Professional Services
SASE for a 1,200-person hybrid workforce
The challenge
Pandemic-era VPN concentrators sized for 200 users were carrying 800+ daily sessions, home users bypassed corporate firewalls, and cloud traffic was backhauled through HQ.
The result
SASE with integrated SD-WAN, ZTNA, and CASB, lower latency, unified policies for every user, and legacy VPN and firewall hardware retired.
The challenge
A national professional services company shifted to remote work on legacy VPN and regional firewalls. As it settled into a permanent hybrid model, half at home, half in the office, and cloud adoption grew (Microsoft 365, Salesforce, AWS-hosted apps), the cracks appeared: VPN congestion, inconsistent policy enforcement, internet traffic backhauled through the corporate data center, and no visibility once traffic left the tunnel.
What we did
We redesigned the WAN and security model around SASE: integrated SD-WAN, Zero Trust Network Access, and a Cloud Access Security Broker, deployed in a phased migration.
The outcome
Remote users now connect to the nearest secure edge node instead of tunneling through HQ, unified policies follow every user and device, and the phased migration retired legacy VPN concentrators and redundant firewalls, cutting recurring costs. Hybrid work isn’t a trend, SASE makes it office-grade everywhere.