Is a firewall still needed if we have zero trust or SASE?

Yes, in most offices. Secure access service edge (SASE) moves web filtering, secure remote access and some firewall functions into a cloud service, and zero trust changes how access is granted, but you still need something that blocks unsolicited connections from the internet into the office, separates network segments from each other and controls what servers and devices that never run the SASE client may reach. Printers, cameras, machines and many servers run no agent and are protected only by the network around them. So the firewall's role shrinks rather than disappears: inbound protection, segmentation and outbound rules for unmanaged devices. Keep its rules short and reviewed. NetSenX does not replace a firewall or a SASE service and blocks nothing. It watches the traffic that crosses monitored segments and flags scanning, lateral movement, beaconing and unusual outbound volume, on every plan, which tells you when either layer is being bypassed.

← All 45 questions on Zero trust, identity and segmentationAll topics