Demo of Symantec ZTNA accessing internal apps with multifactor passwordless authentication

Описание: Demo of Symantec ZTNA accessing internal apps with multifactor passwordless authentication with SAML federation.
No ports are open to the internet to access this internal appliications hosted in the datacenter. Symantec ZTNA uses a connector to establish outbound TLS mutually authenticated TLS/SSL connections and only successfully authenticated and authorised users are able to traverse the datacenter perimeter firewall via an outbound secure connection.
This dramatically reduces your attack surface on the internet, there are no ports open, so an NMAP scan will come up empty. It will also allow you to host your webcontent from a dynamic IP address, when your IP changes, a new tls outbound connection from connector is established to the Symantec Pop hosted in GCP, so the threat actors wont be able to identify whether your origin is hosted in your own datacentre, AWS, Azure, Google or somewhere else.

This is the fundamental framework of Zero Trust. No users should get access to any resource, unless they are authenticated and authorised. Users get only access to that application and nothing else. If a new app is required, the seemless authentication process is completed without the user having to type in anything. Making it faster, more secure and easier for the user, more secure for the enterprise and better user experience, a Win-Win-Win.

This is in contact to the traditional method of a VPN, which is clunky, allows unfettered access to the network, hard to manage and control and the key attack point for hackers.