Sophos Zero Trust Network Access
The perfect complement to your Sophos Firewall, Endpoint, XDR, and MDR solutions.

Overview:

Securely connect anyone, anywhere, to any application. Sophos ZTNA transparently connects users to important business applications and data, providing enhanced segmentation, security, and visibility over traditional remote access VPN. It works as a standalone product and as a fully integrated Synchronized Security solution with Sophos Firewall and Intercept X.

Highlights:

Features:

Regain Trust in a World of Zero Trust

Sophos ZTNA delivers on the principles of zero trust: trust nothing, verify everything. Individual users and devices become their own micro-segmented perimeter that are constantly validated and verified. They are no longer “on the network” with all the implied trust and access that usually comes with it. Trust is now earned – not given.

Enable Remote Workers

Sophos ZTNA enables your remote workers to securely and seamlessly access the applications and data they need while making deployment, enrollment, and management much easier than traditional VPN.

Micro-Segment Your Applications

Sophos ZTNA provides the ultimate micro-segmentation so you can deliver secure application access whether your applications are hosted on premises, in a data center, or in your public cloud infrastructure. You also get real-time visibility into application activity for status, security posture, and usage. You can also control access to many SaaS applications with Sophos ZTNA using IP address restrictions to only allow connections from your ZTNA gateways.

Stop Ransomware and Threats

The possibility for ransomware and other threats to propagate across the network from a compromised user device is no longer a concern with ZTNA. Users and devices only have explicit policy-based access to specific applications. This eliminates the implied trust and broad network access that is one of the key challenges with VPN.

Deploy, Adapt, and Scale Quickly

Sophos ZTNA is built for the modern network that is dynamically changing, rapidly growing, and moving quickly to the cloud. It is a lean, clean solution that makes it quick and easy to stand up new applications securely, enroll or decommission users and devices, and get important insights into application status and usage.

Single Agent Deployment

Sophos ZTNA is tightly integrated with Sophos Intercept X next-gen endpoint protection, enabling a single client deployment option.

You can have the world’s best endpoint and ransomware protection along with the ultimate in application security and segmentation, all with a single client deployment.

Clientless access for browser-based applications is also an option.

Scalable Application Gateways

Sophos ZTNA gateways are free and easy to deploy where you need them. Available as a virtual appliance, you can easily deploy high-availability gateways and scale them as your organization grows.

Synchronized Device Health

Sophos ZTNA takes full advantage of Sophos Synchronized Security, utilizing the Security Heartbeat™ between Sophos Intercept X endpoints and Sophos Central and ZTNA to assess device health and identify active threats and signs of compromise. The result is an instant response to limit access, both on the network and off, for compromised or non-compliant devices.

Integrated Identity

With zero trust, identity is everything. Sophos ZTNA continuously verifies user identity with support for the most popular IDP solutions, including Microsoft Azure and Okta. Of course, you can also leverage your preferred multi-factor authentication (MFA) solution that integrates with these IDPs to guard against credential theft or compromised devices.

How It Works

Sophos ZTNA as a Service (ZTNAaaS) makes zero trust access easy with a single agent and single console, from a single vendor.

Technical Specifications:

Sophos ZTNA Feature Summary

• Secure access: for business applications hosted on premises or in your public cloud infrastructure
• Applications: all browser-based web apps in clientless mode; thick apps like SSH, VNC, RDP, and others via the ZTNA client
• Access policies: user group-based policies, Synchronized Security health-based access policies
• Reporting, monitoring, logging, and auditing of application status, access, and usage through Sophos Central
• User portal for end users to access bookmarked applications

Supported Platforms
Identity Providers	Microsoft Azure and Okta
ZTNA Gateway Platforms	VMware ESXi 6.5+, Hyper-V 2016+, and AWS; Coming Soon: Sophos Firewall v20 (all hardware, virtual, and cloud platforms)
ZTNA Client Platforms	Windows 10 1803 or later, macOS 11 (Big Sur) or later; All platforms support agentless web application access
ZTNA Device Health	Sophos Security Heartbeat (Intercept X)

Gateway Specifications
Recommended VM	2 Core / 4 GB
Multi-Node Clustering	Up to 9 nodes with load balancing for performance, capacity, and business continuity
Node capacity and scaling	10,000 agent connections for a single node, up to 90,000 agent connections in a cluster (max. 9 nodes)

Documentation:

Download the Sophos ZTNA Data Sheet (PDF).