Zero Trust to replace VPNs?

Business leaders are under tremendous pressure to move to the cloud to deliver a better customer experience, but they must be able to protect the business while doing so. ZTNA services are built to ensure that only authorised users can access specific applications based on business policies. Unlike VPNs, users are never placed on the network and apps are never exposed to the internet. This creates a zero-attack surface, protecting the business from threats like the recent wave of malware and successful VPN attacks. Other key survey findings include:

• 61 per cent of organisations are concerned about partners with weak security practices accessing internal applications.
• BYOD is still an IT security reality in 2019 as 57 per cent of organisations are prioritising secure access from personal, unmanaged devices.
• 53 per cent of respondents believe their current security technology can mitigate their risk even though legacy technologies directly connect users to the network - expanding the attack surface.

“With state-sponsored groups exploiting known flaws in VPNs, organisations need to reduce the attack surface by rethinking how they secure and provide access to their apps in a cloud and mobile-first world,” said Patrick Foxhoven, CIO, Zscaler. “Though it is encouraging to see so many organisations are pursuing ZTNA to close gaps created by VPNs, I am surprised that more than half of those surveyed believe their current infrastructure is reliable enough to protect the enterprise.”