I launched a network-based secure gateway service for Orange back in 2014 (see this article from 2013 about the drivers for the way we developed the service). The idea then was to provide security control points at the network edge rather than backhaul traffic to the client’s datacenter and/or to a cloud services provider. Things have moved on a bit since then so it’s worth reviewing the options…:
Enterprises are embracing cloud computing but few have fully considered the risks associated with device-to-cloud transformation from security breaches to data loss issues. Cloud access security brokers (CASBs) are often described as the firewall for the cloud and are the go-to solution to secure cloud services for many organizations. CASBs provide a breadth and depth of functionality that is indispensable for securing your data across applications, devices and networks. Yet not all CASBs are created equal, and it can be a challenge to identify which solution to deploy. From capabilities to the security of underlying architectures, there is much to consider.