https://iptel.com.au/technologies/cisco-spaces) - [Everpure Storage](https://iptel.com.au/technologies/everpure-storage) - [Industrial IoT](https://iptel.com.au/technologies/industrial-iot) - [LAN](https://iptel.com.au/technologies/lan) - [Security and Cisco ISE](https://iptel.com.au/technologies/security-and-cisco-ise) - [ThousandEyes](https://iptel.com.au/technologies/thousandeyes) - [Virtualisation](https://iptel.com.au/technologies/virtualisation) - [Wi-Fi](https://iptel.com.au/technologies/wi-fi) Services - [Backup Assure](https://iptel.com.au/services/backup-assure) - [Cisco Network Upgrades](https://iptel.com.au/services/cisco-network-upgrades) - [Cisco URWB](https://iptel.com.au/services/cisco-urb) - [Cisco Webex Calling](https://iptel.com.au/services/cisco-webex-calling) - [Eco-Friendly Network Refresh](https://iptel.com.au/services/eco-friendly-network-refresh) - [Network Equipment Supply](https://iptel.com.au/services/network-equipment-supply) - [Splunk](https://iptel.com.au/services/splunk) - [Wi-Fi Assurance Review](https://iptel.com.au/services/wi-fi-assurance-review) - [Wi-Fi Surveys](https://iptel.com.au/services/wi-fi-surveys) - [Industries](https://iptel.com.au/industries) Education and Healthcare - [Education and Campuses](https://iptel.com.au/industries/education) - [Healthcare and Clinical](https://iptel.com.au/industries/healthcare) - [Hospital Wi-Fi Onboarding](https://iptel.com.au/services/hospital-wi-fi-onboarding-cisco-ise) - [Aged Care](https://iptel.com.au/industries/aged-care) Enterprise - [Enterprise Networks](https://iptel.com.au/industries/enterprise) Industrial - [Mining and Camps](https://iptel.com.au/industries/mines) - [Utilities](https://iptel.com.au/industries/utilities) Retail & Warehousing - [Retail](https://iptel.com.au/industries/retail-and-stores) - [Warehousing](https://iptel.com.au/industries/warehousing) Entertainment - [Stadiums](https://iptel.com.au/industries/stadiums) - [Hospitality](https://iptel.com.au/hospitality-and-hotels) - [MSP](https://iptel.com.au/managed-services) Meraki - [Meraki Access](https://iptel.com.au/managed-services/meraki-access-and-security) - [Meraki Security and SD-WAN](https://iptel.com.au/managed-services/meraki-sd-wan) Cisco - [Cisco Campus Access](https://iptel.com.au/managed-services/cisco-campus-access) - [Cisco SD-WAN](https://iptel.com.au/managed-services/cisco-sd-wan) - [Cisco ISE](https://iptel.com.au/managed-services/cisco-ise) Security and Collaboration - [Security Service Edge](https://iptel.com.au/managed-services/security-service-edge) - [Meeting Rooms](https://iptel.com.au/managed-services/meeting-rooms-as-a-service) Data Centre and More - [AI Infrastructure](https://iptel.com.au/managed-services/ai-infrastructure) - [Non-Cisco Devices](https://iptel.com.au/managed-services/non-cisco-device-management) Free Assessment - [Managed Services Assessment](https://score.iptel.com.au/managed-network-services) - [Equipment](https://iptel.com.au/services/network-equipment-supply) Equipment Supply - [Network Equipment Supply](https://iptel.com.au/services/network-equipment-supply) - [Buy Cisco Equipment](https://iptel.com.au/services/cisco-equipment-supply) - [Buy Meraki Equipment](https://iptel.com.au/services/meraki-equipment-supply) Get Pricing - [Get a Hardware Quote](https://iptel.com.au/services/network-equipment-supply#hardware-quote) - [Wi-Fi AP Estimator](https://iptel.com.au/resources/wifi-access-point-estimator) - [Blog](https://blog.iptel.com.au) - [Resources](https://iptel.com.au/resources) Free Resources - [Top Wi-Fi Secrets](https://iptel.com.au/top-8-wi-fi-secrets) - [Cisco SDA Fabric](https://iptel.com.au/the-cios-guide-to-sda-fabric) - [Catalyst Center Enablement](https://iptel.com.au/cisco-catalyst-center-enablement) Assessments - [ASD Essentials Assessment](https://score.iptel.com.au/asd-essentials-network-assessment) - [Cloud AI Assessment](https://score.iptel.com.au/cloud-ai-assessment) - [Collaboration Assessment](https://score.iptel.com.au/collaboration-assessment) - [Managed Services Assessment](https://score.iptel.com.au/managed-network-services) - [Network Assessment](https://score.iptel.com.au/network-assessment) - [Security Assessment](https://score.iptel.com.au/security-assessment) - [Splunk Assessment](https://score.iptel.com.au/splunk-assessment) Tools - [Automating Meraki](https://www.automatingmeraki.com) - [MAC Address Converter](https://iptel.com.au/resources/mac-address-converter) - [ThousandEyes