SASE Function Orchestration for Multi-Vendor Policy Deployment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The SASE service framework faces challenges in providing high-quality, unified orchestration and management of network and security functions due to its complexity and decentralized deployment, leading to increased security risks and operational costs, as well as inefficiencies in integrating multiple vendor solutions.
Innovation Solution
A method for function orchestration that involves obtaining a user strategy indicating desired network and security functions, generating a first sequence based on this strategy, and deploying function modules to satisfy these requirements, considering factors like deployment location, computing requirements, and operating states to ensure efficient and comprehensive orchestration.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple vendors cooperate to provide SASE framework, then network function and security function coverage is improved, but integration complexity and operational costs increase
Solution Approach 1:
The patent introduces a service orchestration function as an intermediary component that manages and coordinates multiple network functions and security functions from different vendors. This orchestration layer abstracts the complexity of multi-vendor integration, providing unified service delivery while maintaining the versatility of having multiple function providers.
Solution Approach 2:
The service orchestration function is designed with multi-functionality to handle various network functions (bandwidth assurance, QoS, routing) and security functions (firewall, intrusion detection, encryption) through a single unified interface. This universal approach reduces integration complexity by providing a common management plane for diverse functions.
2Adaptability or versatility
If SASE service is deployed in distributed manner, then adaptability to various edges is improved, but security risks and operational costs increase
Solution Approach 1:
The patent segments the SASE service into distributed network functions and security functions that can be deployed at various edges, while introducing a centralized service orchestration function that coordinates these segmented components. This segmentation enables edge compatibility while the centralized orchestration maintains security through unified policy enforcement and monitoring.
Solution Approach 2:
The service orchestration function implements feedback mechanisms to monitor the security state and operational performance of distributed functions. This feedback loop enables real-time detection of security risks and allows the orchestration system to adjust configurations, isolate compromised functions, and maintain overall system security despite distributed deployment.
3Device complexity
If comprehensive network function and security function are provided by single vendor, then service integration is simplified, but quality of full-stack functions deteriorates
Solution Approach 1:
The service orchestration function performs preliminary actions by pre-configuring and pre-validating the integration of network and security functions from multiple vendors. This preliminary orchestration ensures that each function meets quality standards before being deployed together, maintaining high-quality full-stack functionality while allowing specialized vendors to contribute their best-in-class functions.
4Productivity
If user strategy is obtained and first sequence is generated, then function orchestration efficiency is improved, but processing time increases
Solution Approach 1:
The system performs preliminary actions by pre-processing user strategies and pre-generating function sequences based on common patterns and policies. This preliminary processing reduces the computational burden during actual orchestration execution, improving efficiency while minimizing additional processing time through optimized pre-computation.
Data Source
AI summary
A function orchestration method includes: acquiring a user policy, wherein the user policy represents a network function and/or a security function expected by a user, obtaining a first sequence on the basis of the user policy, and issuing the first sequence.