What is Zero Trust?

When designing a zero trust solution for remote access to an environment, it is commonly referred to as Zero Trust Network Access (ZTNA) but is also known as a Software-Defined Perimeter (SDP). A ZTNA or SDP is a modern way to secure access to the network, which uses a cloud-first, software-based approach to replace the hardware of legacy VPNs. It creates an overlay network that securely connects users and devices over the Internet to the servers and applications they need in the data center or public cloud.

Network Private Access solutions offer the following benefits:

• リモート・ユーザー・アクセスの効果的な保護
• 強力な認証を保証
• 社内リソースへのアクセスに対する効果的なガバナンスの実装
• 侵害の可能性と損害を軽減
• コンプライアンス監査イニシアティブをサポート
• クラウドへの移行を迅速化
• セキュリティを変革 — ハードウェアのVPNからの脱却を実現し、ソフトウェアで定義されたソリューションへ

多くの企業組織は、ゼロトラストモデルを採用しており、増加するクラウドアプリケーションやデータサービスにアクセスできるユーザーとデバイスを可視化および制御することができます。これには、企業のエコシステム内の管理対象アプリケーションと、基幹業務および企業内の個人が勝手に使用する非管理アプリケーションの両方が含まれます。

What’s the difference between Zero Trust and ZTNA?

On the other hand, you have Zero Trust Data Protection (ZTDP), a new security framework created by Netskope. We define Zero Trust Data Protection as an application of the core principles of zero trust in order to guard your data from unauthorized viewing, movement, alteration, and exfiltration.

ZTDP benefits include:

• Continuous risk assessment
• Data context and sensitivity awareness, for better policy enforcement
• Enables safe access-from-anywhere
• Ensures data is protected everywhere
• Adherence to current compliance standards

The addition of other tools like analytics platforms and inline visibility to cloud, web, and network usage allows these administrators to tailor their zero trust rules and prevent unauthorized lateral movement to other sets of data. All in all, Zero Trust Data Protection is a first line of defense against unauthorized data access and exfiltration.

Report: Cybersecurity Insiders – Zero Trust Report 2020
Report: 2020 Gartner Market Guide for Zero Trust Network Access

While both of these concepts utilize zero trust, ZTNA deals with applying the zero trust model strictly for the purposes of guarding network access, while ZTDP applies zero trust to the protection of access to data. In a perfect world, companies would utilize both concepts as a safeguard against network intrusions and data exfiltrations/alterations.

ガートナーの、ゼロトラストの予測と洞察

の新しいデジタルビジネスアプリケーションのうち、ZTNAを介してアクセスされる	of enterprises will phase out most of their remote access VPNs in favor of ZTNA

_{参考: GARTNER レポート: THE FUTURE OF NETWORK SECURITY ISIN THE CLOUD}