SASE has many components, including Secure Web Gateway (SWG). What is a SWG and how does it fit your needs? Feel free to reach out for a conversation: smurphy(at)myarg(dot)com
The advantage of SWG over firewall you mentioned is that if Firewall does all this job then it will reduce firewall performance.. is it the only reason ? I mean if we buy a Firewall with high end specs that can handle any traffic then what is the need of a SWG in our network? Because now NG-Firewalls are capable of doing SSL inspection, Malware scanning for web browsed contents, DLP, Zero-trust , URL Filtering, URL and File reputation checks and more..
Thanks for your question! As I stated, SWG elements are capabilities of NGFW. What many users find, however, is that a properly sized FW at purchase, becomes under-powered over time as more processing is required for additional services. Threats grow, box stays the same. Also, brining all your traffic back to a high-end FW is inefficient and can effect user experience in a clouded environment. A clouded SWG provides protection for all users, rather than forcing the traffic back to a hub. There is no single best answer. Thanks again! Best Regards, Steve