Zero Trust Network Access (ZTNA) changes the typical netwrok architecture paradigm, where users are authenticated at the perimeter. ZTNA shifts the focus from location and interface, and ownership to distributed parameters that can be applied at the point of access. The network edge is generally defined as the place where a device or local area network (LAN) connects to the Internet. It is called the “edge,” because this is the entry point to the network where devices themselves are communicating with the Internet. The network edge is the physical point at which the enterprise-owned network connects to a third party network Principles of ZTNA: – Any user or devide requesting access to a resource is assumed to be hostile – Threats to the network exists internally and externally – Every resource and device requesting access should be authenticated and authorized for that specific resource – Network policies should be distributed within a network at the point of access (resource, data, etc.) and not centrally located (but are centrally managed). ZTNA Technologies and Processes: – Multi-factor authentication at the pont of resource or data consumption – Least privilege access to data – Closely coupled identity and access managment systems – Network visibility and monitoring of user behavior – Endpoint Management and device health – Micro-segmentation – Next-gen firewalls