Concept
Zero trust network access (ZTNA)
How brokered, application-specific access replaces network-level connectivity, and what an over-broad application definition gives back.
Category
Identity and access
4 entries in this category: 1 concept, 1 comparison, 2 scenarios.
Concepts 1
One architecture or control, defined, diagrammed and scoped in both directions.
- Open the entry
Comparisons 1
Two or more approaches in one shared scene, with the delta marked.
-
Comparison
ZTNA compared with remote-access VPN
Open the entryA VPN grants reachability to a network and then trusts you. ZTNA brokers one application per request and never puts you on the network at all.
Scenarios 2
A situation followed decision by decision to the concepts it exercises.
-
Scenario
A remote worker opens payroll from untrusted Wi-Fi
Open the entryA finance analyst reaches payroll from hotel Wi-Fi on a managed laptop whose endpoint protection is stale. The identity is valid, the device is not, and allow or deny is the wrong pair of answers.
-
Scenario
A contractor needs one application for six weeks
Open the entryA third-party specialist needs access to a single internal console for a fixed engagement. The easy answer is an account, a network route and an offboarding task nobody runs.
Keep browsing
What these entries help you do
Other categories