SASE for SMBs: are your remote access controls keeping up?

TL;DR: SMBs and MSPs are exposed by perimeter appliances, according to Todyl, with Verizon citing 31% of breaches starting from exploitation and Coalition saying 58% of ransomware claims began with a perimeter appliance compromise. The governance shift is from patching internet-facing boxes to enforcing identity- and device-based access policy.

Editorial analysis by NHI Mgmt Group, based on content published by Todyl: “SASE for SMBs: Enterprise-Grade Security Without Enterprise Complexity”.

By the numbers:

• 58% of the ransomware claims it saw in 2024 started with attackers compromising a perimeter security appliance, according to Coalition's Cyber Threat Index 2025 cited by Todyl.

Key questions

Q: What breaks when small businesses keep using VPNs as their main remote access control?

A: The failure mode is broad network admission.

Q: Why do perimeter appliances increase ransomware risk in SMB environments?

A: They combine public exposure with high trust.

Q: How should security teams decide between ZTNA and VPNs for remote access?

A: Security teams should choose ZTNA when they need resource specific access, strong least privilege enforcement, and better cloud alignment.

Practitioner guidance

• Inventory every remote access path Map which users, applications, and office resources still depend on VPN access before changing anything, then translate those connections into explicit application-level rules.
• Replace subnet access with application publishing Publish only the applications each user group needs and block everything else by default, including management interfaces and legacy admin paths.
• Enforce device posture on every remote session Require compliant devices for access so valid credentials alone do not open the internal network from unmanaged endpoints.

Bottom line: SMB remote access is vulnerable when the network boundary is still defined by a VPN or firewall appliance that grants broad internal reach.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →