Zero trust and SASE
Secure Access Service Edge (SASE) and Zero Trust Network Access (ZTNA) combining cloud-delivered networking with identity- and device-aware access proxies.
Key Technical Considerations Before Procuring
Evaluate global edge point-of-presence (PoP) density and private backbone latency. Replace legacy full-tunnel VPNs with micro-segmented application access.
Documented Solutions in this Category
Showing 26 published solutions with verified evidence
Palo Alto Networks Prisma Access
Cloud-delivered Security Service Edge (SSE) and SASE solution protecting remote workforces and branch offices with Zero Trust network access.
FortiSASE
FortiSASE from Fortinet focuses on cloud-delivered secure network access. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Zero trust network access: Grants access to the applications or resources defined by policy rather than relying solely on network location. - Secure web gateway: Applies security policy to users' internet-bound traffic. - Cloud access security broker: Provides policy and visibility for the cloud application interactions covered by the product. - Data loss prevention controls: Adds sensitive-data policy enforcement to the access or traffic protection workflow. - Private application access: Connects authorized users to private applications according to access policy. - Internet traffic inspection: Inspects the traffic paths supported by the selected deployment and policy configuration. - Remote workforce access: Addresses secure connectivity for users working beyond a traditional office network. - WAN connectivity integration: Combines access security with the networking functions documented for the platform. Use and operational context FortiSASE is relevant to teams supporting distributed users and application access when the requirement centers on applying access policy to users, applications or traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? FortiSASE focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Zscaler Internet Access
Zscaler Internet Access from Zscaler focuses on secure internet access and cloud-delivered inspection. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Internet-bound access security: Applies the documented Zscaler inspection and policy controls to internet access. - Zero trust network access: Grants access to the applications or resources defined by policy rather than relying solely on network location. - Secure web gateway: Applies security policy to users' internet-bound traffic. - Cloud access security broker: Provides policy and visibility for the cloud application interactions covered by the product. - Data loss prevention controls: Adds sensitive-data policy enforcement to the access or traffic protection workflow. - Private application access: Connects authorized users to private applications according to access policy. - Internet traffic inspection: Inspects the traffic paths supported by the selected deployment and policy configuration. - Remote workforce access: Addresses secure connectivity for users working beyond a traditional office network. Use and operational context Zscaler Internet Access is relevant to teams supporting distributed users and application access when the requirement centers on applying access policy to users, applications or traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Zscaler Internet Access focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Zscaler Private Access
Zscaler Private Access from Zscaler focuses on zero trust access to private applications. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Application-specific private access: Connects users to private applications using the documented zero trust access model. - Zero trust network access: Grants access to the applications or resources defined by policy rather than relying solely on network location. - Private application access: Connects authorized users to private applications according to access policy. - Remote workforce access: Addresses secure connectivity for users working beyond a traditional office network. Use and operational context Zscaler Private Access is relevant to teams supporting distributed users and application access when the requirement centers on applying access policy to users, applications or traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Zscaler Private Access focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Cloudflare One SASE
Cloud-native SASE and SSE platform integrating ZTNA (Access), Secure Web Gateway (Gateway), Remote Browser Isolation (RBI), and Cloud Access Security Broker (CASB).
