Where the enterprise adopts a secure access service edge architecture, networking and security functions are delivered together as a cloud service reached through distributed points of presence, with enterprise edges being clients (desktops, laptops, mobile and IoT devices at branches or remote locations) and IT resources (applications in data centres, branches or clouds). The service optimises traffic, controls access to resources in different administrative domains, prevents threats, and applies uniform policy to all users regardless of location from a single dashboard; it includes at least firewall, secure web gateway, anti-malware, intrusion prevention, cloud access security broker and data loss prevention services, with a device agent steering traffic by business rules, and may add browser isolation and continuous adaptive risk and trust assessment that changes permissions as a device's trust profile changes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.