At a Glance

Next-Generation Zero Trust Network Access
The core tenets of next-generation ZTNA
Minimize the attack surface. Make

Eliminate lateral movement. Enforce least-

Stop compromised users and advanced

applications invisible by establishing inside-

privileged access by segmenting applications.

attacks. Continuously monitor user andout connections from application to user. IP

Once a user is authorized, application accessdevice behavior for abnormal activity withaddresses are never exposed to the internet,

is granted on a one-to-one basis rather thaninline threat protections. Minimize the riskcreating a “darknet” that is impossible tofull access to the network.

of active attacks and exploits targeted

discover and exploit.

at applications.

The evolution of zero trust network access
Next-Generation ZTNA Capabilities

With Zscaler Private Access™, Zscaler pioneered the first
generation of zero trust network access (ZTNA) with afundamentally different approach to application access.

Connect

One that provides secure, flexible connectivity to private
applications by hiding applications from the internet andNext-Gen Zero Trust
Connectivity

Next-Gen Private AppProtection

User-to-app

corporate network, eliminating the need for remote
HQ

As organizations increasingly adopt zero trust to prevent
breaches and enable secure hybrid work, ZTNA hasProtect

Remote Usersconnecting users directly to applications, not theaccess VPNs.

Segment

Apps accessible
onlythrough theplatform,
not publishedto internet

Third Party

App-to-app

AI-powered segmentation
Usertodevice

Privileged
remoteaccess

Inline inspection& protection

Integrated deception

PublicData Center

Cloud browser isolation
IoT/OT Devices

evolved beyond its secure remote access roots to deliver
a new generation of capabilities that protect againstcompromised users, detect the most sophisticated lateral
movement attempts, and stop data loss. Built upon threecore tenets, next-generation ZTNA connects, segments,and protects users, applications, workloads, and devices

CloudWorkloads

CloudWorkloads

Minimize theattack surface

Eliminate lateral
movement

Stop compromised users& advanced attacks

Make apps
invisible, impossible
to breach

Enforce least-privileged
access without putting
users on the network

Prevent app exploitation;find active attackers andinsider threatsin a single, cloud-based platform.
©2022 Zscaler, Inc. All rights reserved.

What is zero trust network access?

Connect

ZTNA is a set of technologies and functionalities that

Minimize the attack
surfaceprovide secure access to internal applications and eliminate

App discovery
Identify any unknown applications that your organization is using and who isaccessing them so you can implement granular least-privileged access policies.

excessive implicit trust inherent in other application accessmethods, such as legacy VPN. Like the software-defined
perimeter (SDP) approach to controlling access, ZTNA creates
secure, virtual boundaries between users and applications.

Segment
Eliminate lateral
movement

Applications are made invisible and hidden from discovery,and least-privileged access is enforced by a trust broker thatwill be served predominantly by ZTNA as opposed to VPN
services, up from less than 10% at the end of 2021, according

Privileged remote accessControl privileged access to RDP and SSH systems with fully isolated remote
desktop sessions that allow admins and third-party vendors to securely connect
from unmanaged devices without the need for a client.

to Gartner.

needed for a security service edge (SSE) platform that reduces
risk, improves overall user experience, and replaces VPNs.

Protect
Stop compromised
users andadvanced
attackers

Learn more about next-gen ZTNA

trust service as both an admin and user.

Inline inspection and protection
Stop vulnerability-targeting attacks on private applications with inline detection
and the blocking of malicious content embedded withinuser traffic.
Integrated deception
Deploy decoys and fake user paths throughout the environment for attackers
to exploit without affecting business-critical applications. Any indicator ofcompromise cuts off access to private apps and shuts down active attackers inreal time.
Integrated web isolation
Control sensitive data transmission to unmanaged devices by providing access toprivate applications through a secure isolated web browser.

Try our free 7-day test drive of Zscaler Private Access. This
self-paced, online interactive demo lets you explore our zeroUser-to-app segmentation
Users are never connected to the internal network. Instead, they areconnected directly to applications through a zero trust segment of one thatcreates a single microtunnel between the user and application.

User-to-device segmentation
Securely connect remote workers and third parties to operational
technology (OT) and industrial internet of things (IIoT) assets without bringing
users directly onto the OT network.

By 2025, at least 70% of new remote access deployments

access security broker (CASB) form the core technologies

AI-powered segmentation
Apply ML-based segmentation recommendations trained on millions of customer
signals and application telemetry to minimize the internal attack surface.

App-to-app segmentation
Workloads in one public cloud securely communicate with another workload inany region of any cloud provider in hybrid and multi-cloud environments.

verifies identity, context, and policy.

Together, ZTNA, secure web gateway (SWG), and cloud

Zero trust access
Hide or obfuscate all internal application IP addresses from the internet andremove all inbound connectivity for users and devices. Application access isbrokered and orchestrated by the Zscaler Zero Trust Exchange™.

Risk-based
policy engine

Continuous validation of access based on the user’s identity and oncontext, such as location, device, content, and application, minimizes
trust granted.

Start Your 7-Day Test Drive LONG-ARROW-RIGHTZscaler (NASDAQ: ZS) accelerates digital transformation so that customers can be more agile, efficient, resilient, and secure. The Zscaler
Zero Trust Exchange protects thousands of customers from cyberattacks and data loss by securely connecting users, devices, andapplications in any location. Distributed across more than 150 data centers globally, the SASE-based Zero Trust Exchange is the world’s
largest inline cloud security platform. Learn more at zscaler.com or follow us on Twitter @zscaler.
+1 408.533.0288

Zscaler, Inc. (HQ) • 120 Holger Way • San Jose, CA 95134©2022 Zscaler, Inc. All rights reserved. Zscaler™, Zero Trust Exchange™,Zscaler Internet Access™, ZIA™, Zscaler Private Access™, and ZPA™ areeither (i) registered trademarks or service marks or (ii) trademarks or service
marks of Zscaler, Inc. in the United States and/or other countries. Anyother trademarks are the properties of their respective owners.

zscaler.com