{"id":103,"date":"2026-09-13T20:56:41","date_gmt":"2026-09-13T20:56:41","guid":{"rendered":"https:\/\/neranis.com\/?post_type=nrn_service&#038;p=103"},"modified":"2026-09-13T20:56:41","modified_gmt":"2026-09-13T20:56:41","slug":"acces-internet-securise-et-architecture-sase-swg","status":"publish","type":"nrn_service","link":"https:\/\/neranis.com\/fr\/services\/secure-internet-access-and-sase-swg-architecture\/","title":{"rendered":"Acc\u00e8s Internet s\u00e9curis\u00e9 et architecture SASE\/SWG"},"content":{"rendered":"<section class=\"wp-block-group nrn2-section nrn2-page-hero is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-breadcrumb wp-block-paragraph\"><a href=\"https:\/\/neranis.com\/fr\/\">Accueil<\/a> <span aria-hidden=\"true\">\/<\/span> <a href=\"https:\/\/neranis.com\/fr\/expertise\/\">Expertise<\/a> \/ <a href=\"https:\/\/neranis.com\/fr\/expertise\/securite-des-reseaux\/\">S\u00e9curit\u00e9 des r\u00e9seaux<\/a><\/p>\n\n\n<div class=\"wp-block-group nrn2-service-top nrn2-hero-layout-r3 is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-hero-split-copy is-layout-flow wp-block-group-is-layout-flow\">\n\n<p class=\"nrn2-kicker wp-block-paragraph\">NET \/ NET-05<\/p>\n\n\n<h1 class=\"wp-block-heading nrn2-title\">Acc\u00e8s Internet s\u00e9curis\u00e9 et architecture SASE\/SWG<\/h1>\n\n\n<p class=\"nrn2-lead wp-block-paragraph\">Contr\u00f4lez l'acc\u00e8s au Web et au cloud des utilisateurs, au bureau et \u00e0 distance, gr\u00e2ce \u00e0 des politiques coh\u00e9rentes. Le SASE combine des fonctionnalit\u00e9s de mise en r\u00e9seau et de s\u00e9curit\u00e9 ; le p\u00e9rim\u00e8tre r\u00e9el achet\u00e9 doit \u00eatre d\u00e9fini.<\/p>\n\n<\/div>\n\n\n<figure class=\"wp-block-image size-full nrn2-context-image nrn2-visual-asset-service-family-net\"><img loading=\"lazy\" decoding=\"async\" width=\"1600\" height=\"500\" src=\"https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-net.webp\" alt=\"\" class=\"wp-image-246\" srcset=\"https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-net.webp 1600w, https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-net-300x94.webp 300w, https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-net-1024x320.webp 1024w, https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-net-768x240.webp 768w, https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-net-1536x480.webp 1536w\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\" \/><\/figure>\n<\/div>\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-service-top is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-service-intro is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">QUAND C'EST UTILE<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Une r\u00e9ponse cibl\u00e9e<br>\u00e0 un besoin d\u00e9fini.<\/h2>\n\n\n<p class=\"nrn2-body-lg wp-block-paragraph\">Entreprise distribu\u00e9e dont les utilisateurs contournent la protection du si\u00e8ge, dont les r\u00e9seaux d'agences se d\u00e9veloppent ou qui a besoin d'un filtrage web et d'une visibilit\u00e9 sur l'utilisation des services cloud.<\/p>\n\n\n<div class=\"wp-block-buttons nrn2-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/neranis.com\/fr\/contact\/\">Discutez de ce service<\/a><\/div>\n\n<\/div>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-facts is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">EN UN COUP D'\u0152IL<\/p>\n\n\n<p class=\"wp-block-paragraph\"><strong>Famille<\/strong><br><a href=\"https:\/\/neranis.com\/fr\/expertise\/securite-des-reseaux\/\">S\u00e9curit\u00e9 des r\u00e9seaux<\/a><\/p>\n\n\n<p class=\"wp-block-paragraph\"><strong>Engagement<\/strong><br>Mise en \u0153uvre<\/p>\n\n\n<p class=\"wp-block-paragraph\"><strong>R\u00e9f\u00e9rence<\/strong><br>NET-05<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section nrn2-canvas is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-section-heading is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">PORT\u00c9E ET R\u00c9SULTATS<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Ce que couvre la mission.