What is zero-trust network access (ZTNA)?

ZTNA is a way of giving remote users access to individual applications instead of to the whole network. The user signs in through an identity provider, the service checks the user, the device and often its location and health, and then opens a connection to that one application only; the rest of the network stays invisible to the user. Many products deliver it as a cloud service with a small connector inside your network, so nothing needs to listen on the internet. For a small company it can replace a VPN for web applications and remote desktop, and it makes it easier to give a supplier access to one system without giving them the network. It does not remove the need to watch the inside: a compromised application server can still reach its neighbours. NetSenX does not provide ZTNA; it flags lateral movement and scanning from hosts on monitored segments, on every plan.

← All 45 questions on Zero trust, identity and segmentationAll topics