DATA SHEET

Zero Trust Network Access for Everywhere WorkHow do you proactively protect yourusers and their data?

Visibility and control forEverywhere Workhas partnered with Lookout to provide zeroIn the modern hybrid workplace, companies are relying

As your organization continues to rely more and moretrust secure access and visibility across highly

more and more on cloud applications to connectheavily on cloud applications, you need to ensure your

distributed application ecosystems on-premises,and empower their users. These cloud applications

users, their devices, and the applications they use areprivate-or-public clouds, or on the open internet

bring convenient access from any device, allowing

safe, secure, and productive while protecting sensitive

while protecting your users, their data and theirusers to be productive from anywhere. With thisdata from falling into the wrong hands. You need to limit

devices from accidental and malicious data

unprecedented access comes new challenges that allaccess to corporate applications to only those who needexfiltration and threats such as viruses, malware

businesses must face:

it while also providing a seamless experience for the end

Ivanti Neurons for Zero Trust Access (ZTA)

and ransomware.

■ How do you control access to company

applications both on-premises and in the cloud?
■ How are users interacting with your sensitive

company data, where is it going and how can you
identify it?
■ Are user devices and personal apps putting thecompany at risk?

ivanti.com

user. You also need to safeguard your sensitive digitalassets and stay compliant with regulations, no matter
where your data goes or who is using it. You need tohave the control, visibility, and peace of mind that yourusers, their devices, and their data are secure.

Secure access and keep sensitive
data safe

How it works

With ZTA get on-demand protected access todelivered zero trust network access solution designed

corporate applications on-premises, and on private

to work with your VPN solution or with cloud-firstand public clouds from any device, anywhere.

organizations.

Automatically authenticate and authorize users,devices, and application connections according toflexible, granular policies, ensuring users can accessthe applications they need, when they need them.
Prevent lateral-movement threats with per-app microsegmentation control and identify risky user behavior
before it becomes a problem with User and Entity
Behavioral Analytics (UEBA).

Neurons for Zero Trust Access (ZTA) is a SaaS-ZTA authenticates and authorizes user identity anddevice security posture for compliance with thecloud-hosted ZTA Controller before establishing anapplication session. ZTA governs each access request
and session via a centrally deployed and managed
policy engine and augments these policies withbuilt-in User and Entity Behavior Analytics (UEBA),
where attributes for every session are monitored

Through Ivanti’s partnership with Lookout, ZTA adds

and assessed. Proprietary risk scores identify non-data loss prevention (DLP), enterprise digital rights

compliant, malicious, and anomalous activity—

management (E-DRM), optical character recognition

enabling expedited threat mitigation actions.

(OCR), exact data matching (EDM), malware detection,
incident response and data classification for internetand SaaS-based applications, protecting yoursensitive data and digital assets from accidental or
malicious leakage.

ZTA gateways are flexibly deployed where youwant, either on-premises or in your public or private
cloud environments. This proximity optimizes userexperience, reduces latency, and enables hybrid
IT deployment at scale. The ZTA controller verifies
application access policies, then instructs the IvantiUnified client to create a direct secure per-applicationmTLS tunnel between the device and the ZTA
gateway, eliminating any data interaction with theZTA controller. The Ivanti Unified Client automaticallysteers the traffic to the most optimal gateway
for connecting the application tunnel, no costly
backhauling or hair-pinning of traffic required.

Through our partnership with Lookout, ZTA lets youidentify, classify, and protect your sensitive data anddocuments across internet and SaaS-based cloudservices, users, and devices, in real-time. Throughcentralized data loss prevention (DLP) policies,
you can detect, classify, and protect sensitive data
across any cloud deployment, email, and applications
consistently, while preserving the integrity of yourregulatory data such as Personally Identifiable
Information (PII), Protected health Information (PHI),
and information classified as Payment Card Industry(PCI-DSS) data.

With enterprise digital rights management (E-DRM)
you can secure sensitive files by automaticallyencrypting them as they are downloaded, stored, andshared, ensuring only those users with proper accessrights can access sensitive files, securely. Protect
your users and stop viruses, malware and ransomware
attacks with inbound and outbound malware detection
and automated quarantine and identify anomalous
behavior and remediate potential threats throughbehavioral analytics.
Neurons for Zero Trust Access provides deployment
flexibility and cohesive policy management for
application deployments anywhere while also offering
comprehensive secure access capabilities to thoseorganizations with pure multi-cloud environments.
Lookout provides unprecedented visibility into users’
cloud and internet applications, protecting their
sensitive data from leakage while protecting users andtheir devices from malicious threats.

Zero Trust Network Access for Everywhere Work | DATA SHEET

3

Feature

End-to-End Access Policy

Separation of Control and Data Plane

On-premises and Hybrid-Cloud

Adaptive Single Sign-On (SSO)

Endpoint Compliance

User Entity Behavioral Analytics (UEBA)

Description
Define end-to-end access policies for every resource, eliminating thedistinction between remote and on-premises users.
User and application traffic are sent directly between the user and designatedgateway, reducing the risk of data loss, and improving user experience.
Gateways can be deployed in public cloud, private cloud, or customer datacenters.
Integrate through SAML 2.0 to provide SSO to supported SaaS and 3rd party
applications.
User and devices authenticated against granular policies before access isgranted, reducing possibility of malware and other threats.
Leverage analytical data to reduce security risks, detect anomalies, optimize
user experience, and adapt to mobile workforces.
Identify, analyze, and secure Software-as-a-Service (SaaS) applications

Integrated Lookout CASB and SWG

with Lookout Cloud Security Access Broker and extend protection to internet
applications with Lookout Secure Web Gateway.

Advanced Data Leakage Protection (DLP)

Detect and stop sensitive data leaks in real-time, enforcing data protection
policies and ensuring compliance with privacy regulations.

Enterprise Digital Rights Management

Classify sensitive company documents and enforce in-motion and at-rest(E-DRM)

encryption to ensure only authorized users can access sensitive files.

Optical Character Recognition (OCR) andIdentify and protect sensitive documents and confidential key phrases in real-Exact Data Matching (EDM)

time, preventing accidental or malicious data exfiltration.
Scan and quarantine inbound and outbound SaaS and Internet application

Malware Detection, Behavioral Analytics, andtraffic for viruses, malware, and ransomware, identify risky behavioral

Incident Response

patterns and automate incident response to stop attacks and protect yourusers and resources.

Copyright © 2023, Ivanti. All rights reserved. IVI-2682 NH/DHivanti.com
1 800 982 2130
sales@ivanti.com