<\/h2>\n\n<\/div>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-delivery-grid is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-delivery-card is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Port\u00e9e<\/h3>\n\n\n<ul class=\"wp-block-list nrn2-list\">\n<li>Utilisateurs, sites et applications<\/li>\n\n\n<li>passerelle Web s\u00e9curis\u00e9e<\/li>\n\n\n<li>r\u00e8gles de cat\u00e9gorie et de risque<\/li>\n\n\n<li>int\u00e9gration des identit\u00e9s<\/li>\n\n\n<li>trafic \u00e0 distance<\/li>\n\n\n<li>exceptions<\/li>\n\n\n<li>Inspection TLS autoris\u00e9e<\/li>\n\n\n<li>journalisation<\/li>\n\n<\/ul>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-delivery-card is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Livrables<\/h3>\n\n\n<ul class=\"wp-block-list nrn2-list\">\n<li>Architecture cible<\/li>\n\n\n<li>politiques de navigation<\/li>\n\n\n<li>pilote multisite<\/li>\n\n\n<li>\u00e9valuation de la vie priv\u00e9e<\/li>\n\n\n<li>tests de performance<\/li>\n\n\n<li>guide des exceptions<\/li>\n\n\n<li>proc\u00e9dures de surveillance et de sortie<\/li>\n\n<\/ul>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-delivery-card nrn2-evidence is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Preuve de r\u00e9ception<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Les profils utilisateur re\u00e7oivent les politiques pr\u00e9vues ; les flux de travail critiques fonctionnent ; la gestion des exceptions fonctionne ; la disponibilit\u00e9 et la latence sont mesur\u00e9es dans le contexte du client.<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-section-heading is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">LIVRAISON<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Comment le travail est structur\u00e9.<\/h2>\n\n<\/div>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-two-col is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-prose is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Approche<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Cartographier le trafic ; concevoir et dimensionner ; piloter ; migrer progressivement avec possibilit\u00e9 de retour arri\u00e8re ; tester et documenter les op\u00e9rations.<\/p>\n\n\n<h3 class=\"wp-block-heading\">Pr\u00e9requis et responsabilit\u00e9s<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Client : r\u00e9seau, applications, op\u00e9rateurs, fen\u00eatres de changement et acceptation m\u00e9tier. Fournisseur : conception, migration et tests. L'acc\u00e8s des tiers et l'inspection TLS n\u00e9cessitent des approbations appropri\u00e9es.<\/p>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-prose is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Facteurs de port\u00e9e<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Sites, d\u00e9bit r\u00e9el inspect\u00e9, trafic, r\u00e8gles, utilisateurs distants, disponibilit\u00e9 et int\u00e9grations. Le mat\u00e9riel, les abonnements de s\u00e9curit\u00e9 et les op\u00e9rations r\u00e9currentes sont distincts.<\/p>\n\n\n<h3 class=\"wp-block-heading\">Questions \u00e0 clarifier<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Quelles activit\u00e9s web n\u00e9cessitent une protection ou une autorisation ? O\u00f9 les utilisateurs travaillent-ils ? Quelles applications sont sensibles aux proxys ou \u00e0 l'inspection ?<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section nrn2-compact is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-boundaries is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">LIMITES IMPORTANTES<\/p>\n\n\n<p class=\"nrn2-body-lg wp-block-paragraph\">Les fonctionnalit\u00e9s SWG, ZTNA, CASB et DLP ne sont pas toutes incluses automatiquement. Le d\u00e9chiffrement doit respecter les contraintes de confidentialit\u00e9 et les exclusions n\u00e9cessaires.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Les modifications pr\u00e9servent les services essentiels et les parcours de r\u00e9tablissement. Le dimensionnement, les licences et les tests de recette refl\u00e8tent les fonctionnalit\u00e9s qui seront r\u00e9ellement activ\u00e9es.<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-section-heading is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">EN PRATIQUE<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Situations illustratives.<\/h2>\n\n<\/div>\n\n\n<p class=\"nrn2-section-lead wp-block-paragraph\">Ces exemples d\u00e9crivent des engagements possibles et des r\u00e9sultats cibles. Il ne s'agit pas de r\u00e9f\u00e9rences clients ni de r\u00e9sultats obtenus.<\/p>\n\n<\/div>\n\n\n<details class=\"wp-block-details nrn2-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Sc\u00e9nario 01<\/summary>\n<p class=\"wp-block-paragraph\">Une entreprise poss\u00e8de plusieurs succursales dont la s\u00e9curit\u00e9 est inconstante. Projet : d\u00e9ployer progressivement une passerelle Web s\u00e9curis\u00e9e partag\u00e9e. R\u00e9sultat vis\u00e9 : des r\u00e8gles coh\u00e9rentes pour les employ\u00e9s distants et sur site, avec la possibilit\u00e9 pour le support d'approuver des exceptions justifi\u00e9es.<\/p>\n\n<\/details>\n\n\n<details class=\"wp-block-details nrn2-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Sc\u00e9nario 02<\/summary>\n<p class=\"wp-block-paragraph\">Une entreprise d'ing\u00e9nierie souhaite garder le contr\u00f4le sur les services cloud non approuv\u00e9s. Projet : observer l'utilisation et distinguer les services interdits des services approuv\u00e9s. R\u00e9sultat vis\u00e9 : moins d'acc\u00e8s non contr\u00f4l\u00e9s sans bloquer indistinctement les outils de collaboration.<\/p>\n\n<\/details>\n\n\n<details class=\"wp-block-details nrn2-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Contexte technologique et de r\u00e9f\u00e9rence<\/summary>\n<p class=\"wp-block-paragraph\">Exemples : plates-formes SASE\/SWG compatibles avec les identit\u00e9s et les terminaux des clients ; v\u00e9rifier les modules, les pays de traitement et les licences.<\/p>\n\n\n<p class=\"wp-block-paragraph\">L'ensemble final des technologies est convenu lors du cadrage, sur la base de l'interop\u00e9rabilit\u00e9, des licences, des droits d'acc\u00e8s et des exigences op\u00e9rationnelles.<\/p>\n\n<\/details>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-section-heading is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">SERVICES CONNECT\u00c9S<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Construisez l'\u00e9tape suivante.<\/h2>\n\n<\/div>\n\n\n<p class=\"nrn2-section-lead wp-block-paragraph\">Ces services peuvent compl\u00e9ter la mission. Ils ne sont pas inclus automatiquement.<\/p>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-related-grid is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-service-card is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-ref wp-block-paragraph\">PEN-02<\/p>\n\n\n<h3 class=\"wp-block-heading\"><a href=\"https:\/\/neranis.com\/fr\/services\/internal-and-assumed-breach-penetration-testing\/\">Tests d'intrusion internes et bas\u00e9s sur une compromission suppos\u00e9e<\/a><\/h3>\n\n\n<p class=\"nrn2-card-desc wp-block-paragraph\">Une \u00e9valuation de ce qu'un attaquant pourrait atteindre apr\u00e8s avoir obtenu un point d'ancrage interne initial, examinant les privil\u00e8ges excessifs et la faible s\u00e9paration.