Concerned about recent PAN-OS and other firewall/VPN CVEs? Take advantage of Zscaler’s special offer today

Read more

What is Zero Trust

Adopting a zero trust architecture is the most effective way to enforce policy, control risk, and verify identity and context.

Search Zpedia Search

Featured

  • What Is Zero Trust Architecture?

    Zero trust architecture is a security architecture built to reduce a network's attack surface, prevent lateral movement of threats, and lower the risk of a data breach based on the zero trust security model. Such a model puts aside the traditional "network perimeter"—inside of which all devices and users are trusted and given broad permissions—in favor of least-privileged access controls, granular microsegmentation, and multifactor authentication (MFA).

    Read more

    13 Min read

  • What Is Zero Trust?

    Zero trust is a security strategy that asserts that no entity—user, app, service, or device—should be trusted by default. Following the principle of least-privileged access, before any connection is allowed, trust is established based on the entity’s context and security posture, and then continually reassessed for every new connection, even if the entity was authenticated before.

    Read more

    13 Min read

  • How Do You Implement Zero Trust?

    Implementing zero trust is about enacting secure transformation. Today, more organizations know why they should pursue a zero trust architecture, but many still aren’t sure where to start—and every security provider seems to have their own definition of zero trust security. True zero trust doesn’t happen in an instant. It’s a journey that begins with empowering and securing your workforce.

    Read more

    13 Min read

27 articlearticles

  • What Is Pretexting?

    Pretexting is a form of social engineering attack in which a scammer creates a plausible scenario to bait victims into divulging sensitive information, making fraudulent payments, granting access to an account, and so on. Closely related to various types of phishing, pretexting scams are characterized by detailed situations (pretexts) and often involve impersonation as scammers work to build and manipulate victims’ trust.

    Read more

    8 Min read

  • What Is the HIPAA Security Rule?

    The HIPAA Security Rule is a set of legal standards for maintaining the confidentiality, integrity, and availability of electronic protected health information (ePHI) in the United States. It requires healthcare entities and their business associates to implement administrative, physical, and technical measures to secure patient data and mitigate the risk of data breaches. Noncompliance can result in significant financial and legal sanctions.

    Read more

    11 Min read

  • What’s the Difference Between SDP and VPN?

    The difference between a software-defined perimeter (SDP) and a virtual private network (VPN) is that where a traditional VPN places a barrier around an entire corporate network, an SDP effectively negates a network perimeter by placing security policies and controls around software, reducing permissions to a workload-to-workload or app-to-app basis rather than a typical perimeter-based architecture.

    Read more

    9 Min read

  • What Is Trusted Internet Connections (TIC) 3.0?

    Trusted Internet Connections (TIC) 3.0 is a US federal government program focused on IT modernization and stronger security capabilities in federal network architectures. By encouraging adoption of cloud services and zero trust architecture for greater scalability and operational agility, TIC 3.0 fosters a more flexible, risk-based approach than previous versions of the TIC program, which depended heavily on hub-and-spoke networks and perimeter-centric security.

    Read more

    12 Min read

  • What Is Zero Trust for the Department of Defense?

    Zero trust for the Department of Defense is a DoD information enterprise secured by a fully implemented, department-wide zero trust cybersecurity framework. The journey to zero trust requires all DoD Components to adopt and integrate zero trust capabilities, technologies, solutions, and processes across their architectures, systems, and within their budget and execution plans. In January 2022, the Department established the DoD Zero Trust Portfolio Management Office (ZT PfMO) within the DoD CIO to orchestrate the DoD efforts outlined in the DoD Zero Trust Strategy document and to accelerate ZT adoption through several courses of action.

    Read more

    10 Min read

  • What Is Universal ZTNA?

    Universal zero trust network access (UZTNA) is the use of ZTNA for on-premises and remote users, with no distinction made as to the user’s location. With universal ZTNA users are granted secure access based on the principle of least privilege whether they’re working in the office, at home, or on the road. UZTNA can serve as a conduit for digital transformation, giving organizations the best possible framework for zero trust initiatives.

    Read more

    8 Min read

  • What Is 5G Security?

    5G security is an area of wireless network security focused on fifth-generation (5G) wireless networks. 5G security technologies help protect 5G infrastructure and 5G-enabled devices against data loss, cyberattacks, hackers, malware, and other threats. Compared to previous generations, 5G makes greater use of virtualization, network slicing, and software-defined networking (SDN), making it vulnerable to new kinds of attacks.

    Read more

    8 Min read

  • What’s the Difference Between SD-WAN and MPLS?

    The difference between SD-WAN and MPLS is that SD-WAN is a virtualized network overlay that can combine multiple types of connections, whereas MPLS is a dedicated, hardware-based private network. Furthermore, SD-WAN creates encrypted tunnels over the internet, while MPLS doesn’t directly support encryption but is partitioned from the internet. Today, it’s widely agreed that SD-WAN is more cost-effective, flexible, and secure than MPLS.

    Read more

    9 Min read

  • What Is Zero Trust Architecture?

    Zero trust architecture is a security architecture built to reduce a network's attack surface, prevent lateral movement of threats, and lower the risk of a data breach based on the zero trust security model. Such a model puts aside the traditional "network perimeter"—inside of which all devices and users are trusted and given broad permissions—in favor of least-privileged access controls, granular microsegmentation, and multifactor authentication (MFA).

    Read more

    13 Min read

Zero Trust