Option Tool](https://score.iptel.com.au/thousandeyes) - [Wi-Fi AP Estimator](https://iptel.com.au/resources/wifi-access-point-estimator) Demos and Design - [Request a Meraki Demo](https://iptel.com.au/free-meraki-demo) - [FREE Meeting Room Design](https://iptel.com.au/schedule-meeting-room-design-session) - [Catalyst Center Enablement](https://iptel.com.au/cisco-catalyst-center-enablement) - [About](https://iptel.com.au/about-us) IPTel Solutions - [About us](https://iptel.com.au/about-us) - [Job Applications](https://careers.iptel.com.au/job-application) - [Privacy Policy](https://iptel.com.au/privacy-policy) - [Careers Blog](https://careers.iptel.com.au) Contact Us - [Contact Us Form](https://iptel.com.au/contact-us) - [Email Us](mailto:sales@iptel.com.au) Customer - [Customer Feedback](https://iptel.com.au/customer-feedback) - [Customer Referral](https://iptel.com.au/customer-referral) - [Terms and Conditions](https://iptel.com.au/terms-and-conditions) News Stories - [Project Guardian uses Networking Infrastructure as a Sensor](https://www.dailytelegraph.com.au/news/nsw/transport-for-nsw-launches-worldfirst-sensor-trial-to-stop-rail-and-bridge-trespassers/news-story/8dc52e8fbca4c471da408e670cf0163e) - [IPTel partners for monitoring for Meeting Rooms as a Service](https://www.commsbusiness.co.uk/content/news/highlight-partners-with-iptel-solutions) - [Webex Monitoring with Highlight](https://itbrief.co.uk/story/highlight-iptel-add-webex-monitoring-for-meeting-rooms) - [ITBrief with Meeting Room Monitoring](https://itbrief.com.au/story/highlight-iptel-add-webex-monitoring-for-meeting-rooms) - [Cisco Webex Meeting Rooms Monitoring](https://telconews.co.uk/story/highlight-iptel-add-webex-monitoring-for-meeting-rooms) - [IPTel adopts Highlight](https://itbrief.com.au/story/iptel-adopts-highlight-to-enhance-managed-services) - [Highlight MSP Upgrade](https://datacentre.solutions/news/71753/iptel-solutions-upgrade-with-highlights-service-platform) - [Cisco 360](https://www.crn.com.au/news/2026/networking/aussie-partners-react-cisco-360) - [DP World Transformation](https://www.cisco.com/site/us/en/about/case-studies-customer-stories/dp-world.html) - [Cisco Managed Services](https://www.arnnet.com.au/article/1251771/how-partners-can-take-a-leap-of-faith-with-managed-services.html) - [Project Delivery Excellence](https://channellife.com.au/story/cisco-honours-top-nz-partners-cisco-live) - [Great Place to Work](https://greatplacetowork.com.au/companies/iptel-solutions/) - [Wi-Fi Doesn't have to be Unreliable](https://www.techpartner.news/feature/iptel-wi-fi-doesnt-have-to-be-unreliable-494069) Buying from IPTel - [Buying Panels](https://iptel.com.au/professional-supply-panels) - [IPTel Store](https://store.iptel.com.au) - [Request a Quote](https://iptel.com.au/request-a-quote) - [Managed Services](https://iptel.com.au/managed-services-enquiry) Case Studies - [DP World Video](https://blog.iptel.com.au/hubfs/Case%20Studies/DP%20World_Case_Study.mp4) - [DP World](https://blog.iptel.com.au/dp-world-case-study) - [Backup Assure](https://blog.iptel.com.au/backup-assure-a-disaster-recovery-case-study) [Contact Us](https://iptel.com.au/contact-us) This is a search field with an auto-suggest feature attached. - There are no suggestions because the search field is empty. ## Cisco Secure Access (SSE) Oct 2, 2026 Hybrid work has moved users and apps out of the office, so security has to move with them. In this blog, we'll explain what Cisco Secure Access is, how its Security Service Edge (SSE) modules fit together, how users and data centres connect to it, and what Experience Insights adds. ![Cisco Secure Access security service edge for the hybrid workforce](https://blog.iptel.com.au/hs-fs/hubfs/Blogs/Cisco%20Secure%20Access/Cisco%20Secure%20Access.png?width=706&height=373&name=Cisco%20Secure%20Access.png) --- ## Secure Access: What Is Cisco's SSE Platform? [![Cisco AI Access: How to Securely Adopt AI](https://blog.iptel.com.au/hs-fs/hubfs/Blogs/Cisco%20AI%20Access%20-%20How%20to%20Securely%20Adopt%20Generative%20AI/Cisco%20Au%20(Instagram%20Post%20(45)).gif?width=173&height=173&name=Cisco%20Au%20(Instagram%20Post%20(45)).gif)](https://blog.iptel.com.au/cisco-ai-access-how-to-securely-adopt-ai)Cisco Secure Access is Cisco's cloud-delivered [Security Service Edge](https://iptel.com.au/managed-services/security-service-edge) (SSE) platform. Grounded in zero trust, it