Colt SSE

Control application access, including outside the office.

Security Service Edge (SSE) applies cloud-delivered security controls. It suits distributed users; review identities, devices and the applications they need.

SSE depends on identity, endpoints, supported applications, inspection and privacy requirements.

Let’s talk
Two digital guardians outside an office: one diverts suspicious packets and the other lets legitimate traffic through.

How it works

Protect application access even when users are away from the office.

User and device
Identity and SSE policy
Validate and allow
Authorised application

Access based on identity and context

Colt SSE with Zscaler integrates cloud access and inspection. Define user needs, public versus private applications and contracted controls.

Identity, device posture and permissions must fit the directory and applications. Zero Trust is not whole-network access after one login.

User and device
Identity and SSE policy
Inspect without blocking business
Authorised application

See why a flow is not working

A denial may stem from identity, policy, inspection or connectivity. Correlate logs with user and application before changing a rule.

Define justified exclusions, data handling and impact on sensitive applications. Data-loss prevention features depend on the package.

User and device
Identity and SSE policy
Restore secure access
Authorised application

Continuity without unrestricted access

Availability also depends on Internet, identity and private-application connectors. Test dependencies and recovery for the selected architecture.

Emergency procedures must preserve permissions and traceability. Disabling inspection or authentication is not an assumed acceptable fallback.

Illustrative case: from situation to decision

Situation
An external collaborator needs a private application from an authorised device.
Option
Define identity, device context and access limited to that application.
Check
Test permitted access, denial with unauthorised context and permission removal.

SSE provides security controls; it does not replace access links or select paths like SD-WAN.

Decisions for your project

Identities
Directory, authentication, devices and user groups.
Applications and data
SaaS, private services, inspection, exceptions and data residency.
Dependencies
Connectors, Internet, identity and incident response.

From design to operation

Pilot representative users and applications before extending policies, testing permitted and denied access.

Complements, alternatives and variants

Product sources

Back to top