Cato SASE Cloud
Cato SASE Cloud from Cato Networks focuses on cloud network connectivity and converged security. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Zero trust network access: Grants access to the applications or resources defined by policy rather than relying solely on network location. - Private application access: Connects authorized users to private applications according to access policy. - WAN connectivity integration: Combines access security with the networking functions documented for the platform. Use and operational context Cato SASE Cloud is relevant to teams supporting distributed users and application access when the requirement centers on applying access policy to users, applications or traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cato SASE Cloud focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Harmony SASE
Harmony SASE from Check Point focuses on secure remote access and cloud-delivered network security. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Zero trust network access: Grants access to the applications or resources defined by policy rather than relying solely on network location. - Data loss prevention controls: Adds sensitive-data policy enforcement to the access or traffic protection workflow. - Remote workforce access: Addresses secure connectivity for users working beyond a traditional office network. - WAN connectivity integration: Combines access security with the networking functions documented for the platform. Use and operational context Harmony SASE is relevant to teams supporting distributed users and application access when the requirement centers on applying access policy to users, applications or traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Harmony SASE focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Cisco Secure Access
Cisco Secure Access from Cisco focuses on cloud-delivered access security and zero trust access. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Private application access: Connects authorized users to private applications according to access policy. - WAN connectivity integration: Combines access security with the networking functions documented for the platform. Use and operational context Cisco Secure Access is relevant to teams supporting distributed users and application access when the requirement centers on applying access policy to users, applications or traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cisco Secure Access focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Cloudflare Access
Cloudflare Access from Cloudflare focuses on identity-aware access to private applications. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Zero trust network access: Grants access to the applications or resources defined by policy rather than relying solely on network location. - Device posture checks: Uses the condition of the connecting device as an input to access decisions. - Private application access: Connects authorized users to private applications according to access policy. - Remote workforce access: Addresses secure connectivity for users working beyond a traditional office network. Use and operational context Cloudflare Access is relevant to teams supporting distributed users and application access when the requirement centers on applying access policy to users, applications or traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS; Self-managed / on-premises option documented by the vendor. Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cloudflare Access focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Cloudflare Gateway
Cloudflare Gateway from Cloudflare focuses on secure web gateway and DNS filtering. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Zero trust network access: Grants access to the applications or resources defined by policy rather than relying solely on network location. - Secure web gateway: Applies security policy to users' internet-bound traffic. - Cloud access security broker: Provides policy and visibility for the cloud application interactions covered by the product. - Data loss prevention controls: Adds sensitive-data policy enforcement to the access or traffic protection workflow. - Private application access: Connects authorized users to private applications according to access policy. - Remote workforce access: Addresses secure connectivity for users working beyond a traditional office network. Use and operational context Cloudflare Gateway is relevant to teams supporting distributed users and application access when the requirement centers on applying access policy to users, applications or traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cloudflare Gateway focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Forcepoint ONE
Forcepoint ONE from Forcepoint focuses on cloud-delivered access security and data protection. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Secure web gateway functions: Applies the documented web access protection controls to internet-bound traffic. - Cloud application access controls: Provides the cloud application policy scope documented within Forcepoint ONE. - Zero trust application access: Adds the documented application-access approach for approved users and resources. - Zero trust network access: Grants access to the applications or resources defined by policy rather than relying solely on network location. - Secure web gateway: Applies security policy to users' internet-bound traffic. - Cloud access security broker: Provides policy and visibility for the cloud application interactions covered by the product. - Data loss prevention controls: Adds sensitive-data policy enforcement to the access or traffic protection workflow. Use and operational context Forcepoint ONE is relevant to teams supporting distributed users and application access when the requirement centers on applying access policy to users, applications or traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Forcepoint ONE focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
iboss Zero Trust SASE
iboss Zero Trust SASE from iboss focuses on cloud-delivered zero trust access and traffic protection. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Zero trust network access: Grants access to the applications or resources defined by policy rather than relying solely on network location. - Cloud access security broker: Provides policy and visibility for the cloud application interactions covered by the product. - Data loss prevention controls: Adds sensitive-data policy enforcement to the access or traffic protection workflow. Use and operational context iboss Zero Trust SASE is relevant to teams supporting distributed users and application access when the requirement centers on applying access policy to users, applications or traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? iboss Zero Trust SASE focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Island Enterprise Browser
Island Enterprise Browser from Island focuses on enterprise browser access controls and data protection. It is enterprise browser technology used for administering browser-based work and application access. Capabilities - Enterprise browsing policies: Applies the documented browser controls to supported work sessions and applications. - Browser data protection: Addresses the data-handling controls included in the browser offering. - Identity-aware application access: Connects browser access with the identities or policies covered by the product. - Unmanaged device access: Addresses access from personal or unmanaged devices within the supported deployment model. - Browser activity visibility: Provides records or visibility into the browsing activity covered by the product. Use and operational context Island Enterprise Browser is relevant to organizations governing business browsing and application sessions when the requirement centers on administering browser-based work and application access. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review browser deployment, application compatibility, access policies and the effect of data controls on legitimate workflows. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Island Enterprise Browser focuses on administering browser-based work and application access. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Ivanti Neurons for Zero Trust Access