brings Zero Trust Network Access (ZTNA), a Secure Web Gateway (SWG), a Cloud Access Security Broker (CASB) and Firewall as a Service (FWaaS) together in one converged service. SSE is a key enabler of any organisation's hybrid-work strategy. Your users connect from home, the office and everywhere in between, and the apps they need sit in your data centre, public cloud and SaaS. Security has to follow the user, not the building. Secure Access goes beyond those core modules. It adds multimode data loss prevention (DLP), DNS-layer security, Remote Browser Isolation (RBI), malware analysis and Talos threat intelligence, all under one cloud-delivered platform. If you know [Cisco Umbrella](https://blog.iptel.com.au/cisco-umbrella), which secures traffic at the DNS and web layers, the difference is scope. With Secure Access, users can safely reach all the resources and apps they need, regardless of protocol, port or level of customisation. Newer capabilities such as [AI Access](https://blog.iptel.com.au/cisco-ai-access-how-to-securely-adopt-ai), for visibility and control over generative AI apps, are part of the same platform. Related reading - [Cisco AI Access: How to Securely Adopt AI](https://blog.iptel.com.au/cisco-ai-access-how-to-securely-adopt-ai) - [Cisco Umbrella](https://blog.iptel.com.au/cisco-umbrella) --- ## Connectivity: How Do Users and Data Centres Connect? Users connect through Cisco Secure Client, a single unified agent that carries the Secure Access modules: a VPN for Secure Internet Access (SIA) and Secure Private Access (SPA), and a ZTNA module for private access. On the data centre side, you connect with IPsec tunnels or with lightweight resource connectors. The ZTNA module gives seamless access to any TCP- or UDP-based private application, web or non-web, in your private data centre. Here's how the pieces fit together. ![How users and data centres connect to Cisco Secure Access](https://blog.iptel.com.au/hs-fs/hubfs/Blogs/Cisco%20Secure%20Access/Cisco%20Secure%20Access%202.png?width=586&height=191&name=Cisco%20Secure%20Access%202.png) Data centres need a device that supports IPsec to build backhaul tunnels from your on-premises data centre to Cisco Secure Access. Where an IPsec-capable device isn't an option, resource connectors fill the gap. They're lightweight virtual machines deployed in your data centre that build DTLS tunnels to the Secure Access cloud, connecting user traffic to your private resources using zero trust access. The bonus? No significant changes to your network routing. Related reading - [Zero Trust Architecture (ZTA) Introduction](https://blog.iptel.com.au/zero-trust-architecture) - [Zero Trust Architecture (ZTA) Deployment](https://blog.iptel.com.au/zero-trust-deployment) --- ## SSE Benefits: Why Move Security to the Cloud? [![Network Security Assessment Tool](https://blog.iptel.com.au/hs-fs/hubfs/Blogs/Security%20Assessment%20Tool/Security%20Assessment%20Tool%20(Instagram%20Post).png?width=173&height=173&name=Security%20Assessment%20Tool%20(Instagram%20Post).png)](https://blog.iptel.com.au/security-assessment-tool)Moving security to the cloud means the same policy follows every user, wherever they work. Cisco SSE gives you secure remote access to all private apps, defends users and resources from malware, exposes shadow IT, protects sensitive data, and monitors and inspects traffic, all from a single console. There's an operational gain too. One client, one console and centralised policy mean fewer moving parts to deploy and run. And because user experience insights are built in, you can lift user productivity and IT efficiency at the same time. The graphic below summarises the key benefits. ![Key benefits of Cisco Secure Access security service edge](https://blog.iptel.com.au/hs-fs/hubfs/Blogs/Cisco%20Secure%20Access/Cisco%20Secure%20Access%203.png?width=541&height=298&name=Cisco%20Secure%20Access%203.png) Related reading - [Network Security Assessment Tool](https://blog.iptel.com.au/security-assessment-tool) - [Network Security Basics](https://blog.iptel.com.au/networking-security-basics) --- ## Experience Insights: How Do You Monitor User Experience? Experience Insights measures the real-time performance and availability of the applications and services your users rely on, so IT operations teams can resolve issues quickly and keep people productive. It's integrated with Cisco ThousandEyes, a SaaS product that measures network performance