Secure Access Service Edge (SASE)

Modern work is no longer inside a single office or network. Staff work from home, airports, client sites and mobiles. Your data lives in Microsoft 365, SaaS apps and private cloud. Traditional firewalls were never designed for this.

Secure Access Service Edge (SASE) pulls your networking and security into one cloud delivered service. Instead of routing everything back to a head office, users connect securely to the closest SASE point of presence, wherever they are.

Layer3 delivers SASE in partnership with Todyl, giving your business access to a global security fabric that is tailored for New Zealand organisations.

What is SASE?

What SASE actually does

SASE is a combination of:

  • Zero trust network access for users and devices

  • Next generation firewall and web security in the cloud

  • Secure SD-WAN to optimise and protect traffic

  • Continuous inspection of traffic for threats and data loss

The result is a consistent security policy everywhere: office, home, public Wi-Fi, or 4G.

The Layer3 SASE client partnership with Todyl
Country blocking on SASE by Layer3

Why SASE instead of “just a firewall”?

Traditional firewalls:

  • Sit in one place, usually the office

  • Assume anything on the inside is trusted

  • Struggle with SaaS, remote users and multiple sites

SASE:

  • Follows the user, not the building

  • Authenticates identity and device before granting access

  • Applies the same security policies to every connection

  • Scales quickly as you add staff, locations or cloud services

With Todyl, this happens in a cloud platform that is constantly updated, monitored and improved.

Our SASE approach

We design SASE as part of your wider security strategy, not as a stand alone box:

  • Assessment of your current network, VPNs and remote access

  • Design of a Todyl SASE architecture that fits your sites, SaaS and private cloud

  • Integration with your identity platform (Microsoft Entra ID / Azure AD)

  • Rollout by site, team or region to minimise disruption

  • Ongoing monitoring, reporting and tuning from our Security Operations team

Layer3 has a deep, strategic partnership with Todyl. We work directly with their engineering and product teams and we are actively involved in bringing a Todyl point of presence to Auckland, New Zealand. That means faster, more reliable and more secure access for New Zealand based users, with traffic staying closer to home.

Latency / Throughput on Layer3 SASE
ZTNA on Layer3 SASE

Why Layer3 for SASE

  • Strong partnership with Todyl, focused on New Zealand needs

  • Local expertise blended with a global security platform

  • Clear visibility of who is accessing what, from where, and whether they are compliant

  • A future ready platform that will grow with your business

Full IT Management and Support Features

ISO 27001 Certified

We operate under ISO 27001 standards, guaranteeing secure and compliant IT management practices.

Blazing Fast

With services enabled right here in New Zealand, your SASE experience will be fast!

SASE Architecture & Rollout

We design a SASE roadmap covering sites, remote users, and cloud apps, then roll it out in planned phases to minimise disruption.

Continuous Traffic Inspection

All traffic is inspected for threats and data loss in real time, across web, SaaS and private cloud.

24/7 SASE Monitoring & Response

Our team watches your SASE platform around the clock and responds to alerts before they become incidents.

Advanced SASE Security Fabric

Built on the Todyl security platform, combining firewall, secure web gateway, ZTNA and more into a single cloud delivered service.

Zero Trust Identity & Access

Integrated with Microsoft Entra ID, verifying user, device and context before granting access to applications.

Security & Performance Reporting

Dashboards and reports show who is connecting, from where, to what, and whether they meet policy.

Secure Remote Work Enablement

Onboarding and training so staff know how to connect securely from home, office, or on the road.

Frequently asked questions

Layer3 offer full-service IT support, including remote helpdesk, on-site assistance, server and infrastructure support, and proactive monitoring. We support both Windows and macOS environments.

Yes – our core business hours are 8am to 5pm, Monday to Friday, but we offer after-hours and 24/7 support options for clients who require it, especially those with critical systems or on-call needs.

You can contact our helpdesk via phone, email, or through our support portal. Clients also benefit from our remote monitoring tools, which can alert us to issues before you even notice them.

We support businesses across New Zealand. Our team is based in Wellington and Auckland with remote coverage nationwide and satellite offices for regional response.

Yes. We support macOS devices, especially in hybrid environments. We can help manage updates, security, and integration with Microsoft 365.

Absolutely. We often partner with internal teams to provide overflow support, specialised skills, or strategic oversight through our vCIO service.

If we can’t resolve the problem remotely, we’ll dispatch a technician to your site or organise a pickup depending on the issue.

Layer3 Logo
Layer3 is an ISO 27001 certified MSP in Wellington with offices across New Zealand. Get strategy-first IT, security and managed support from Layer3.
ADDRESS
Level 2 CBD Towers 84-90 Main Street Upper Hutt Wellington, 5018 New Zealand
© 2025 Copyright Layer3.
Layer3 is a Silver Microsoft partner as well as an Authorised SPLA partner.