Short answer
SSE is cloud security for users: web gateway, CASB, DLP and zero trust access. SASE adds networking, such as SD-WAN, to the same cloud model.
In detail: Difference between SSE and SASE
In practice:
- SSE secures how users reach the internet, SaaS apps and private apps, wherever they work
- SASE adds the network layer, connecting and steering traffic between sites and users as well as securing it
- Cloudflare One delivers the SSE services on one platform, and Cloudflare WAN connects whole sites to the same network
FirstNet builds SASE from three layers it supplies and manages: FirstNet broadband as the links, Peplink at each site to bond those links and keep the site online, and Cloudflare in the cloud to secure every user and app. See the modern network page for how the layers fit together and the four ways to buy them.
Many organisations start with SSE, often by replacing a VPN, and add the network layer as sites and contracts come up for renewal.