Definition

A set of cybersecurity principles used when planning and implementing a zero trust environment. ZTNA is not a single product but a set of concepts and ideas. It is a security model that assumes no implicit trust is granted to assets or user accounts based solely on their physical or network location (i.e., local area network versus internet) or asset ownership (enterprise or personally owned). Authentication and authorization are discrete functions performed before a session to an enterprise resource is established. ZTNA limits access to only explicitly authorized resources.