Posts tagged ‘Zero Trust’
AI Sovereignty Starts with Sovereign SASE
Gartner’s Predicts 2026: AI Sovereignty report makes a case that should reshape how every CIO thinks about AI: sovereignty is not just a capability, it is becoming a deciding factor in how nations and enterprises build, deploy, and govern AI. Gartner projects that by 2027, 35% of countries will be locked into region-specific AI platforms built on proprietary, in-country data, up from roughly 5% today. That is a structural change in how the global AI market works, with direct implications for any organization operating across borders. Gartner’s answer is a sovereign-by-design architecture that maps workloads to jurisdictions and uses controlled…
The Security Gaps Hiding in Fragmented SASE Architectures and How VersaONE Closes Them
Fragmented, multi-vendor SASE architectures share five recurring weaknesses: exposed VPN appliances, an encrypted-traffic blind spot, licensed-but-unconfigured controls, inconsistent malicious-IP blocking, and ungoverned AI and MCP endpoints. Backed by current industry data, this post walks through each gap and shows how a converged, single-pass architecture built on VersaONE closes them as one policy posture rather than five separate projects.
Zero Trust Network Isolation for Agentic AI: Lessons from Anthropic’s Sandbox Incidents
Anthropic’s alignment assessment describes four incidents in which Claude models left their test environments and gained unauthorized access to real third-party systems. This post explains why prompt instructions failed to contain them and how zero trust network isolation supports agentic AI security by closing egress paths.
The AI-Era Network Is Here. How Enterprises Make It Consumable Is the Next Chapter.
Recent industry commentary observes that carriers have built the AI-era network but have not yet figured out how to explain its value. Learn how Versa makes the AI-era network platform actually consumable – for enterprises building their own outcomes, and delivering differentiated services to their customers.
The Foundation of Pervasive Security: Building AI-Resilient, Unified Defenses
Pervasive Security replaces fragmented tools with one AI-resilient architecture built on three pillars. Here’s how they work together.
How Versa Sovereign SASE Answers the EU Technological Sovereignty Package
Versa Sovereign SASE answers the EU Technological Sovereignty Package by localizing all four operational planes, data, control, management, and jurisdiction, under EU law, rather than stopping at data residency.
Federal Zero Trust Maturity: Aligning Mission, Security, and Cost
Federal zero trust maturity now depends on more than security controls. Agencies must also cut the cost of fragmented network and security stacks and keep citizen services running. This post explains how device consolidation, a software-defined WAN, and careful sequencing let agencies meet all three goals together.
The Flat Network Is the Last Unsegmented Zone in the Enterprise
Zero Trust programs have largely completed two phases, remote access and the WAN edge, while the physical campus network remains outside continuous identity-based validation. This post examines why flat and coarsely segmented LANs persist, why VLANs and port authentication do not constitute a segmentation strategy, and how Versa Secure SD-LAN makes segmentation a property of the fabric by enforcing Zero Trust and microsegmentation at the LAN edge.
The Essential Planes Every Sovereign SASE Vendor Must Support
“Sovereign SASE” has become a loosely used claim. This post breaks genuine sovereignty into four architectural planes — data, control, management, and jurisdiction — and shows how Versa Sovereign SASE, built on the VersaONE platform, is architected to satisfy all four, plus the questions that pressure-test any vendor’s claim.
The Trust Layer: How Versa Delivers AI-Driven NetOps with Explainability and Zero Trust Guardrails
AI in NetOps is transitioning from passive alerting to active decision support and execution, but adoption depends on whether engineers can trust it. Learn how Versa’s single-OS platform, unified data lake, Versa Verbo Copilot, and patent-pending Zero Trust MCP Server deliver AI-driven NetOps with explainability and governance built in.
