Apply Zero-Trust security principles that allow for micro-segmentation to create zones for securing critical workloads.
Onclave’s TrustedPlatform is a dynamically managed private network that creates Zero-Trust point-to-point communications with L2 over L3 encryption. This effectively eliminates the network attack surface and improves overall breach containment to:
Increase your general infrastructure security Simplify your management Lower your overhead and cost (long & short term)
Why Zero-Trust?
Zero-Trust is a set of guidelines that help create a more secure network architecture and prevent breaches by eliminating any presumption of trust of users, devices, or data regardless of their physical location or access history.
Zero-Trust is dominating network security planning in government and business, because IT-based security solutions, which assume everything behind a firewall is safe, have become unreliable.
Not only have cybersecurity attacks become more sophisticated, but the growth of both remote access users and the integration of Operational Technology (including IoT) with IT networks have also expanded the attack surface beyond the capabilities of IT security solutions to protect.
“Digital transformation and adoption of mobile, cloud and edge deployment models fundamentally change network traffic patterns, rendering existing network and security models obsolete.”
– Gartner, Market Trends: How to Win as WAN Edge and Security Converge Into the Secure Access Edge
IT security solutions, like VPNs and firewalls, trust what is operating inside the network. The challenge is that these systems cannot monitor the thousands of different operating systems driving OT and IoT devices or safeguard the various points of entry.
Once a hacker gains access to any of these networks, they can move freely and access data from other areas of the network and deploy malware and ransomware.
Bringing Trust to Communications
Onclave’s TrustedPlatform® and our Zero-Trust process align with the technologies and techniques recommended in the National Institute of Standards and Technology (NIST)
Zero Trust Architecture (SP 800 – 207)
This includes visibility and controlled communications between remote users, devices, applications, workloads, data centers, and cloud environments.
To achieve Zero-Trust protection, organizations need to deploy network security that enables you to:
Identify all endpoints for assets not recognized by conventional IT security Continuously monitor all network devices and endpoints Detect, isolate, and contain users and data that lack authorization
In a typical, co-mingled network environment, you can see many systems and devices dependent on a single defensive perimeter for the network (see diagram below). This is how many networks are structured, but they are not secure from today’s cyberattacks.
To reduce a network’s attack surface, Onclave Networks uses secured point-to-point communications aggregated into networks with their own root of trust.
