Alibaba Cloud Secure Access Service Edge

Alibaba Cloud Secure Access Service Edge (SASE) is an office security management platform that integrates zero trust network access (ZTNA), data loss prevention (DLP), and terminal management. It enables enterprises to implement zero trust access over internal networks without requiring complex or expensive security hardware. The platform provides a centralized security management center, globally distributed SaaS access points, and a one-server-one-agent architecture to simplify security operations and maintenance. SASE supports identity-based security policies through integration with enterprise identity systems including Windows Active Directory, LDAP, DingTalk, WeCom, Lark, and IDaaS. It offers fine-grained access control based on domain names, ports, and IP addresses, as well as agentless access for third-party or outsourcing scenarios. For data protection, SASE includes intelligent data classification powered by Qwen foundation models, peripheral device management, risk governance, and asset scanning. The platform also provides internet access controls including URL filtering and application-level traffic management. Global office acceleration is achieved via BGP network resources, Cloud Enterprise Network (CEN), and Global Accelerator (GA). A high-availability, cloud-native architecture with globally distributed security nodes underpins the service. Pricing is per account quota per month for Private Access, with optional log storage add-ons.