Zero Trust Network Access (ZTNA) is a conceptual framework for cybersecurity that assumes all users, devices and applications are inherently untrustworthy, and that the risks they pose must be controlled through rigorous authentication, least-privileged access and continuous monitoring. It is a model ideally suited to the security needs of today’s distributed, cloud-centric network environments. However, a ZTNA solution can only be as effective as the data foundation upon which it is built.

Embedding a next-generation deep packet inspection (NG DPI) engine in your ZTNA solution is a simple, non-intrusive way to gather the high-fidelity contextual information successful ZTNA requires, including data about users, devices, applications, services, transactions, and flows, as well as high-value indicators of anomalies. And because this information is drawn from network-based telemetry data - the most reliable source available – it enables the meticulous scrutiny of network activity the zero-trust paradigm demands – without requiring decryption unless absolutely necessary.

This white paper addresses the network intelligence challenges facing ZTNA, the different traffic visibility techniques that can be used to boost performance, and the ways in which an embedded NG DPI engine can support ZTNA product differentiation and continuous innovation.