Ivanti Zero Trust Access

Reduce Attack Surface with Per-App Zero Trust Access

In today’s borderless digital environments, organizations face complex security challenges driven by the rise of remote work and the increasing adoption of cloud-based applications and services. The employee work-from-home revolution has expanded the traditional network perimeter, creating a distributed and dynamic workforce that demands access to corporate resources from virtually anywhere.

Ivanti Zero Trust Access (ZTA) delivers secure, application-focused access with continuous authentication and adaptive controls. By prioritizing identity and context, ZTA minimizes the attack surface, prevents lateral movement threats and enhances visibility across distributed application ecosystems, whether on-premises or in private or public clouds. Automated threat detection, granular policy enforcement and flexible gateway deployment options make ZTA the go-to solution for organizations seeking to confidently adopt zero trust principles and safeguard their users, applications and data.

While this transformation has brought increased flexibility and efficiency, it has also introduced new vulnerabilities and points of exposure. Organizations must contend with a rapidly evolving threat landscape that includes advanced and sophisticated attacks, including those leveraging artificial intelligence. As a result, traditional security approaches are no longer adequate, and enterprises must re-evaluate how they secure access to their applications and data.

Enter Ivanti Zero Trust Access, a comprehensive solution designed to address modern security challenges and empower organizations to confidently embrace the principles of zero trust network access. With a focus on continuous verification, granular policy enforcement and real-time risk assessment, Ivanti ZTA provides the foundation for a robust and resilient security and access management strategy.

Centralized Policy Enforcement with Continuous Risk Evaluation

Empower your organization to enforce zero trust principles. Continuously authenticate users, applications, devices and context, and protect access to corporate applications across diverse environments, including on-prem, data centers, and public and private clouds.

Enhanced Security with Application-Focused Access

Strengthen your security posture and protect against lateral movement attacks with Ivanti Zero Trust Access (ZTA). ZTA allows you to grant access based on least privilege principles, ensuring that users can only access the resources they need to perform their job. With ZTA, you can continuously verify user identities and device security posture, all while providing application-focused access for enhanced security.

Adaptable Application Policy and Control

Achieve fine-grained control over application access based on user identity, device, location and more. Adapt access policies to align with your organization’s business needs, whether managing contractor access or enforcing location-based authentication.

Proactive Threat Detection with User and Entity Behavior Analytics

Leverage UEBA and advanced risk analytics to identify anomalies, assess risk and respond to potential threats in real time. Utilize Vulnerability Risk Rating (VRR) scores from Ivanti Vulnerability Knowledge Base (VULN KB) to evaluate endpoint applications, providing visibility into vulnerabilities and enabling efficient risk triage by admins.

Streamlined Access Management

Facilitate business operations while maintaining strong security by safely granting users or groups access to the applications they need. Simplify access management during mergers and acquisitions and enable seamless integration of new business units.

How It Works

Cloud-Hosted Authentication and Authorization

ZTA uses a cloud-hosted controller to authenticate and authorize user identity and device security posture for compliance before establishing an application session.

Intelligent Traffic Steering

The Ivanti Unified Client automatically steers traffic to the most optimal gateway for connecting the application tunnel, removing the need for costly backhauling or hair-pinning of traffic.

Real-Time Risk Assessment

ZTA continuously assesses risk levels based on user behavior, device security posture, and Vulnerability Risk Rating (VRR) scores of the software installed on the endpoints, enabling proactive threat mitigation. ZTA integrates with existing VPN solutions, enabling secure access to new apps and supporting business activities while maintaining robust security.

_{Figure: Centralized policy engine, Vulnerability Risk Rating and Zero Trust Access flow.}

Centralized Policy Engine and UEBA

ZTA governs each access request and session through a centrally deployed policy engine, augmented with User and Entity Behavior Analytics (UEBA). Attributes for each session are monitored and assessed, and proprietary risk scores identify non-compliant, malicious, and anomalous activity for expedited threat mitigation.

Flexible Gateway Deployment

ZTA gateways are deployed where you choose, either on-premises or in your public or private cloud environments. Proximity to cloud applications optimizes user experience, reduces latency, and enables scalable hybrid IT deployment.

Direct Secure Per-Application Tunnels

The ZTA controller verifies application access policies and instructs the Ivanti Unified Client to create a direct secure per-application mTLS tunnel between the device and the ZTA gateway. Data interaction with the ZTA controller is eliminated.

Key Use Cases

_{Figure: Converged Zero Trust Access use cases.}

Implementing a Zero Trust Access Model

As organizations navigate an increasingly borderless network landscape, implementing a zero-trust access model is essential for enhancing security. Ivanti Zero Trust Access offers a robust solution that adopts an application-centric approach, focusing on securing access to applications rather than the broader network. With the principle of least privilege in place, users are granted access only to specific, authorized applications. Continuous verification of user identities and assessment of device security posture reinforce security measures. The solution also offers a unified client that seamlessly supports both Ivanti Connect Secure VPN and Ivanti Zero Trust Access, enabling your organization to proactively protect against lateral movement attacks with granular access controls.

Controlling and Managing Application Access

Control and management of application access play a vital role in safeguarding your organization’s data and resources. Ivanti Zero Trust Access empowers you to implement fine-grained policies that control access based on user identity, device, and location. The solution is adaptable to your unique business needs, making it easy to manage remote access, enforce location-based authentication, and streamline access management. Efficiently grant access to users or groups as needed and facilitate business operations, all while maintaining robust security standards.

Leveraging Analytics for Proactive Security

Proactive security is key to staying ahead of emerging threats in today’s dynamic cybersecurity landscape. Ivanti Zero Trust Access enables your organization to leverage advanced analytics for proactive security measures. Real-time anomaly detection and User and Entity Behavior Analytics (UEBA) help identify unusual behavior and potential risks. The solution utilizes Vulnerability Risk Rating (VRR) insights to assess endpoint vulnerabilities, giving you the visibility you need for effective risk triage. Automated actions respond to policy violations and risk scoring, including remediation measures, ensuring that your organization is equipped to respond swiftly to potential threats.

With Ivanti Zero Trust Access, you gain a powerful solution that addresses critical security challenges and enables your organization to confidently implement a Zero Trust Access model, manage and control application access, and leverage powerful analytics for proactive security. Whether you’re dealing with remote access, securing a hybrid workforce, or enhancing security visibility, the solution is designed to support you every step of the way.

Features and Benefits

Feature	Benefit
End-to-end access policy	Define end-to-end access policies for every resource, eliminating the distinction between remote and on-premises users.
Invisible gateways	Go dark with ZTA, rendering application gateways unresponsive to attackers while seamlessly granting access to authenticated and authorized users.
Single-pane-of-glass visibility	Gain holistic visibility and compliance reporting of users, devices, applications, context and infrastructure across the enterprise.
Adaptive single sign-on (SSO) authentication	Integrate through SAML 2.0 to provide SSO to supported SaaS and third-party applications.
Intelligent traffic steering	Provide the best possible user experience using automated optimal gateway selection to ensure users’ application traffic is always routed to the fastest gateway.
Endpoint compliance	Authenticate users and devices against granular policies before granting access, minimizing the risk of malware and other threats.
Application discovery	Get a comprehensive view of application usage and seamlessly create ZTA policies to manage those applications without disrupting the end user.
User and Entity Behavior Analytics (UEBA)	Leverage analytical data to reduce security risks, detect anomalies, optimize user experience and adapt to mobile workforces.
Data privacy and sovereignty	Achieve data sovereignty as user app traffic flows directly through customer-deployed gateways, segregated from the ZTA control plane, ensuring exclusive control over data flow.