Networking and Security Glossary: SD-WAN, SASE, ZTNA Full Forms

Key facts

SD-WAN: Software-defined wide area network
SASE: Secure Access Service Edge
SSE: Security Service Edge
ZTNA: Zero trust network access
NGFW: Next-generation firewall
UTM: Unified threat management
MTCTE: Mandatory Testing and Certification of Telecom Equipment
PPP-MII: Public Procurement (Preference to Make in India) Order

Networking

SD-WAN: software-defined wide area network

SD-WAN connects branches, data centres and clouds over any mix of links (MPLS, leased line, broadband, 4G/5G) and steers each application over the best path in real time. A central controller sets policy for every site, and traffic between sites runs in encrypted tunnels. See Nexapp SD-WAN Enterprise and SD-WAN vs VPN.

MPLS: multiprotocol label switching

MPLS is a private WAN service from a telecom operator that carries traffic between sites with predictable quality. It is reliable but costly per megabit, which is why many Indian enterprises now add internet links under SD-WAN. See SD-WAN vs MPLS costs in India.

ILL: internet leased line

An ILL is a dedicated, symmetric internet connection with a service-level agreement, sold by Indian operators to businesses. Under SD-WAN it is one of the links the edge can use.

VPN: virtual private network

A VPN is an encrypted tunnel over the internet. Site-to-site VPNs link offices; remote-access VPNs put a user's device on the corporate network. See ZTNA vs VPN.

IPsec: Internet Protocol Security

IPsec is the standard suite for encrypting traffic between two network devices. IKEv2 is the protocol that sets up IPsec keys. Most SD-WAN tunnels use IPsec.

NaaS: network as a service

NaaS is a subscription that bundles connectivity, hardware, security and operations into one price per site. See Nexapp NaaS.

ZTP: zero-touch provisioning

With ZTP, a router or edge configures itself from the controller when it is powered on at site, so no engineer has to configure it on site.

APN: access point name

An APN is the gateway setting a SIM uses to reach a mobile operator's network. A private APN keeps devices such as ATMs or cameras on a closed network, isolated from the public internet.

CGNAT: carrier-grade network address translation

CGNAT lets an operator share one public IP address among many subscribers. Most Indian mobile SIMs sit behind CGNAT, so devices behind a 4G router cannot accept inbound connections without a VPN or a static-IP APN.

Security

SASE: Secure Access Service Edge

SASE combines networking (SD-WAN) and security (SSE) in one cloud-delivered service, so users and branches get the same policy wherever they connect. Gartner introduced the term in 2019. See SASE vs SD-WAN vs SSE and the Nexapp SASE platform.

SSE: Security Service Edge

SSE is the security half of SASE: ZTNA, secure web gateway, CASB, DLP and firewall as a service under one policy. See Nexapp SSE.

ZTNA: zero trust network access

ZTNA gives a user access to one named application after checking identity and device posture, instead of putting the user on the network. It replaces most remote-access VPN use. See ZTNA vs VPN for Indian enterprises.

NGFW: next-generation firewall

An NGFW filters traffic by application and user, not only by port and IP address, and adds intrusion prevention, antivirus and web filtering. See Nexapp NGFW.

UTM: unified threat management

A UTM appliance bundles several security filters (firewall, antivirus, web filtering, anti-spam) in one box, usually for smaller sites. See the UTM replacement guide.

SWG: secure web gateway

An SWG inspects users' web traffic and blocks malicious or non-compliant sites, wherever the user is.

CASB: cloud access security broker

A CASB gives visibility and control over the SaaS applications employees use, such as which apps are allowed and what data can be uploaded.

DLP: data loss prevention

DLP detects sensitive data, such as Aadhaar or card numbers, leaving through web, email or SaaS, and blocks or logs it.

FWaaS: firewall as a service

FWaaS delivers firewall inspection from the cloud instead of a box at each site.

IPS: intrusion prevention system

An IPS inspects traffic for known attack patterns and blocks them in line.

PQC: post-quantum cryptography

PQC is encryption designed to resist attacks from future quantum computers. ML-KEM (NIST FIPS 203) is the standard post-quantum key exchange, and ML-DSA (FIPS 204) the standard post-quantum signature. See post-quantum cryptography.

Indian compliance and procurement

MTCTE: Mandatory Testing and Certification of Telecom Equipment

MTCTE is the Telecommunication Engineering Centre (TEC) scheme that requires notified telecom equipment, including routers, to be tested and certified before sale, import or use in India. See Is MTCTE mandatory for routers?.

PPP-MII: Public Procurement (Preference to Make in India) Order

PPP-MII gives purchase preference to local suppliers in Indian government and PSU procurement. A Class-I local supplier offers goods with at least 50% local content, or a higher threshold where a ministry sets one. See Class-I local supplier and PPP-MII.

CERT-In Directions

The CERT-In Directions of 28 April 2022 require organisations in India to report cyber incidents within 6 hours and keep ICT logs for 180 days within India. See CERT-In 180-day log retention.

GeM: Government e-Marketplace

GeM is the Indian government's online procurement portal, where departments and PSUs buy goods and services, including firewalls and routers.

Frequently asked questions

What is the full form of SD-WAN?

SD-WAN stands for software-defined wide area network.

It connects sites over any mix of links and steers each application over the best path, under central policy.

What is the full form of SASE in cyber security?

SASE stands for Secure Access Service Edge.

It combines SD-WAN networking with SSE security (ZTNA, SWG, CASB, DLP and FWaaS) in one service.

What is the full form of ZTNA?

ZTNA stands for zero trust network access.

It grants access to individual applications after checking the user's identity and device, rather than to the whole network.

What is the full form of NGFW?

NGFW stands for next-generation firewall: a firewall that enforces policy by application and user and adds intrusion prevention, antivirus and web filtering.

What is the full form of SSE?

In network security, SSE stands for Security Service Edge, the security services of SASE delivered from the cloud.

What is the difference between SASE and SD-WAN?

SD-WAN is the networking part: it connects sites and picks the best path.

SASE adds cloud-delivered security (SSE) for users and sites on top. See SASE vs SD-WAN vs SSE.

Networking and security glossary