[Survey] Next-Gen DPI Traffic Visibility for ZTNA

Name

Organization

Email address

Do you offer ZTNA solutions?

Yes, fully (a ZTNA solution with all essential features)

More info

Essential features encompass the following:

Least privilege access
Microsegmentation
Multi-factor authentication
Single sign-on
Encryption from endpoint to the application
Continuous authentication
Adaptive (based on context)
Coverage for all enterprise resources (apps) i.e. on-premises, public Cloud, SaaS
Support for both managed and unmanaged devices
Cyber threat protection
Single DLP policy

Yes, partially

No, but some of our solutions offer ZTNA-like access/control features

No, but we are planning to do so in the future

No, and we have no plans to do so

What deployment model does your ZTNA solution offer?

Cloud

Hybrid (Cloud and on-premises)

On-premises

How rapid is the evolution of your ZTNA solutions?

We have not made any enhancements in the past 3 years

We have a couple of minor enhancements in the past 3 years

We have had major enhancements in the past 3 years

We have had enhancements revamps in the past 3 years

In relation to Secure Service Edge (SSE):

We offer ZTNA and other SSE components

We offer only ZTNA

What do you find as most challenging in establishing identity and context awareness for your clients implementing ZTNA?

Don’t
agree
Somewhat
agree
Quite
agree
Highly
agree

Definition issues for assets/users/resources

Incomplete inventory of assets/users/resources

Loose or conflicting policies (e.g. permissions)

Poor traffic visibility

Partial ZTNA deployment

More info

Covering only certain networks, assets/devices, users and resources (e.g. remote workers only, or Cloud apps only)

No feedback loop from ZTNA

More info

Access/control logs from ZTNA (e.g. DDoS frequency, applications blocked) not used for adaptive context

Please identify real-time traffic visibility required for ZTNA across resources (e.g applications), assets/devices (e.g. laptops) and users (e.g. remote employees)

Not
required
Good
to have
Important
Critical

Resource, device and user identity

Network / hosting / hardware / software data

Access and usage patterns (location, frequency, tenure, users)

Networking resource usage (CPU, bandwidth, storage)

Performance (speeds, jitter, latency, packet loss, RTT)

Security information (anomalies and threats)

What traffic visibility issues often impact the effectiveness of ZTNA?

Don’t
agree
Somewhat
agree
Quite
agree
Highly
agree

Data is collected from various disparate systems and tools

Classification of traffic is not accurate

Data is not granular enough to support granular access policies

Focus on point data rather than continuous data

ZTNA trust broker itself not explicitly monitored for any networking/security issues

Implementing ZTNA without adequate traffic visibility can result in:

No
effect
Slight
effect
Moderate
effect
Severe
effect

Increase in security vulnerabilities

Increase in network abuse

Degradation in application performance and latency

Degradation of user experience

Tool sprawl leading to higher IT costs

Non-optimal use of network resources

Have gaps in traffic visibility impacted enterprise ZTNA adoption?

No, enterprises are using traffic visibility built into the solution by vendor

No, enterprises expect to improve traffic visibility over time

No, enterprises’ access/usage policies are too broad-based and do not require advanced visibility

No, the deployments are only for the sake of compliance/ best practice

Yes, it has led to delays in ZTNA adoption

Yes, it has led to no adoption altogether

Rate the importance of identifying the following traffic parameters, for ZTNA:

Not
important
Somewhat
important
Quite
important
Highly
important

Protocols (e.g. HTTPS, RTP, SMTP, SRT, WebRTC)

Applications (e.g. Microsoft Teams, Netflix, Skype, Salesforce, WhatsApp, SAP)

Application service types (e.g. audio, video, mail, file transfer, chat)

Cyber threats (e.g. malware, ransomware, DDoS, phishing, MiTM)

Irregular / suspicious traffic (e.g. large file downloads, concurrent log-ins)

How important are real-time granular traffic insights for:

Not
important
Somewhat
important
Quite
important
Highly
important

Communication apps such as Teams or Zoom

Business apps such as Salesforce or C4C

Data storage/collaboration apps such as OneNote, Sharepoint, Dropbox

Social media apps such as Facebook, Instagram or TikTok

How important are real-time granular traffic insights in supporting ZTNA automation?

Not
important
Somewhat
important
Quite
important
Highly
important

Encrypted, obfuscated and anonymized traffic can be a challenge for ZTNA due to:

Use of third-party VPNs to access applications, especially in the event of BYOD with reference to mobile devices

Enablement of encryption add-ons through plugins in browsers such as DoH

More info

Malicious parties can inject and read webpage content, leaving browser-based enterprise applications open to threats

High quantity of unknown apps used within various departments

Others

What tools do you use for real-time traffic visibility for ZTNA?

DPI

Others

Which type of DPI do you use for ZTNA?

In-house DPI

Open-source DPI

Commercial third-party DPI

Do you plan to use DPI for your ZTNA solutions?

Yes, in the next year

Yes, within the next 1-3 years

Yes, sometime in the future

No