Zscaler and Imprivata
Delivering zero trust security for sharedworkstations in healthcare organizations© 2024 Zscaler, Inc. All rights reserved.

Solution Brief

Challenges
The healthcare industry is facing an increasing
number of ransomware attacks, as wellas enhanced regulatory and compliancerequirements. Paying a ransom can cost hundredsof thousands of dollars in addition to reputational
damage. Above all else, any downtime can be at
great risk to patient safety.
Legacy perimeter-based networks and firewallbased architectures don’t protect you against
these attacks. A hacker can compromise
your network by gaining access to a single
workstation. Given that hospitals and healthcareorganizations have large numbers of sharedworkstations, these devices are primaryattack targets.

Healthcare has unique requirements. Clinicians
can’t afford delays when securely accessing theapplications they need to provide patient care,
yet healthcare organizations must ensure theyprotect PHI from internal, external, and thirdparty threats. Managing and controlling digital
identity and ensuring security follows the user
instead of the device is the only way to keep data
and applications secure while ensuring quick andproper clinician access.
Zscaler is a pioneer in zero trust with the cloudnative Zero Trust Exchange platform that helps
stop cyberattacks using its proxy architecture,
prevents lateral movement by connecting
users directly to their apps (not networks), andminimizes the attack surface by making apps
invisible to hackers (you can’t attack what you

What you need

can’t see).

Doctors and nurses constantly log in and out

Best-in-class zero trustof workstations throughout the day. Ensuringthat the right users have access to the rightapplications is critical for cyberthreat protection
and regulatory compliance.

Zscaler and Imprivata have joined forces toprovide a zero trust security solution for multiuser workstations in healthcare organizations.
By integrating with the Imprivata Enterprise

Security policies should follow the user, and user

Access Management with SSO (formerlyactivity should be tracked to distinguish actions

OneSign) identity management platform, thebetween users—even on shared workstations

Zscaler Zero Trust Exchange can adaptively

or different workstations at different times. To

enforce access control policies, ensuring that

ensure protection, the user’s identity must be

only authenticated users are allowed to accesssecured and the application access control andauthorized applications. Clinicians can seamlessly

context must be understood.

and securely authenticate in and out of shared

A zero trust approach is needed
A zero trust security architecture is required toprovide protection and ensure compliance. Zerotrust starts with identity. Imprivata is a leader in
identity for healthcare organizations, providing
capabilities that enable, control, and monitor
digital identities to deliver fast user access,
improve security, and ensure compliance acrossdevices, while user actions are logged fortraceability and compliance requirements.
By implementing context-aware, market leading
solutions from Zscaler and Imprivata, healthcareorganizations can simplify secure access, reduce
the risk of ransomware attacks and downtime,strengthen regulatory compliance, and improve
clinician productivity and the user experience.

all systems.

© 2024 Zscaler, Inc. All rights reserved.

Solution Brief

2

How it works
1

Clinicians use their badges to login to a

Key Benefits

badge reader on a shared workstation using

2

Imprivata Enterprise Access Management

The Zscaler and Imprivata integration delivers

with SSO (formerly OneSign)

the following key benefits:

The workstation is protected by Zscaler
Client Connector™

3Imprivata determines which applications
a user is authorized to access and Zscaler
enforces those access policies

4

When a clinician ‘taps out’ using the badge• Multi-user, shared workstation adaptive
policy enforcement for healthcare
environments• Zero trust security with role-based accessto protect patient data
• Traceability of user actions for regulatorycompliance, including HIPAA and HITECH

reader, they are logged off the machine
5When a different clinician enters the roomand logs in on the same workstation, they
will get policies relevant to their user profile

For example, if a nurse logs in to a workstation,

The doctor is able to upload a patient note to

the policy for nurses may be that they can access

Google Drive because the access control policy

certain websites and applications but they can’t

applied to a doctor is different from that of aaccess Google Drive where patient data is kept. Ifnurse, even though the doctor is using thea nurse tries to upload a patient data file, Zscaler

same shared workstation that the nurse waswill block this action based on Imprivata’s identity

on just moments ago. The nurse’s and doctor’sauthentication information and the nurse’s role.

actions are all available in Zscaler log files for

However, if a doctor logs in to that same

compliance purposes.

workstation, Zscaler Client Connector will silently
log out the nurse and log in the doctor. The nurseand doctor are not aware of the client connector
application on the workstation, making it aseamless user experience.

© 2024 Zscaler, Inc. All rights reserved.

Solution Brief3

1

A nurse taps their badge to log in
to a shared workstation; they canaccess certain applications but are
not allowed to upload a patient1

data file to Google Drive, as
defined by access control policy

22

Room 1

A doctor logs into the same
shared workstation but is able toupload a patient file to Google
Drive, since a different accesspolicy is applied to their role

About Imprivata
Imprivata is the digital identity company for life- and mission-critical industries, redefining howorganizations solve complex workflow, security, and compliance challenges with solutions that protect
critical data and applications without workflow disruption. Its platform of interoperable identity,authentication, and access management solutions enable organizations in over 45 countries to fully
manage and secure all enterprise and third-party digital identities by establishing trust between people,technology, and information. For more information, visit www.imprivata.com.

About Zscaler
Zscaler (NASDAQ: ZS) accelerates digital transformation so that customers can be more agile, efficient, resilient,and secure. The Zscaler Zero Trust Exchange protects thousands of customers from cyberattacks and data loss
by securely connecting users, devices, and applications in any location. Distributed across more than 150 data
centers globally, the SSE-based Zero Trust Exchange is the world’s largest inline cloud security platform.
Learn more at zscaler.com or follow us on Twitter @zscaler.
+1 408.533.0288

Zscaler, Inc. (HQ) • 120 Holger Way • San Jose, CA 95134© 2024 Zscaler, Inc. All rights reserved. Zscaler™,Zero Trust Exchange™, Zscaler Internet Access™,ZIA™, Zscaler Private Access™, ZPA™ andother trademarks listed at zscaler.com/legal/
trademarks are either (i) registered trademarks orservice marks or (ii) trademarks or service marksof Zscaler, Inc. in the United States and/or othercountries. Any other trademarks are the propertiesof their respective owners.

zscaler.com