WHY IT MATTERS
ZTNA 1.0 solutions require intensive manual configuration and management of connections to private apps hosted in multi-cloud and on-premises data centers as well as access to private apps in overlapped private or partner networks.
ZTNA 1.0 solutions leverage coarse-grained controls based on low-level networking constructs like IP address and port number. This approach provides too much access and leaves your organization exposed to increased risk of attack.
With ZTNA 1.0, once access to an app is granted that communication is implicitly trusted forever, regardless of user or app behavior changes, or if a malicious activity takes place. 100% of breaches occur on allowed activity, which an “allow and ignore” model cannot prevent.
ZTNA 1.0 offerings cannot properly secure modern cloud -native apps, apps that use dynamic ports, or server-initiated apps. Moreover, ZTNA 1.0 provides no visibility or control of data, exposing the enterprise to the risk of data exfiltration from attackers or malicious insiders.
Introducing ztna 2.0 Solution
Dramatically reduce the attack surface.
Securely connects all users and all apps with fine-grained access controls. By utilizing patented App-ID™ technology, precisely control access at the app and sub-app levels, including download or upload.
No more “allow and ignore"
Once access to an app is granted, trust is continually monitored to identify changes in device posture, user behavior, app behavior, and more, leveraging patented App-ID, User-ID™ and Device-ID™ technologies.
Comprehensive and consistent security.
Consistently protect data across all apps, including private apps and SaaS, with a single data loss prevention (DLP) policy. Gain consistent security for all applications used across the enterprise, including modern cloud native apps, legacy private apps and SaaS apps.
Automate access to private apps
ZTNA Connector for Prisma Access provides industry-leading scalability, automatic app discovery, and automated onboarding as well as tunnel management to securely connect organizations to all of their private applications.
Identity-based access control
Continuous post-connect threat and trust monitoring
Superior user experience at scale
Simplified policy management
Industry’s first SaaS Security Posture Policy Engine
Eliminates the risk of compromise and data loss due to user misconfiguration
Resolves critical misconfigurations with a single click
Protects hard-to-detect secrets exchanged in collaboration apps a single click
Detects hard-to-find malicious insider threats and compromised accounts
Prevents data breaches
Ensures regulatory compliance
Stops risky user behavior
Delivers comprehensive data protection
Provides content, context and ML-based data classification
Fully SASE-native DEM
Comprehensive visibility into the entire service delivery path
Troubleshoot and remediate performance issues quickly
Support both remote users and remote networks
End-to-end view of entire employee digital experience
