Zero Trust Network Access

This section includes information about ZTNA related new features:

• Zero Trust Network Access introduction

• Basic ZTNA configuration

• Establish device identity and trust context with FortiClient EMS

• SSL certificate based authentication

• ZTNA configuration examples

  • ZTNA HTTPS access proxy example

  • ZTNA HTTPS access proxy with basic authentication example

  • ZTNA TCP forwarding access proxy example

  • ZTNA TCP forwarding access proxy without encryption example

  • ZTNA proxy access with SAML authentication example

  • ZTNA IP MAC based access control example

  • ZTNA IPv6 examples

  • ZTNA SSH access proxy example

  • ZTNA access proxy with SAML and MFA using FortiAuthenticator example

  • ZTNA access proxy with SSL VPN web portal example

  • Posture check verification for active ZTNA proxy session examples

  • ZTNA TCP forwarding access proxy with FQDN example

  • ZTNA session-based form authentication

  • ZTNA device certificate verification from EMS for SSL VPN connections

  • ZTNA policy access control of unmanageable and unknown devices with dynamic address local tags NEW

  • Publishing ZTNA services through the ZTNA portal

  • ZTNA inline CASB for SaaS application access control

• Migrating from SSL VPN to ZTNA
• ZTNA scalability support for up to 50 thousand concurrent endpoints
• HTTP2 connection coalescing and concurrent multiplexing for ZTNA NEW

• ZTNA troubleshooting and debugging commands

• ZTNA troubleshooting scenarios