Industry Insights
Mitigating Sophisticated Security Threats at the WAN Edge
By The Versa Team
SASE Technical Professionals
March 20, 2019
According to several industry surveys, it takes the typical enterprise over 200 days to discover a security breach, such as undisclosed web vulnerabilities or spearfishing for email credentials, according to the 2018 Cost of a Data Breach Study: Global Overview from IBM Security and Ponemon Institute. The study calculated that the global average cost of a data breach is $3.86 million, up 6.4% from last year. The average cost, globally, for each lost or stolen record containing sensitive and confidential information is also up from last year, landing at $148 per record or a 4.8% increase from 2017. Although the…
Research Lab
Internal Network Exposure via UPnP NAT Injection
By Winny Thomas
Principal Security Architect
December 5, 2018
Universal Plug-n-Play – (UPnP) is a suite of protocols that enables a device to discover other devices on a network, configure itself to operate in the network, and advertise its services. This allows a device to locate routers, printers and other resources on a network. UPnP runs on UDP port 1900 and communicates using SOAP messages over HTTP. The actual configuration and management interface are implemented using a SOAP-based HTTP service running over a dynamically allocated TCP port. The UPnP protocol allows management of aspects of a device’s operation to extend support by the protocol implementation on the device and its…
Research Lab
Lateral Movement – Definition, Causes & Protection
By Winny Thomas
Principal Security Architect
October 5, 2018
Lateral Movement Definition: Lateral movement is a technique used by cyber attackers to infiltrate and move through a network with the intent of obtaining secure data. The Cause The term “Lateral Movement” has been around for a little over four years and was in the news when ransomware like WannaCry and APT’s like APT28 and APT29 used lateral movement techniques. Most often an attacker may not have direct access to a machine or resource on the internal network, which the attacker considers a prized trophy. The prized trophy may be the domain controller, a machine hosting confidential information, or the…
Industry Insights
Limit Impact of Data Breaches with SD-WAN Segmentation
By The Versa Team
SASE Technical Professionals
August 15, 2018
The 2018 Data Breach Investigations Report (DBIR) compiled by Verizon is loaded with cloak and dagger cyber events conducted by both known and unknown bad actors and mechanisms. Verizon identified 53,000-plus incidents and 2,200 breaches in only 12 months, suggesting an information parallel universe in which an uneven playing field exists whereby the bad guys and rouge bots consistently probe from the outside. Here are some of the key findings in terms of actual breaches: 73 percent were perpetrated by external forces 50 percent were carried out by organized crime groups 48 percent were due to hacking; 30 percent from…
Industry Insights
Security Breaches are often Network Breaches
By The Versa Team
SASE Technical Professionals
August 6, 2018
Once again, recently we heard about an enterprise that succumbed to a major security breach. Shipping giant COSCO lost email and IP phone connectivity throughout their entire US network. And without finding the cause, the company shut down networks within other regions. This example, along with countless others, solidifies the point that distributed networks and security are inherently symbiotic. COSCO says the incident was a network breakdown that led to the ransomware infection. While some are arguing it was the network, others say it was a Malware security breach. The COSCO event was not only a network breakdown, it was…
Product & Engineering
Building a Secure Architecture for the Enterprise Edge with SD-WAN
By The Versa Team
SASE Technical Professionals
July 24, 2018
Typically, WAN solution vendors talk about performance in terms of speeds and feeds. But, I like to think about performance as it relates to all aspects of connectivity. This includes speed, control, visibility, reliability, ease of deployment and monitoring, and of course security. I think about it in these terms because each of these areas are controllable by the right holistic SD-WAN architecture. Unfortunately, the accumulation of multiple disparate routing and switching devices, including firewalls, intrusion detection and threat mitigation, makes it difficult to obtain network visibility and correlate real-time events that can degrade or disrupt performance. With Secure SD-WAN,…
Industry Insights
3 Strategic Imperatives for Winning the Secure Cloud Transition
By The Versa Team
SASE Technical Professionals
July 6, 2018
Networking and security IT infrastructures have evolved to a level of complexity unmanageable by operators and enterprises using a conventional approach. The ongoing reliance upon legacy network hardware and disjointed WAN architectures inhibit the operational agility required by global organizations looking to digitize business services with secure, multi-cloud connectivity. The intersection of network reliability and application performance requires a more flexible, versatile network architecture with security and cloud integration at the forefront; thus, optimal WAN-path selection alone is no longer good enough in a multi-threaded threat environment. Large-scale enterprises with far-flung remote locations and highly distributed data centers are facing…
Subscribe to the Versa Blog
Recent Posts
AI Sovereignty Starts with Sovereign SASE
By Matthew BrooksOctober 27, 2026
Topics
Top Tags
Gartner Research Report
2026 Gartner® Magic Quadrant™ for SASE Platforms
Versa has for the fourth consecutive year been recognized in the 2026 Gartner Magic Quadrant for SASE Platforms1 and is one of only 12 vendors that met the criteria for inclusion based on the analysts’ evaluation of the VersaONE Universal SASE Platform.