Cloud-managed secure network access LANCOM Trusted Access is the trusted network access security solution for enterprise networks. It enables secure and scalable access to enterprise applications for employees in the office, at home, or on the road, protecting modern hybrid working from anywhere, anytime. The LANCOM Trusted Access solution adapts to increasing security requirements in your organization and enables both cloud-managed VPN client networking for access to entire networks and the move to a Zero Trust security architecture for comprehensive network security. Based on granular access rights, users are only granted access to applications that have been assigned to them (Zero Trust principle). Existing systems for managing users and user groups (Active Directory) can be fully integrated into the LANCOM Management Cloud (LMC). For smaller networks, the LMC alternatively offers internal user management. LANCOM Trusted Access 100% GDPR compliant and scales for small businesses as well as for very large networks with several thousand users. Granular access control to applications according to the Zero Trust principle With access granted according to the Zero Trust principle as much as necessary, as little as as possible, the LANCOM Trusted Access Client protects networks from threats and their spread. This means: No blind trust based on successful network access. The LANCOM Trusted Access Client allows access controls to be implemented at a very granular level (software-defined perimeter, SDP). This means that users can only access the applications and resources they need to perform their work, and that each access must be explicitly authorized. Network security tailored to your needs Switching from classic VPN clients to a zero-trust model usually means a costly complete rebuild of a networks entire security architecture. However, this is not the case with LANCOM Trusted Access. LANCOM Trusted Access allows a direct transition to a Zero Trust security architecture, because this solution grows with your security requirements. Whether you need cloud-managed VPN client networking for wide-ranging network access or want to take the step to a comprehensive Zero Trust security architecture, LANCOM Trusted Access offers exactly the right configuration levels. Usage as a cloud-managed VPN client The LANCOM Trusted Access Client can optionally also be used as a cloud-managed VPN client, thus enabling the VPN connections of mobile employees to be managed securely and centrally. This means that configuration updates can be carried out easily and efficiently, or new users can be added or removed simply, without the need for an IT administrator or the end device to be physically on site. This convenient management coupled with transparent user monitoring via the LANCOM Management Cloud reduces your operating costs, as all of your companys VPN clients are centrally accessible at a glance. Trusted Internet Access: Mobile working as secure as in the office With LANCOM Trusted Access (LTA), you can manage access rights and network connections for mobile employees securely and centrally via the LANCOM Management Cloud. Mobile users are always allowed normal Internet traffic (Split Tunnel). To additionally secure the entire Internet traffic of connected LTA clients, activate Full Tunnel operation. This means that all data traffic is routed through the central LTA gateway (Unified Firewall or SD-WAN gateway). The advantage: Risks from unauthorized access, malware, phishing and other cyber attacks are minimized and can also be checked for external web/cloud-based applications via activated security functions on the gateway such as anti-virus or content filters. We call this operating mode Trusted Internet Access. Endpoint security and multi-factor authentication Before a user is granted access, endpoint security can be verified (operating system version, anti-virus, local firewall). Each user must also have their identity verified before being granted access to an application or resource. Applications and resources are not made visible network-wide, making the network invisible to attackers. Additionally, two-factor or multi-factor authentication with fingerprint, facial recognition, or an authentication app on the smartphone may be required at login. Integration of existing user databases User authentication is performed via a central user database (identity provider, e.g. an Active Directory such as Microsoft Entra ID (formerly Azure AD)). User groups taken over from the identity provider can be provided with individual access rights to the permitted applications. The validity period of an authentication can be set, and clients can also be blocked manually or automatically. For small companies without a central user database, user management integrated into the LANCOM Management Cloud isZobraziť viacZobraziť menej
