What are two reasons why legacy solutions, such as on-premises firewalls and proxies, fail to secure the data and data access compared to Netskope…

Legacy security solutions, such as on-premises firewalls and proxies, were architected for a perimeter-based model where both users and applications were located within a centralized corporate network. This model is no longer effective. The primary reasons for their failure are the fundamental shifts in where applications reside and where users work. Applications are now distributed across various SaaS and IaaS cloud environments, not a single data center (B). Concurrently, the workforce is increasingly mobile and remote, accessing these applications directly from outside the traditional network perimeter (D). This decentralization of users and applications makes it impractical and inefficient to route all traffic through a central on-premises security stack, leading to security gaps and poor user experience.

A. Legacy solutions can typically identify users through integrations with identity providers like Active Directory. The issue is not the inability to see the user, but the inability to consistently apply policy when the user is off-network.

C. Many legacy solutions can be configured to meet compliance standards. Their failure is not a lack of compliance features, but their architectural inability to effectively enforce those policies in a distributed cloud and mobile environment.

1. Netskope. (2023). Netskope Next Gen Secure Web Gateway Solution Brief. Document ID: SB-SWG-EN-2305. Page 2

Section: "The Problem with Legacy Web Security". This document states

"Traditional security was built around the corporate data center as the center of the universe... but today

applications have moved to the cloud and users are everywhere. Legacy on-premises appliances... can’t keep up." This directly supports that distributed applications (B) and users (D) are the core problem.

2. Stanford University. (2022). CS 259S: Security for the Modern Era

Lecture 5: Zero Trust and SASE. The course material explains that the foundational premise for modern security architectures like SASE (of which Netskope SWG is a component) is the dissolution of the traditional network perimeter. This is driven by two key factors: the migration of applications from on-premises data centers to the cloud (supporting B) and the shift to a remote

mobile workforce that is no longer located in a central office (supporting D).