However, a more accurate term is zero trust access (ZTA). When I talked to the analyst, he referred to the next step beyond Universal ZTNA as “ZTNA for devices” because not all access involves users. As organizations realize the benefits of adopting zero-trust, many of them graduate from a ZTNA remote access solution to Universal ZTNA for access anywhere. The user identity, device identity, and a posture check are performed before access is granted. Instead of having one policy for remote users and another policy for those located on-premises, with Universal ZTNA, users can be located anywhere. Universal ZTNA is different in that it enables connections regardless of the location of the application or user. Many organizations have used ZTNA only for remote access, but now Universal ZTNA has become a priority for more enterprises. Unlike a VPN that provides broad access to the network, ZTNA provides granular control, so access is only granted to a specific application. It’s important to provide a good experience no matter where users and the applications they need to access may be located. Zero-trust concepts have received much more attention since the increase in remote and hybrid work arrangements. This change in mindset has led to specific projects that involve zero trust, such as zero-trust network access (ZTNA) initiatives.

Many organizations are incorporating zero-trust strategies into their architectures, replacing implicit trust for network edges and remote users with consistent convergence of networking and security. It moves security away from implied trust that is based on network location and evaluates trust on a per-transaction basis. With zero trust, a user or device is only trusted after confirming their identity or status.

The other day I was talking to an analyst about trends in networking and how important the zero-trust security model has become.

Trust no auntie