الطلب
“A secure remote access network with Internet to an edge router, next-generation firewall and core switch, an application server and ZTNA proxy, plus a remote worker laptop using a client IPsec VPN and a remote contractor mobile device using the ZTNA proxy.”
جرّب إذنAdd multi-factor authentication before the VPN gateway.Add a second application server behind the core switch.
ما الذي يتضمنه هذا الرسم
اقرأ القرارات الكامنة وراءه.
01
Separate VPN and ZTNA gateways
02
VPN GW in DMZ, ZTNA proxy in internal
03
Firewall enforces segmentation
When migrating from VPN to Zero Trust incrementally while supporting legacy remote access.