Zero Trust Application Access

Harmony SASE's Zero Trust Application Access is designed for securing access to privately owned resources without the need for traditional VPN solutions. This feature operates by integrating with a Harmony SASE private network, which must be configured with either an IPSEC Tunnel or a Wireguard connector to facilitate communication with internal hosts.

Technically, the architecture involves adding applications to the Harmony SASE account and configuring them through the General Settings form. Access policies can be customized based on various factors such as network, device, location, work schedule, and connection time. Users are presented with a list of available applications they have permission to access, and upon selection, they are automatically connected securely.

Key operational considerations include the need for regular reviews of user access permissions and the use of strong authentication mechanisms to enhance security. The system supports multiple protocols including HTTP/S, RDP, SSH, and VNC, allowing for flexible and secure access to different types of applications. However, it is important to note that this solution does not support securing access to publicly accessible websites or SaaS providers, for which the Harmony SASE Agent might be more suitable.

From a technical standpoint, the system ensures real-time access control with granular policy enforcement, but it requires meticulous setup and configuration to avoid issues. For instance, incorrect IP addresses or mismatched settings can lead to connectivity problems, highlighting the importance of precise configuration during setup. Overall, Harmony SASE's Zero Trust Application Access provides a robust and flexible security framework for managing access to internal resources, but it demands careful management and monitoring to maintain its effectiveness.