What Is the Zero Trust Exchange?

Source: Zscaler•

What Is the Zero Trust Exchange?

The Zero Trust Exchange is a scalable, multitenant cloud native platform that securely connects users, apps, and devices over any network, in any location.

Enterprise applications are rapidly moving to the cloud, and this won't slow down any time soon. Leveraging the cloud helps IT stay more agile across various initiatives, which translates to lower costs and faster innovation. Moreover, businesses are increasingly relying on internet destinations and external SaaS applications to support critical business needs, and they're moving internally managed applications to the public cloud, IaaS, or PaaS, for greater agility and accessibility. Amid this continuing shift, users still expect to be able to seamlessly and securely access data and applications from any device, anywhere in the world. Legacy security models can't support this.

Securing on-premises corporate networks to protect users and data is irrelevant in a cloud-first, mobile world. This makes the Zero Trust Exchange the optimal framework for securely connecting users, devices, and applications using defined business policies regardless of the network. Legacy security appliances are difficult to maintain, ineffective at inspecting encrypted traffic at scale, and often lead to poor user experiences and higher costs.

Because the Zero Trust Exchange platform is built on a multitenant, distributed cloud architecture, it can easily deliver the necessary security functionality to enable users, applications, and devices to safely and efficiently access authorized applications and services based on your business policies.

The Zero Trust Exchange weaves cloud-delivered security best practices to:

  • Reduce risk by preventing threats and eliminating the attack surface
  • Improve productivity with fast access to applications
  • Cut costs through simplified infrastructure

Secure Internet and SaaS Access

The Zero Trust Exchange provides real-time cyberthreat protection, data protection (DLP, CASB, CSPM), and secure local breakouts (fast direct-to-cloud connections for branch offices). Cloud-delivered policies stay with users for identical protection anywhere.

Secure Private App Access Without VPN

VPNs can be slow and frustrating for users, not to mention a target for attackers. The Zero Trust Exchange applies zero trust security to connections from office to data center and B2B customer application access, eliminating the need for a VPN.

App Segmentation Without Network Segmentation

The Zero Trust Exchange lets you secure apps and workloads without the headache of network segmentation. Application segmentation (a.k.a. microsegmentation) creates a secure segment between a user and app, eliminating the risk of east-west movement and overprivileged access. Improved User-to-App Experience Management The Zero Trust Exchange is built with user experience and performance in mind. Performance scores can be measured by user, app, and location, making it easier to identify and resolve endpoint and network issues.

What this article says