{"id":6516,"date":"2021-04-01T14:06:33","date_gmt":"2021-04-01T12:06:33","guid":{"rendered":"https:\/\/tekmart.co.za\/t-blog\/?p=6516"},"modified":"2021-04-01T14:07:45","modified_gmt":"2021-04-01T12:07:45","slug":"what-is-zero-trust-ultimate-guide-to-the-network-security-model","status":"publish","type":"post","link":"https:\/\/tekmart.co.za\/t-blog\/what-is-zero-trust-ultimate-guide-to-the-network-security-model\/","title":{"rendered":"What is zero trust? Ultimate guide to the network security model"},"content":{"rendered":"Reading Time-approximately:<\/span> 6<\/span> minutes<\/span><\/span>\n

A zero-trust model is a security framework that fortifies the enterprise by removing implicit trust and enforcing strict user and device authentication throughout the network.<\/strong><\/h2>\n\n\n\n

BySandra Gittlen<\/a> and Laura Fitzgibbons<\/a><\/p>\n\n\n\n

This guide goes in-depth into the origins of zero trust, its architecture, the technology and products that comprise a zero-trust model, as well as how to implement and manage zero trust. Links enable readers to dig even deeper and become experts in this critical security strategy.<\/p><\/blockquote><\/figure>\n\n\n\n

What is zero trust?<\/strong><\/h3>\n\n\n\n

The main tenet of zero-trust security is that vulnerabilities often appear when\u00a0companies are too trusting of individuals or devices. The zero-trust model suggests that no user, even if allowed onto the network, should be trusted by default because they could be compromised. Identity and device authentication are required throughout the network instead of just at the perimeter.<\/p>\n\n\n\n

By limiting which parties have privileged access to each segment of a network, or each machine in a secure organization, the number of opportunities for a hacker to gain access to secure content is greatly reduced.<\/p>\n\n\n\n

The term zero trust <\/em>was introduced by an analyst at Forrester Research in 2010, with vendors, such as Google and Cisco, adopting the model shortly after.<\/p>\n\n\n\n

Why is a zero-trust model important?<\/strong><\/h3>\n\n\n\n

Traditional IT security strategies, such as VPNs and firewalls, create a perimeter around the network that enables authenticated users and devices to traverse the network and access resources with ease. Unfortunately, with so many users working remotely and so many assets being placed in the cloud, relying solely on the\u00a0perimeter approach is becoming less effective, less efficient and more dangerous.<\/p>\n\n\n\n

A zero-trust model, conversely, provides strong protection against the\u00a0types of attacks that plague businesses today, including the theft of corporate assets and identities. Adopting zero trust enables organizations to do the following:<\/p>\n\n\n\n

  • protect company data;<\/li>
  • boost the ability to do compliance auditing;<\/li>
  • lower breach risk and detection time;<\/li>
  • improve visibility into network traffic; and<\/li>
  • increase control in a cloud environment.<\/li><\/ul>\n\n\n\n

    A zero-trust model supports\u00a0microsegmentation\u00a0— a fundamental principle of cybersecurity. Microsegmentation enables IT to wall off network resources so potential threats can be easily contained and not spread throughout the enterprise. Organizations can apply granular policies enforced by role-based access to secure sensitive systems and data.<\/p>\n\n\n\n

    \"\"\/<\/figure>\n\n\n\n

    How does ZTNA work?<\/strong><\/h3>\n\n\n\n

    Zero-trust network access (ZTNA), part of a zero-trust model, uses identity-based authentication to\u00a0establish trust and provide access\u00a0while keeping the network location — i.e., the IP address — hidden. ZTNA adapts access to specific applications or data at a given time, location or device, and provides IT and security teams with centralized control and improved flexibility to secure highly distributed IT environments, according to Lee Doyle, principal at Doyle Research.<\/p>\n\n\n\n

    As organizations scale their remote user and IoT environments, ZTNA secures the environment, identifying anomalous behavior, such as attempted access to restricted data or downloads of unusual amounts of data at unusual times.<\/p>\n\n\n\n

    \n