SOLUTION BRIEF

Replace your VPN
with CloudflareStrengthen security and simplify operations withfast, reliable Zero Trust Network Access ZTNA

Why replace your VPN?
As organizations embrace hybrid work and cloudarchitectures, maintaining a VPN is a liability:●

Too risky: Constant vulnerabilities and overly
permissive access open doors to attackers.

●

Too inefficient: Manual operations and abacklog of tickets overburden infosec staff.

●

Too slow: Clunky, latent, and unreliable user
experiences hurt productivity.

Modernize access with ZTNA
Simpler, faster, and more resilient than your VPN

Why now?
Delaying your VPN replacement project only costs yourbusiness and holds back growth:●

Financial costs like rising bandwidth andhardware expenses●

Operational costs like slower onboarding ofusers and delayed rollout of new apps●

Security costs of breaches, slow incident
response, and loss of compliance certifications

Secure access between any user and app, on any
device, in any location. Verify every request based on
identity, device posture, and other context — nobackhauling or on-prem appliances required.
●Reduce risk: Increase visibility and controls toprevent more incidents and respond faster.

●Enable agility: Streamline policy configuration,on/offboarding, and other IT operations as yourworkforce and app environments evolve.

Cloudflare helps tech-forward teams move faster to replace their VPN

Simple to set up and automate

Seamless user experience

Resilient and scalable globally

Clientless access for web apps
and in-browser SSH to start
offloading traffic.

Make on-prem apps feel justlike SaaS apps with smoothauthentication.

Our Anycast architecture
enables reliable end-to-endconnectivity.

Centralize policy administration
with granular, custom rules, plus
intuitive APIs and Terraformprovider to scale automation.

Cloudflareʼs extensive global
network ensures routing andenforcement are always localand fast.

Every security service is built torun across each of our 330
network locations, so you canscale deployment anywhere.

Cloudflare | VPN replacement

Example VPN replacement journey
Prioritize critical apps or risky users for a ZTNA pilot to start augmenting your VPN quickly. Configure granular
Zero Trust rules, and deploy clientless access for web apps or in-browser SSH to expedite testing.
Enhance your ZTNA deployment over time to move gradually toward full VPN replacement. Start with clientlessaccess for quick time to value, then add client-based capabilities like verifying device posture, infuse user riskscoring and Internet filtering, add inline remote browser isolation RBI) and DLP, or automate with Terraform.
Connect yourinternal app toCloudflareʼs network

Integrate identityand endpoint
protection

Configurecontext-based
Zero Trust rules

Test clientlessaccess rightaway

Point to yourinternal DNSresolver for internal
IPs and hostnames

Add client-based
capabilities, or inline
RBI or DLP. Automate
with Terraform.

Move toward full VPN replacement

Offload priority apps from your VPN

Sample use cases to get started● Streamline contractor / 3rd party access withclientless options, social IdPs, and more to
enforce least privilege without shipping hardware.

● Simplify ITOps for joiners, movers, & leavers withmultiple IdP support and automated on/
offboarding. Avoid network mergers during M&A.

● Secure developer / privileged access to criticalinfrastructure without performance tradeoffs.

● Enforce phish-resistant MFA like FIDO2-compliant
security keys for any resource — even internal IPs.

What customers are saying
Replaced VPN for global
hybrid workforce of44k+ users.
E-commerce
Read case study

Started with clientlessaccess to web apps.

FintechRead case study

Replaced VPN for 2k+
employees andcontractors.
Private equity
Read case study

Automated policy
configuration via
Terraform.

Replaced VPN for
developers & reduced
app deployment timeby 90% via simpler
policy management.

Cloudflare is named a
Customers' Choice in the2024 Gartner® PeerInsights™ Voice of theCustomer: Zero Trust
Network Access*

Want to learn more? See our step-by-step implementation guide, or request a conversation.
© 2024 Cloudflare, Inc. All rights reserved. | 1 888 99 FLARE | enterprise@cloudflare.com | Cloudflare.com

REVPMMAUG2024* Gartner, Voice of the Customer for Zero Trust Network Access, 30 January 2024, Peer Contributors. GARTNER, PEER INSIGHTS and The Gartner Peer Insights Customersʼ Choice badge are trademarks of Gartner, Inc., and/orits affiliates, and are used herein with permission. All rights reserved. Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences with the vendors listed on the platform, should
not be construed as statements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties, expressed orimplied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose.