Skip to main content

Hello,

 

I am implementing ZTNA in my company, but I have some questions.

My current environment for internal applications relies on a VPN, which ZTNA will replace. However, I would also like to enable ZTNA access for other environments (AWS, GitHub, GCP, etc.). Since these are SaaS environments, is it possible to use ZTNA for them?

Or is ZTNA only applicable to internal systems?

@gabrieldmeida

NPA can be used to route public domains and IP addresses through your AWS, GCP, or other locations.  For IaaS locations, this is very common as it’s a simplified and more secure way to access applications and workloads.  For public SaaS applications, it is possible but usually there are better ways to achieve this while routing traffic through Netskope’s data planes and egressing directly.  This allows you to leverage our network’s peering and other optimization for SaaS apps while retaining DLP and other controls.  

I’d suggest reaching out to your local Netskope Sales Engineer or Professional Services engineer to determine the best architecture. 


Reply