Protect your network

Secure remote access (zero trust)

Give staff the applications they need from anywhere, and nothing else, without a traditional VPN opening up your whole network.

Ask us about this
The risk

A traditional VPN connects a remote user to your whole network. If their password is stolen or their laptop is infected, the attacker gets the same access.

VPN devices facing the internet are also a favourite target for attackers, who scan constantly for ones that haven't been updated.

What it does
  • Gives each person access to specific applications, not the whole network
  • Keeps your applications invisible to the internet, so only authorised users can find them
  • Checks identity with multi-factor authentication
  • Checks the device is healthy, and automatically blocks one with an active threat
  • Access to web applications, remote desktop (RDP) and SSH from a secure browser
  • A gateway built into every Sophos Firewall, or available separately

Weighing up a VPN against zero trust access? Our guide, How to secure staff working from home: VPN vs ZTNA, compares the two and covers the basics every home worker setup needs.

Who it's for

Businesses with staff who work from home but need systems in the office, businesses replacing an ageing VPN, and anyone who needs to give a contractor access to one system without giving them everything.

How we supply it

By default we supply the licence and you (or your IT provider) deploy it. If you'd rather hand the whole job to us, we can configure and install it for you at our standard day rate, scoped and agreed with you up front, and invoiced separately.

What's under the hood

Sophos ZTNA - part of Sophos Workspace Protection, using the Sophos Protected Browser, and managed from Sophos Fusion. A ZTNA gateway is built into every Sophos Firewall.

Questions
Nothing, if it's well maintained and the people using it are trusted. The problem is that it gives access to the whole network, so one stolen password or infected laptop can reach everything. Zero trust access limits each person to what they need.
No. The gateway is built into Sophos Firewall if you have one, but it can also run separately.
No. It's designed for applications that stay where they are, in your office or data centre, and makes them reachable only by the people who should be using them.

< Back to Protect your network

Not sure what you need?

Tell us a little about your business and we'll recommend the controls that will work best for you, with no obligation and no jargon.

Talk to us
or
See every security area

Our experts spent 20 years at Sophos and include a certified ethical hacker.
More about us

Ask us about this