Abstract: In the context of digital transformation, enterprises are evolving into multibranch conglomerates, adopting cloudbased services, and embracing decentralized models. However, this shift presents new challenges for network security. This article proposes a practical approach, based on the integration of 5G and SASE technologies, for secure access service edge (SASE) implementation. Leveraging 5G as the SDWAN transport network, the proposed solution connects data centers, hybrid clouds, and client endpoints. It deploys security access points of presence (POP) nodes nationwide, equipped with core modules such as Cloud Access Security Broker (CASB), Secure Web Gateway (SWG), Zero Trust Gateway, and FirewallasaService (FWaaS). Additionally, traditional security components can be selectively employed within these modules to enable usercentric security monitoring, access control, interception, and auditing capabilities. Practical implementation of this solution demonstrates its feasibility and effectiveness in various enterprise security protection scenarios.

Key words: 5G, integration of cloud and networking, SASE(secure access service edge), cloud security, access security cloud

摘要： 企业在数字化转型中逐渐发展成集团多分支、服务上云、去中心化的模式，网络安全防护面临新的挑战.在研究5G与SASE技术基础上，提出一种基于5G云网融合的安全访问服务边缘(SASE)实践方案.将5G作为SDWAN承载网络，连接数据中心、混合云及客户端，全国边缘部署安全接入POP节点，配置云访问安全代理(CASB)、安全Web网关(SWG)、零信任网关、防火墙即服务(FWaaS)等核心模块，按需在各模块中调用多种传统安全组件能力，实现从用户出发的安全监控、访问、拦截和审计的能力.实践表明，该方案在各类企业安全防护落地实践中具备可行性和有效性.

关键词: 5G, 云网融合, 安全访问服务边缘, 云安全, 边缘安全云