Securing remote worker connectivity
for the long haul with Cloudflare

When COVID-19 forced an overnight transition to remote work, businesses scrambled to keep employees connected.
Some solutions were strategic, but others were tactical bandaids — like doubling down on slow and unreliable VPNs,
split-tunneling Internet traffic, and applying hasty remote access hacks. Now the cracks in this approach are showing,as familiar challenges with visibility, security and complexity persist.
Fixing remote work security flaws shouldn’t take months or weeks. With Cloudflare’s Zero Trust security platform,
administrators can address over 20 pressing workforce security and connectivity use cases in just 30 minutes.

The solution: Cloudflare for Teams

Zero Trust
Security Platform

Remote worker

Intelligent
routingGlobal edge
network

World’s fastest
resolverInternet
Gateway

Browser
Isolation

Single-passinspection

Single-panemanagement

Any resource

SecureAccessProgrammableinterface

MDM • IdP • EPP
integrations

Internet
radar

Visionaryinnovations

Cloudflare’s Zero Trust security platform increases visibility, eliminates complexity, and reduces risks as remoteworkers connect to applications and the Internet. It runs on the world’s fastest edge network to deploy faster andperform better than other providers.

1 888 99 FLARE | enterprise@cloudflare.com | www.cloudflare.com

REV: BDES-1438.2021FEB22

Three ways a Zero Trust platform can enhance remote worker security
Reduce risks

Increase visibility

Reliance on VPNs has created failoverrisk and has left holes in corporate
infrastructure for attackers to exploit.
Once an attacker gains access, they
can move laterally across multiple
resources to steal data. Despite best
efforts to block and tackle threats,
endpoints still get compromised byundiscovered malware.

It was straightforward to maintainactivity logs when users were in theoffice, but maintaining an audit trail ismuch more difficult when employees
are geographically distributed andworking from new devices. Logging
capabilities within SaaS applications
are often inconsistent, and VPN logs
can be difficult to parse.

Zero Trust security platforms reduce
remote work risks by enforcing
identity and context-based
authentication on every request to
your corporate apps, leaving little
room for lateral movement. Browser
Isolation isolates endpoints frombrowsing activity, mitigating known
and unknown threats.

Zero Trust platforms restore visibility
by intercepting and logging requests
from all remote devices — evenunmanaged devices. Administrators
can monitor remote worker activity
in internally-hosted and SaaS apps,
with an audit trail to investigate
incidents. Logs are centralized in one
dashboard, and automatically sent to
the SIEM of choice.

Eliminate complexity
Band-aid solutions implemented toconnect remote workers are proving
to be too fragile for the long run.
Administrators are left to manage
traffic filtering policies acrossmultiple incompatible tools, andusers are frustrated by the sluggish
performance.
Zero Trust platforms simplify how
users connect, and streamline
how administrators work. With
reduced reliance on legacy VPNs,
administrators can apply standard
security controls to all traffic regardless of how that connection
starts or where in the network
stack it lives. And policies can all be
managed from one dashboard.

Zero Trust security in action

Use case: prevent data loss in SaaS applications

Remote worker
requests Workday

Gateway policy allows
acme.workday.com
and isolates trafficCopy/paste isdisabled on page

User logs in with
SSO credentials andrequired hard-key
token
Gateway connection
required toauthenticate

Browser session
isolated in view
only mode

Gateway blocks
workday.com/admin
for role-based
access control
RBAC complianceLogs user, device,location, andrequest details

In a single-pass architecture, remote worker traffic is inspected, isolated, logged, and secured from Internet threats;and performance never suffers, as users connect to data centers just one short hop nearby.

1 888 99 FLARE | enterprise@cloudflare.com | www.cloudflare.com

REV: BDES-1438.2021FEB22

6 critical remote work problems solved
Use CaseHowConnect remote workers tocorporate apps

Between devices and apps, route traffic (DNS, HTTP(S), RDP/SSH) throughCloudflare’s network for better performance and reliability than your VPN

Adopt Zero Trust security forapp access

Enforce application access policies based on identity, device posture andcontext (geo) instead of network location (IP)Adopt Zero Trust security forinternet browsing

Isolate browser activity from protected devices to stop malware andphishing from compromising endpoints

Protect data from unauthorizedaccess and uploads

Exert finer-grained control over user and device access rights; prevent file
uploads/downloads, copy/paste

Protect devices from malicious
content within a site

Any known or unknown malicious content runs remotely in safe containers
across our network, isolating it from reaching the device’s local browser

Protect users from phishing sites

Native and third-party threat intel blocks phishers before they strike

Key Results

80%↓

30 min91%↓

less time spent resolving IT tickets andsecurity posture for remote workers

to achieve the first two steps toZero Trust security

decrease in attack surface by placing
Cloudflare in front of application
access and Internet browsing

Next steps
Watch the demo
Try Teams, free for up to 50 users
Request a live demo with a Cloudflare expert

1 888 99 FLARE | enterprise@cloudflare.com | www.cloudflare.com

REV: BDES-1438.2021FEB22