SASE combines SD-WAN with computer security functions, including cloud access security brokers(CASB), Secure Web Gateways (SWG), antivirus/malware inspection, virtual private networking (VPN), firewall as a service (FWaaS), and data loss prevention (DLP), all delivered by a single cloud service at the network edge.
[…] typically delivered as a single service at globally dispersed SASE points of presence (PoPs) located as close as possible to dispersed users, branch offices and cloud services.[2] To access SASE services, edge locations or users connect to the closest available PoP. SASE vendors may contract with several backbone providers and peering partners to offer customers fast, low-latency WAN performance for long-distance PoP-to-PoP connections.
Edge connections to the local PoP may vary from an SD-WAN for a branch office to a VPN client or clientless Web access for a mobileuser, to multiple tunnels from the cloud or direct cloud connections inside a global data center.
https://en.wikipedia.org/wiki/Secure_access_service_edge