DATASHEET

Ivanti Neurons for Zero Trust AccessZero Trust, Zero Hassle: Experience Effortless Everywhere Work
Zero Trust Access Everywhere
Ivanti Neurons for Zero Trust AccessIn today’s borderless digital environments,(ZTA) empowers organizations to embraceorganizations face complex security challenges

Everywhere Work in a borderless digitaldriven by the rise of remote work and the increasing

world. ZTA delivers secure, application-adoption of cloud-based applications and services.

focused access with continuous

The employee work-from-home “revolution” hasauthentication and adaptive controls.

expanded the traditional network perimeter,

By prioritizing identity and context, ZTA
minimizes the attack surface, prevents
lateral movement threats and enhances

creating a distributed and dynamic workforce thatdemands access to corporate resources fromvirtually anywhere.

visibility across distributed application

While this transformation has brought increased

ecosystems, whether on-premises or in

flexibility and efficiency, it has also introduced new

private or public clouds. Automated threat

vulnerabilities and points of exposure. Organizations

detection, granular policy enforcement andmust contend with a rapidly evolving threat landscapeflexible gateway deployment options makethat includes advanced and sophisticated attacks,

ZTA the go-to solution for organizations

including those leveraging artificial intelligence. As aseeking to confidently adopt zero trust

result, traditional security approaches are no longer

principles and safeguard their users,

adequate, and enterprises must reevaluate how they

applications and data.

secure access to their applications and data.

Enter Ivanti Neurons for Zero Trust Access—acomprehensive solution designed to address modern
security challenges and empower organizations
to confidently embrace the principles of zerotrust network access. With a focus on continuousverification, granular policy enforcement and realtime risk assessment, Ivanti Neurons for ZTA provides
the foundation for a robust and resilient security andaccess management strategy.

Secure access for everywhere work
Empower your organization to uphold zero trust
principles and support an Everywhere Work model.
Continuously authenticate users, applications,devices and context, and protect access to corporate
applications across diverse environments, including
on-premises, across data centers, and public andprivate clouds.

Enhanced security with application-focusedaccess

access to the applications they need. Simplify access

Strengthen your security posture and protect against

enable seamless integration of new business units.

lateral movement attacks with Zero Trust Network

Integration with cloud access security brokers(CASB) and secure web gateways (SWG)

Access (ZTNA). ZTNA allows you to grant accessbased on least privilege principles, ensuring that
only users needing access to applications or content
are connected. Moreover, with ZTNA, you cancontinuously verify user identities and device security
posture, all while providing application-focused accessfor enhanced security.

management during mergers and acquisitions andEnhance your secure access strategy by integrating
ZTA with CASB and SWG capabilities. Ensure secureaccess to SaaS and internet applications with features
such as data loss prevention (DLP), enterprise
digital rights management (EDRM), optical character
recognition (OCR) and malware detection.

Adaptable application policy and control
Gain fine-grained control over application accessbased on user identity, device, location and more.
Adapt access policies to align with your organization’s
business needs, whether managing contractor accessor enforcing location-based authentication.

Proactive threat detection with user andentity behavior analytics (UEBA)
Leverage UEBA and advanced risk analytics to identify
anomalies, assess risk and respond to potential
threats in real time. Utilize Vulnerability Risk Rating(VRR) scores from Ivanti Neurons for VULN KB toevaluate endpoint applications, providing visibility into
vulnerabilities and enabling efficient risk triageby admins.

Streamlined access management
Facilitate business operations while maintaining
strong security by quickly granting users or groups

Ivanti Neurons for Zero Trust Access | DATASHEET

2How It Works
Cloud-Hosted Authentication and Authorization
ZTA uses a cloud-hosted controller to authenticate
and authorize user identity and device security
posture for compliance before establishing anapplication session.
Centralized Policy Engine and UEBA

Intelligent Traffic Steering

Real-Time Risk Assessment

The Ivanti Unified Client automatically steers traffic

ZTA continuously assesses risk levels based on userto the most optimal gateway for connecting thebehavior, device security posture, and Vulnerability

application tunnel, removing the need for costly

Risk Rating (VRR) scores, enabling proactive

backhauling or hair-pinning of traffic.

threat mitigation. Seamless Integration with Existing
VPN: ZTA integrates with existing VPN solutions,enabling secure access to new apps and supporting
business activities while maintaining robust security.

ZTA governs each access request and session througha centrally deployed policy engine, augmented with
User and Entity Behavior Analytics (UEBA). Attributes
for each session are monitored and assessed, andproprietary risk scores identify non-compliant,malicious, and anomalous activity for expedited threat
mitigation.
Flexible Gateway Deployment
ZTA gateways are deployed where you choose,either on-premises or in your public or private
cloud environments. Proximity to cloud applications
optimizes user experience, reduces latency, andenables scalable hybrid IT deployment.
Direct Secure Per-Application Tunnels
The ZTA controller verifies application access policies
and instructs the Ivanti Unified Client to create a direct
secure per-application mTLS tunnel between thedevice and the ZTA gateway. Data interaction with theZTA controller is eliminated.

Ivanti Neurons for Zero Trust Access | DATASHEET

3Let’s explore the key use cases that Ivanti Neurons for
Zero Trust Access addresses:
Implementing a Zero Trust Access Model
As organizations navigate an increasingly borderless
network landscape and the shift towards Everywhere
Work, implementing a zero-trust access model isessential for enhancing security. Ivanti Neurons

User
Trust

Application
Accessfor Zero Trust Access offers a robust solution thatadopts an application-centric approach, focusing onsecuring access to applications rather than the broader
network. With the principle of least privilege in place,users are granted access only to specific, authorized
applications. Continuous verification of user identities

DeviceTrustCloud
AccessConverged

and assessment of device security posture reinforce
security measures. The solution also offers a unifiedclient that seamlessly supports both Ivanti Connect
Secure VPN and Ivanti Neurons for Zero Trust Access,Zero Trust
AccessNetwork
Accessallowing your organization to proactively protect against
lateral movement attacks with granular access controls.
Controlling and Managing Application AccessControl and management of application access play

Applications &Data TrustMobile
AccessInfrastructure
Trusta vital role in safeguarding your organization’s dataand resources. Ivanti Neurons for Zero Trust Accessempowers you to implement fine-grained policies
that control access based on user identity, device,

Data
AccessSessionTrustand location. The solution is adaptable to your uniquebusiness needs, making it easy to manage contractor
access, enforce location-based authentication, andstreamline access management. Efficiently grant
access to users or groups as needed and facilitatebusiness operations, all while maintaining robust
security standards.

Ivanti Neurons for Zero Trust Access | DATASHEET4

Leveraging Analytics for Proactive Security
Proactive security is key to staying ahead of emerging
threats in today’s dynamic cybersecurity landscape.
Ivanti Neurons for Zero Trust Access enables yourorganization to leverage advanced analytics forproactive security measures. Real-time anomaly
detection and User and Entity Behavior Analytics(UEBA) help identify unusual behavior and potential
risks. The solution utilizes Vulnerability Risk Rating(VRR) insights to assess endpoint vulnerabilities, giving
you the visibility you need for effective risk triage.
Automated actions respond to policy violations andrisk scoring, including remediation measures, ensuringthat your organization is equipped to respond swiftly topotential threats.
With Ivanti Neurons for Zero Trust Access, you gain
a powerful solution that addresses critical security
challenges and enables your organization to confidently
implement a Zero Trust Access model, manage andcontrol application access, and leverage powerful
analytics for proactive security. Whether you’re dealing
with remote access, securing a hybrid workforce, orenhancing security visibility, our solution is here tosupport you every step of the way.

Ivanti Neurons for Zero Trust Access | DATASHEET

5Feature

End-to-end access policy“Invisible” gateways

Single-pane-of-glass visibility
Adaptive SSOIntelligent Traffic Steering

Endpoint complianceApplication Discovery

User behavior analytics

Advantage
Define end-to-end access policies for every resource, eliminating the distinction between
remote and on-premises users.
Go dark with ZTA, rendering application gateways undetectable to attackers whileseamlessly granting access to authenticated and authorized users.
Gain holistic visibility and compliance reporting of users, devices, applications, context andinfrastructure across the enterprise.
Integrate through SAML 2.0 to provide SSO to supported SaaS and third-party applications.
Provide the best possible user experience using automated optimal gateway selection toensure your users’ app traffic is always routed to the fastest gateway.
Authenticate users and devices against granular policies before granting access,minimizing the risk of malware and other threats.
Get a comprehensive view of application usage and seamlessly create ZTA policies tomanage those applications without disrupting the end user.
Leverage analytical data to reduce security risks, detect anomalies, optimize user
experience and adapt to mobile workforces.
Achieve data sovereignty as user app traffic flows directly through customer-deployed

Data privacy and sovereignty

gateways, segregated from the ZTA control plane, ensuring exclusive control over dataflow.

DLP and AV monitoring

Prevent data loss and exfiltration by monitoring data communications with external andunmanaged resources, safeguarding end-user devices from compromise.

Copyright © 2023, Ivanti. All rights reserved. IVI-25834 04/22 LP/MK/JD/FG/KF

ivanti.com
1 800 982 2130
sales@ivanti.com