and delivers automated insights into digital experience. It gives you in-depth endpoint health analysis and detailed network performance tracking. It also correlates performance with SaaS outages, so you can tell a local problem from a provider one. On top of that, you get unified user-to-application monitoring, insights you can share across teams, and flexible monitoring options you can expand as you need them. Here's what the Experience Insights view looks like. ![Cisco Secure Access Experience Insights view](https://blog.iptel.com.au/hs-fs/hubfs/Blogs/Cisco%20Secure%20Access/Cisco%20Secure%20Access%204.png?width=602&height=332&name=Cisco%20Secure%20Access%204.png) If you want to take digital experience monitoring further, see our [ThousandEyes Managed Services: Networks You Don't Own](https://blog.iptel.com.au/thousandeyes-managed-services). Related reading - [ThousandEyes Managed Services: Networks You Don't Own](https://blog.iptel.com.au/thousandeyes-managed-services) - [ThousandEyes Managed Services: Top 5 Reasons](https://blog.iptel.com.au/top-5-reasons-thousandeyes-managed-services) --- ## Cisco Secure Access: FAQs ### What Is Cisco Secure Access? Cisco Secure Access is Cisco's cloud-delivered Security Service Edge (SSE) platform. It combines ZTNA, a secure web gateway, CASB, firewall as a service, DLP, DNS-layer security and remote browser isolation, managed from one console with one client, Cisco Secure Client. ### What Is the Difference Between SSE and SASE? SSE is the security half of Secure Access Service Edge (SASE). SASE combines SSE's cloud-delivered security services with SD-WAN networking. Cisco Secure Access provides the SSE part of a SASE architecture. ### Do I Still Need a VPN With Cisco Secure Access? You no longer need your own VPN headend. Secure Access includes VPN as a service alongside ZTNA, both delivered through Cisco Secure Client. Many organisations use ZTNA for specific private applications and keep the cloud VPN for anything ZTNA doesn't suit. ### How Does Cisco Secure Access Connect to My Data Centre? Either through IPsec tunnels from a capable device in your data centre, or through resource connectors: lightweight virtual machines that build DTLS tunnels to the Secure Access cloud without significant routing changes. --- ## Cisco Secure Access: Summary Cisco Secure Access tackles today's challenge of safely connecting anything to anywhere. It connects any user to any app over any port or protocol, simplifies deployment and operations with a single console, unified client and centralised policy, and reduces risk with advanced security that helps keep your business running and avoid the fallout of a breach. ### Need Help With Cisco Secure Access? Our [Security Service Edge managed service](https://iptel.com.au/managed-services/security-service-edge) covers deploying and monitoring Cisco Secure Access, and our [security and Cisco ISE team](https://iptel.com.au/technologies/security-and-cisco-ise) can help you plan a zero trust approach. Our free [Security Assessment](https://score.iptel.com.au/security-assessment) gives your business a clear health check. If that's useful, [get in touch with the IPTel team](https://iptel.com.au/contact-us) or email [sales@iptel.com.au](mailto:sales@iptel.com.au). #### Related Articles ###### [Managed Security Service Edge: Umbrella and Secure Access](https://blog.iptel.com.au/managed-services-security-service-edge) Sept 25, 2025 ###### [Enhancing Network Security: Cisco Umbrella](https://blog.iptel.com.au/enhancing-network-security-cisco-umbrella) July 24, 2026 ###### [Securing your Cisco Wireless Network](https://blog.iptel.com.au/securing-your-cisco-wireless-network) Mar 12, 2026 ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Mark McSherry", "url" : "https://blog.iptel.com.au/author/mark-mcsherry" }, "dateModified" : "2026-10-11T05:24:20.134Z", "datePublished" : "2026-10-02T03:35:32.000Z", "headline" : "Cisco Secure Access (SSE) Explained: ZTNA, SWG and CASB", "image" : [ "https://blog.iptel.com.au/hubfs/Blogs/Cisco%20Secure%20Access/Cisco%20Secure%20Access.gif" ], "mainEntityOfPage" : { "@id" : "https://blog.iptel.com.au/cisco-secure-access-protect-your-hybrid-workforce-with-cloud-agile-security", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.iptel.com.au/hubfs/IPTel_Solutions_February2020%20-%20Header%20SiteMap/Images/IPTellogo-byline-2020-dark-v2.png" }, "name" : "IPTel Solutions Pty Ltd" } } ```