Question

A global retailer operates 200 branch offices that currently backhaul all internet and SaaS traffic through two regional data centers for inspection via legacy firewalls and web proxies. Users report high latency to cloud-based POS and collaboration apps, and the security team struggles to enforce consistent policy for a growing remote workforce. Leadership wants a cloud-delivered architecture that unifies network and security controls, applies identity-aware policy close to the user, and eliminates the data center hairpin. Which approach best meets these requirements?

Accepted Answer

Deploy a Secure Access Service Edge (SASE) solution that converges SD-WAN with cloud-delivered SWG, CASB, and ZTNA enforced at distributed points of presence

Answer

Upgrade the two regional data center firewalls to higher-throughput next-generation appliances and add more backhaul bandwidth per branch

Answer

Deploy a full-tunnel VPN concentrator in each data center and require all branch and remote users to connect through it before reaching any application

Answer

Install standalone next-generation firewalls at every branch office and manage each device independently through its local console