Ivanti Neurons for Zero Trust Access from Ivanti focuses on identity-aware remote application access. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Zero trust network access: Grants access to the applications or resources defined by policy rather than relying solely on network location. - Device posture checks: Uses the condition of the connecting device as an input to access decisions. - Private application access: Connects authorized users to private applications according to access policy. Use and operational context Ivanti Neurons for Zero Trust Access is relevant to teams supporting distributed users and application access when the requirement centers on applying access policy to users, applications or traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Ivanti Neurons for Zero Trust Access focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Menlo Secure Enterprise Browser
Menlo Secure Enterprise Browser from Menlo Security focuses on browser isolation and enterprise browsing protection. It is enterprise browser security technology used for applying policy to business browsing and application access. Capabilities - Enterprise browsing policies: Applies the documented browser controls to supported work sessions and applications. - Browser data protection: Addresses the data-handling controls included in the browser offering. - Identity-aware application access: Connects browser access with the identities or policies covered by the product. - Browser isolation: Uses the isolation approach documented for protecting browsing activity. - Unmanaged device access: Addresses access from personal or unmanaged devices within the supported deployment model. - Browser activity visibility: Provides records or visibility into the browsing activity covered by the product. Use and operational context Menlo's browser offering addresses the protection and control of enterprise browsing. Review application compatibility and the isolation or data-handling functions included in the proposed service, then assess the experience of users accessing representative business applications. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review application compatibility, browser deployment, data-handling policies and the experience on managed or personal devices. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Menlo Secure Enterprise Browser focuses on applying policy to business browsing and application access. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Netskope One SSE
Netskope One SSE from Netskope focuses on cloud access security and secure web gateway controls. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Zero trust network access: Grants access to the applications or resources defined by policy rather than relying solely on network location. - Secure web gateway: Applies security policy to users' internet-bound traffic. - Cloud access security broker: Provides policy and visibility for the cloud application interactions covered by the product. - Data loss prevention controls: Adds sensitive-data policy enforcement to the access or traffic protection workflow. - Private application access: Connects authorized users to private applications according to access policy. - Remote workforce access: Addresses secure connectivity for users working beyond a traditional office network. - WAN connectivity integration: Combines access security with the networking functions documented for the platform. - User experience monitoring: Helps investigate connectivity and application experience rather than only security alerts. Use and operational context Netskope One SSE is relevant to teams supporting distributed users and application access when the requirement centers on applying access policy to users, applications or traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Netskope One SSE focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Netskope Private Access
Netskope Private Access from Netskope focuses on zero trust access to private applications. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Zero trust network access: Grants access to the applications or resources defined by policy rather than relying solely on network location. - Private application access: Connects authorized users to private applications according to access policy. - Remote workforce access: Addresses secure connectivity for users working beyond a traditional office network. Use and operational context Netskope Private Access is relevant to teams supporting distributed users and application access when the requirement centers on applying access policy to users, applications or traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Netskope Private Access focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
NordLayer
NordLayer from Nord Security focuses on business network access security. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Business network access policy: Applies the access controls described for NordLayer business connectivity. - Encrypted network connectivity: Uses the documented encrypted access approach for supported users and endpoints. - Gateway and network configuration: Provides the supported connectivity and gateway options described by NordLayer. - Zero trust network access: Grants access to the applications or resources defined by policy rather than relying solely on network location. - Secure web gateway: Applies security policy to users' internet-bound traffic. Use and operational context NordLayer is relevant to teams supporting distributed users and application access when the requirement centers on applying access policy to users, applications or traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? NordLayer focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Prisma Access
Prisma Access from Palo Alto Networks focuses on cloud-delivered secure access and zero trust access. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Zero trust network access: Grants access to the applications or resources defined by policy rather than relying solely on network location. - Cloud access security broker: Provides policy and visibility for the cloud application interactions covered by the product. - Data loss prevention controls: Adds sensitive-data policy enforcement to the access or traffic protection workflow. - Private application access: Connects authorized users to private applications according to access policy. - Remote workforce access: Addresses secure connectivity for users working beyond a traditional office network. - WAN connectivity integration: Combines access security with the networking functions documented for the platform. - User experience monitoring: Helps investigate connectivity and application experience rather than only security alerts. Use and operational context Prisma Access is relevant to teams supporting distributed users and application access when the requirement centers on applying access policy to users, applications or traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Prisma Access focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Prisma Browser
