SASE Scriptlet Orchestration for Autonomous Network Provisioning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing solutions fail to provide customers with the ability to purchase, preconfigure, and autonomously deploy SASE-based network services, lacking in-app ordering, configuration, and deployment of SASE scriptlets.
Innovation Solution
A customer portal and UX platform enable users to select, configure, and autonomously deploy SASE scriptlets on network devices, integrating SD-WAN and network security functionalities, with options for management and customization of network services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Extent of automation
If conventional siloed network solutions are implemented, then network services can be provided, but customers cannot purchase, preconfigure, or autonomously deploy SASE-based network services
Solution Approach 1:
The patent implements a self-service portal that enables customers to independently order, configure, and deploy SASE network services without requiring service provider intervention. The portal provides automated service catalog browsing, configuration parameter selection, and deployment orchestration, allowing customers to autonomously provision services according to their needs.
Solution Approach 2:
The patent implements preconfiguration capabilities where SASE network services are prepared with default settings and parameters before deployment. Service templates and scriptlets are pre-configured with common configurations, allowing customers to deploy services rapidly by simply selecting from pre-prepared options rather than configuring everything from scratch.
2Device complexity
If manual provisioning and configuration of SASE services is used, then services can be deployed, but complexity and cost increase
Solution Approach 1:
The patent merges multiple previously separate processes (service ordering, configuration, validation, and deployment) into a single integrated automated workflow. The service portal consolidates these functions into one unified interface, eliminating the need for customers to manually coordinate multiple systems and reducing overall system complexity.
Solution Approach 2:
The patent introduces an automated intermediary system (the service portal with backend orchestration) that mediates between the customer's service requests and the complex SASE network infrastructure. This intermediary handles the complexity of service provisioning, configuration validation, and deployment coordination, shielding customers from underlying system complexity while maintaining high productivity.
3Adaptability or versatility
If SASE services are provided without in-app ordering and configuration, then basic network services are available, but customized and optimized services cannot be delivered
Solution Approach 1:
The patent enables local quality customization by allowing customers to configure specific parameters and settings for different SASE services based on their particular needs. The portal provides granular configuration options for each service type (firewall, SD-WAN, security services) while maintaining overall system coherence, allowing customization at the appropriate level without requiring complete system redesign.
Data Source
AI summary
Novel tools and techniques are provided for implementing network service ordering and provisioning of secure access service edge (“SASE”) scriptlets for providing SASE-based network. In various embodiments, a computing system may provide a user experience (“UX”) platform for a customer portal, the UX platform being accessible by a user via a user device over a first network(s); may provide, via the UX platform, options to configure, via the customer portal, one or more SASE scriptlets for providing SASE-based network services provided by a service provider; and may autonomously orchestrate deployment and configuration of the one or more SASE scriptlets on one or more network devices that are associated with the user or to an entity with which the user is associated, over a second network(s), based at least in part on user selection of options to configure the one or more SASE scriptlets and/or the corresponding SASE-based network services.