<\/p>\n\n\n<p class=\"nrn2-text-link wp-block-paragraph\"><a href=\"https:\/\/neranis.com\/fr\/services\/internal-and-assumed-breach-penetration-testing\/\">D\u00e9couvrir ce service <span aria-hidden=\"true\">\u2197<\/span><\/a><\/p>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-service-card is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-ref wp-block-paragraph\">NET-03<\/p>\n\n\n<h3 class=\"wp-block-heading\"><a href=\"https:\/\/neranis.com\/fr\/services\/detection-et-prevention-des-intrusions-dans-les-reseaux-ids-ip\/\">D\u00e9tection et pr\u00e9vention des intrusions sur le r\u00e9seau \u2014 IDS\/IPS<\/a><\/h3>\n\n\n<p class=\"nrn2-card-desc wp-block-paragraph\">Un IDS observe et alerte en cas d'activit\u00e9 suspecte ; un IPS peut \u00e9galement bloquer le trafic lorsqu'il est d\u00e9ploy\u00e9 en position de filtrage. Le service d\u00e9ploie, ajuste et connecte ces contr\u00f4les \u00e0 un processus de traitement.<\/p>\n\n\n<p class=\"nrn2-text-link wp-block-paragraph\"><a href=\"https:\/\/neranis.com\/fr\/services\/detection-et-prevention-des-intrusions-dans-les-reseaux-ids-ip\/\">D\u00e9couvrir ce service <span aria-hidden=\"true\">\u2197<\/span><\/a><\/p>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-service-card is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-ref wp-block-paragraph\">SOC-03<\/p>\n\n\n<h3 class=\"wp-block-heading\"><a href=\"https:\/\/neranis.com\/fr\/services\/collecte-de-journaux-et-deploiement-du-siem\/\">Collecte des journaux et d\u00e9ploiement du SIEM<\/a><\/h3>\n\n\n<p class=\"nrn2-card-desc wp-block-paragraph\">Centraliser les \u00e9v\u00e9nements de s\u00e9curit\u00e9 utiles et les rendre exploitables pour la recherche, les alertes et les investigations. Le projet aborde la qualit\u00e9, les horodatages, la r\u00e9tention et le co\u00fbt tout autant que l'installation de la plateforme.<\/p>\n\n\n<p class=\"nrn2-text-link wp-block-paragraph\"><a href=\"https:\/\/neranis.com\/fr\/services\/collecte-de-journaux-et-deploiement-du-siem\/\">D\u00e9couvrir ce service <span aria-hidden=\"true\">\u2197<\/span><\/a><\/p>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-cta is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">Commencer une conversation<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Clarifiez la port\u00e9e.<\/h2>\n\n<\/div>\n\n\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-body-lg wp-block-paragraph\">Nous clarifierons l'objectif, les d\u00e9pendances et les responsabilit\u00e9s de ce service avant de proposer la livraison.<\/p>\n\n\n<div class=\"wp-block-buttons nrn2-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/neranis.com\/fr\/contact\/\">Discutez de vos priorit\u00e9s<\/a><\/div>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>","protected":false},"excerpt":{"rendered":"<p>Contr\u00f4lez l'acc\u00e8s au Web et au cloud des utilisateurs, au bureau et \u00e0 distance, gr\u00e2ce \u00e0 des politiques coh\u00e9rentes. Le SASE combine des fonctionnalit\u00e9s de mise en r\u00e9seau et de s\u00e9curit\u00e9 ; le p\u00e9rim\u00e8tre r\u00e9el achet\u00e9 doit \u00eatre d\u00e9fini.<\/p>","protected":false},"featured_media":0,"template":"single-nrn_service","meta":{"footnotes":""},"nrn_family":[10],"class_list":["post-103","nrn_service","type-nrn_service","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_service\/103","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_service"}],"about":[{"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/types\/nrn_service"}],"version-history":[{"count":2,"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_service\/103\/revisions"}],"predecessor-version":[{"id":498,"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_service\/103\/revisions\/498"}],"wp:attachment":[{"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/media?parent=103"}],"wp:term":[{"taxonomy":"nrn_family","embeddable":true,"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_family?post=103"}],"curies":[{"name":"Bien jou\u00e9","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}