Secure access service edge for mobile networks

A method, comprising:

• receiving, by a Secure Access Service Edge (SASE) cloud network from a mobile operator, certificate information corresponding to a User Equipment (UE) that is agentless, wherein the certificate information is generated using a public cryptographic infrastructure (PKI) of the mobile operator;
• receiving, at the SASE cloud network from a mobile packet network, encrypted traffic associated with the UE;
• decrypting, by the SASE cloud network, the encrypted traffic using the certificate information to provide decrypted traffic;
• and
• enforcing, by the SASE cloud network, a zero trust security policy on the decrypted traffic to provide secured traffic for delivery toward a destination of the encrypted traffic.

A system, comprising:

• a processor configured to:
• receive, by a Secure Access Service Edge (SASE) cloud network from a mobile operator, certificate information corresponding to a User Equipment (UE) that is agentless, wherein the certificate information is generated using a public cryptographic infrastructure (PKI) of the mobile operator;
• means for receiving, at the SASE cloud network from a mobile packet network, encrypted traffic associated with the UE;
• means for decrypting, by the SASE cloud network, the encrypted traffic using the certificate information to provide decrypted traffic;
• and
• means for enforcing, by the SASE cloud network, a zero trust security policy on the decrypted traffic to provide secured traffic for delivery toward a destination of the encrypted traffic;
• and
• a memory coupled to the processor and configured to provide the processor with instructions.