Ever since the term secure access service edge (SASE) was created by Gartner in 2019, its popularity has exploded. A cloud-native software architecture, SASE is the convergence of networking and security that combines WAN capabilities with cloud-native security functions like secure web gateways, cloud access security brokers, firewalls and zero-trust network access.

According to MarketsandMarkets, the worldwide SASE market is expected to grow from $1.9 billion in 2023 to $5.9 billion in 2028, a compound annual growth rate of 25%, with digital transformation, cloud adoption and edge computing as the biggest drivers for SASE adoption. Per the 2022 Gartner CIO and Technology Executive Survey, “SASE was the third most commonly cited technology investment (deployed or planning to deploy within 12 months) after [artificial intelligence/machine learning] and distributed cloud, respectively.”

Despite its relative newness, SASE certification courses are already on the market. Further, popular cybersecurity certifications are beginning to incorporate SASE elements. Here are some of the top candidates:

Top 10 SASE certifications  1. MEF SD-WAN Certified

MEF’s SD-WAN Certified Professional designation (MEF-SDCP) is a vendor-neutral training and certification that validates knowledge, skills and capabilities in SD-WAN, SD-WAN security and performance monitoring. It teaches beginner and mid-range skills including the following:

• Basic SD-WAN concepts, business benefits and value proposition
• SD-WAN planning, design and architecture
• How to deploy, optimize and maintain an SD-WAN service
• Application security and SD-WANs
• How to monitor and measure SD-WAN performance

The MEF SD-WAN Certified Professional cert has the most value for those in presales, applications teams, product management/marketing, those designing and developing SD-WANs, and those in operations, service and support.

2. VMware Master Specialist

The VMware Master Specialist — SD-WAN certificate signifies detailed knowledge of VMware SD-WANs at an advanced level. VMware requires candidates to hold several other certifications to qualify, including a current MEF SD-WAN certification, a VMware SD-WAN Troubleshoot cert and a VMware SD-WAN Design and Deploy cert. Collectively, this all adds up to a person skilled in SD-WAN from a vendor-neutral as well as a VMware perspective.

3. Palo Alto Networks SASE training

Palo Alto Networks provides training specific to its Prisma platform. Its instructor-led Prisma Access SASE Security 3.0: Design and Operation course outlines the Prisma architecture and SD-WAN design; how to provide network security services from the cloud; protection of applications, remote networks and mobile users; Security Processing Nodes and Panorama Operations for Prisma Access and Cloud Managed Prisma Access (Prisma SASE); and configuration, management and troubleshooting of Prisma Access in a lab environment. It takes four days, including lab work. Those taking it should already possess cloud computing and public cloud capabilities and have completed a couple of basic Palo Alto firewall certs or have sufficient experience in routing, switching and IP addressing.

Those taking this course should consider further Palo Alto courses so they gain the full Palo Alto Networks Certified Network Security Engineer (PCNSE) qualification.

4. Cisco CCNP

Cisco’s CCNP Security certification is much broader than SASE, but includes SASE elements as well as a great many networking and security skills needed to work within Cisco’s architecture. Cisco’s Implementing and Operating Security Core Technologies course is where students are prepped for the core exam. It covers security infrastructure, network, cloud and content security, endpoint protection and detection, secure network access, visibility and enforcement.

Students also need to take a concentration course and exam in an area such as Cisco Firepower, Cisco Identity Services Engine, Cisco Email Security Appliance or Cisco Web Security Appliance to attain CCNP certification.

5. Versa SASE Essentials

Versa SASE Essentials is available on-demand to teach people SD-WAN technology, SASE design, architecture and deployment. It covers SASE characteristics and connectivity, as well as how to transition from SD-WAN to SASE and how to evaluate vendor solutions. It includes details of Versa Secure SD-WAN technology.

6. Cato SASE Certification 

Cato’s SASE certification comes in two states. Level 1 takes a few hours and covers the evolution of networking from MPLS to SD-WAN and SASE, the basics of SASE architectures, SASE integration and migration, and why VPNs should probably be avoided in SASE. Those completing are advised to go right onto Level 2.

Cato provides largely vendor-neutral SASE training though examples covering its own technology. It only takes a few hours and is aimed at network engineers, C-level execs, channel partners and others. It includes IPS-as-a-service, single-pass processing, cloud networks, native SD-WAN implementation, and how security processing differs in the cloud compared to the edge.

7. Netskope SASE Accreditation

Netskope SASE Accreditation is instructor-led, virtual and interactive. It goes into details about Netskope SASE, general SASE architectures, software-defined networking, zero-trust security, secure web gateways, microsegmentation, cloud access security brokers and secure access.

8. ISACA: Certified Information Security Manager

ISACA’s Certified Information Security Manager (CISM) certification commands average pay rates of more than $160,000, according to Skillsoft. CISM covers security broadly, including SASE, but it isn’t a specialized SASE certification. Those gaining it can manage, design and assess information security and are skilled in security governance, risk management and incident management. The key thing about CISM is that it sets the person up to move into a management role. With so many SASE projects on the horizon, those who know how to manage and govern securely will be in high demand. CISM certification is a smart option for IT professionals aspiring to senior management roles in IT security and control.

This one isn’t easy to qualify for. You need five years of professional work experience in the specific areas before you can sit the exam. There is also a prep course available from ISACA and others.

9. ISACA: Certified in Risk and Information Systems Control 

Another ISACA certification, Certified in Risk and Information Systems Control (CRISC) trains the person to identify, evaluate and manage IT risk, as well as plan and implement defensive and remediation measures. It also encompasses management skills such as being able to communicate clearly to management and non-technical personnel about risk and security issues. According to the Foote Partners IT Skills and Certifications Pay Index, risk management is one of the most in-demand skills around. Those possessing this cert combined one of the earlier SASE specialist certs above is in a strong position to supervise SASE projects at a high level. Holders of CRISC are knowledgeable in threat intelligence, risk analytics learning and AI.

10. Certified Information Systems Security Professional 

A Certified Information Systems Security Professional (CISSP) certificate holder can design, implement and manage cybersecurity programs including SASE. CISSP covers risk management, asset security, security architecture, network security, identity and access management (IAM), security assessment and testing, day-to-day security operations and developing secure software. This is a cert aimed at experienced security practitioners, managers and executives. Holders will enhance their chances of landing a CISO, CIO, director of security or IT director position. But it is also relevant to security systems engineers, security analysts, security managers, security auditors, security architects, consultants and network architects. Some would consider CISSP the equivalent of earning a master’s degree in IT security.

Don’t forget platform security skills 

The above certificates are either directly related to SD-WAN and SASE or are vendor-agnostic security certs that include SASE elements. But don’t forget about vendor security training on specific platforms. When coupled with SASE certs, these can make a powerful combination in the job market. Examples include:

Microsoft

A Microsoft Certified: Security Operations Analyst Associate certification provides security skills across the Microsoft universe. Those operating Azure, Microsoft 365, Teams, Dynamics, Microsoft Defender and Microsoft Endpoint Manager will gain in-depth know-how on collaborating with others to secure systems. It arms analysts with the skills needed to reduce organizational risk, remediate attacks, improve threat protection practices and find the root cause of security issues. Holders have demonstrated skills in using Microsoft Azure Sentinel, Azure Defender, Microsoft 365 Defender, and third-party security products. The security operations analyst can assess operational output from these tools, configure them and deploy them.

AWS

AWS Certified Security – Specialty demonstrates the ability to secure data in the AWS cloud. Candidates are expected to possess five years of security experience with at least two years of that with AWS workloads. Holders can implement best practices and security solutions across AWS platforms. Amazon advises candidates to first take the AWS Certified Solutions Architect – Associate or AWS Certified Solutions Architect – Professional before applying for this one.

But the long runway should be worth it. Job listings requiring this certification have increased 73% over the past year. Further, those who possess the AWS Certified Solutions Architect – Professional cert would already have gained the highest paying IT certification in 2022, according to Skillsoft. Thus, a person having that AWS cert plus the AWS Certified Security – Specialty cert and SASE skills would never be short of job opportunities.

SD-WAN and SASE skills are in demand 

According to Foote Partners, cybersecurity skills in high demand include threat intelligence, DevSecOps, identity and access management, security testing, SASE, management of a security infrastructure, security architecture, encryption and the skills needed to secure data warehouses.  

“These IT skills are among those earning the highest pay premiums,” said David Foote, an analyst at Foote Partners.