Prisma Browser from Palo Alto Networks focuses on enterprise browser controls and application access. It is enterprise browser technology used for applying security controls to browser-based application use. Capabilities - Enterprise browsing policies: Applies the documented browser controls to supported work sessions and applications. - Browser data protection: Addresses the data-handling controls included in the browser offering. - Identity-aware application access: Connects browser access with the identities or policies covered by the product. - Browser isolation: Uses the isolation approach documented for protecting browsing activity. - Unmanaged device access: Addresses access from personal or unmanaged devices within the supported deployment model. - Browser activity visibility: Provides records or visibility into the browsing activity covered by the product. Use and operational context Prisma Browser addresses enterprise application use through a managed browsing environment. Assess the browser's access and data-handling policies against real work sessions, including the identity integration and device conditions relevant to the organization's users. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review application compatibility, identity integration, browser controls and usability on the devices in scope. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Prisma Browser focuses on applying security controls to browser-based application use. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
SonicWall Cloud Secure Edge
SonicWall Cloud Secure Edge from SonicWall focuses on zero trust access and secure internet connectivity. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Zero trust network access: Grants access to the applications or resources defined by policy rather than relying solely on network location. - Secure web gateway: Applies security policy to users' internet-bound traffic. - Cloud access security broker: Provides policy and visibility for the cloud application interactions covered by the product. - Private application access: Connects authorized users to private applications according to access policy. - Remote workforce access: Addresses secure connectivity for users working beyond a traditional office network. Use and operational context SonicWall Cloud Secure Edge is relevant to teams supporting distributed users and application access when the requirement centers on applying access policy to users, applications or traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? SonicWall Cloud Secure Edge focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Tailscale
Tailscale from Tailscale focuses on identity-aware private networking and access control. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - WireGuard-based private networking: Uses the documented WireGuard-based connectivity model for the private network. - Identity-aware network policy: Applies the documented identity or access policy controls to the private network. Use and operational context Tailscale is relevant to teams supporting distributed users and application access when the requirement centers on applying access policy to users, applications or traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Tailscale focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Twingate
Twingate from Twingate focuses on zero trust access to private applications and networks. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Private application access controls: Connects approved users to the private resources covered by the deployment. - Identity-based access decisions: Uses the supported identity context to apply access policy. - Client and connector architecture: Uses the documented client and connector components to establish private resource access. Use and operational context Twingate is relevant to teams supporting distributed users and application access when the requirement centers on applying access policy to users, applications or traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Twingate focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Versa SASE
Versa SASE from Versa Networks focuses on converged network and cloud-delivered security. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Zero trust network access: Grants access to the applications or resources defined by policy rather than relying solely on network location. - Secure web gateway: Applies security policy to users' internet-bound traffic. - Cloud access security broker: Provides policy and visibility for the cloud application interactions covered by the product. - Data loss prevention controls: Adds sensitive-data policy enforcement to the access or traffic protection workflow. - WAN connectivity integration: Combines access security with the networking functions documented for the platform. - User experience monitoring: Helps investigate connectivity and application experience rather than only security alerts. Use and operational context Versa SASE is evaluated around the combination of connectivity and access-security functions included in the deployment. Review the branch and user traffic paths, identity context and policy administration required to support the organization's distributed applications and locations. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Versa SASE focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Versa SSE
Versa SSE from Versa Networks focuses on secure access and cloud-delivered traffic protection. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Zero trust network access: Grants access to the applications or resources defined by policy rather than relying solely on network location. - Secure web gateway: Applies security policy to users' internet-bound traffic. - Cloud access security broker: Provides policy and visibility for the cloud application interactions covered by the product. - Data loss prevention controls: Adds sensitive-data policy enforcement to the access or traffic protection workflow. - WAN connectivity integration: Combines access security with the networking functions documented for the platform. - User experience monitoring: Helps investigate connectivity and application experience rather than only security alerts. Use and operational context Versa SSE addresses the security-service side of access to internet, cloud or private applications. Map the functions in the selected service to the user's traffic path, including authentication, protection policy and the administration required during access troubleshooting. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Versa SSE focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Zscaler Digital Experience
Zscaler Digital Experience from Zscaler focuses on user experience monitoring and connectivity diagnostics. It is digital experience monitoring technology used for investigating user connectivity and application experience. Capabilities - Application experience diagnostics: Uses the documented experience signals to investigate access or connectivity issues. - Zero trust network access: Grants access to the applications or resources defined by policy rather than relying solely on network location. - Data loss prevention controls: Adds sensitive-data policy enforcement to the access or traffic protection workflow. - Private application access: Connects authorized users to private applications according to access policy. - Internet traffic inspection: Inspects the traffic paths supported by the selected deployment and policy configuration. - Remote workforce access: Addresses secure connectivity for users working beyond a traditional office network. - WAN connectivity integration: Combines access security with the networking functions documented for the platform. - User experience monitoring: Helps investigate connectivity and application experience rather than only security alerts. Use and operational context Zscaler Digital Experience is relevant to IT teams troubleshooting access to business applications when the requirement centers on investigating user connectivity and application experience. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review measurement coverage, troubleshooting context, privacy settings and how an observed experience issue is assigned for correction. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Zscaler Digital Experience focuses on investigating user connectivity and application experience. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.