Symantec Zero Trust Network Access

Symantec Zero Trust Network Access (ZTNA) provides secure access from remote environments based on SDP.

Agentless support is also possible depending on the protocol. In recent years, it has become an ideal solution to replace VPNs, which have been a hot topic of vulnerabilities and incidents. The main differences between VPN and VPN are explained below.

• Access control: Whereas VPN facilitates lateral deployment after intrusion, ZTNA achieves least privilege access by restricting access to each application for each user.
• Attack target area: VPN equipment targets many ports used for communication, whereas ZTNA goes through the Symantec vendor's data center, so each company is not a direct target of attack.
• Connection using a connector: VPN devices require drilling in the FW to allow internal communication from the outside, whereas Symantec's ZTNA connector requires drilling in the FW to allow communication only from the inside to the outside. Unnecessary

Migration process from VPN

• Remove the VPN device and realize communication via ZTNA
• Privilege management by user group

Reference: Cooperation with SWG

By using Cloud SWG in conjunction, it is possible to expand the access protocols and achieve secure access not only within the company but also outside the company ^*

*Introduction of SWG agent is required.