Zero Trust Access for Defined Internet Destinations

[Venkat Tamilraj]

We are pleased to announce support for accessing specific internet destinations by leveraging client-based Zero Trust Access (ZTA) and Resource Connectors. This solution enables end users to access internet destinations that have ingress controls requiring traffic to originate from the customer's own IP addresses. 

For more details on implementing this solution, please refer to the Zero Trust Access to Internet Destinations documentation. 

End users can benefit from the seamless client-based ZTA access experience from supported desktop and mobile environments. This access method leverages Secure Private Access policy controls and supports all TCP/UDP traffic. Please note that the solution does not support IPS, nor does it apply Secure Internet Access policies. This approach is an alternative to Reserved IP functionality with Cisco-provided IP ranges for internet destinations. 

If you have any questions or need further assistance, please reply to the post or reach out directly to your Cisco partner. 

[ashish.kushwaha]

Is this similar to zscaler client connector concept

[Venkat Tamilraj]

@ashish.kushwaha On the user endpoint, Cisco Secure Client with Zero Trust Access provides secure connectivity to the Secure Access cloud. Resource Connectors on the other hand provides backhaul connectivity from Secure Access cloud to private customer environments.

Hope that helps. You can learn more by reviewing the getting started user guide for client based ZTA. 

[mphettep]

In this feature announcement, it seems we are expanding the use of resource connectors to support outbound access from the customer's private environment to Internet-based resources, to support Source IP controls for SaaS applications that require IP source restrictions, etc.