Zero-Trust Network Access by User, Device and Group
Zero-Trust Network Access in ControlIT Secure Access & AD Anywhere and ControlIT 24x7 ITOps: every connection decided by user, device and group, nothing published to the internet. SaaS or on-prem.
One private network, over the internet
What this actually does
Access follows the request, not the subnet: who is asking, from what device, under which group policy. A headline capability of ControlIT Secure Access & AD Anywhere, and included in ControlIT 24x7 ITOps.
Decided Per Connection
every connection is decided by user, device and group, rather than by which network it landed on.
Nothing Published
nothing is published to the internet, and there is no implicit trust for being on the network.
One Private Network
it sits beside the private network over the internet, remote access to internal systems such as file servers, ERP, RDP, SSH and intranet apps, and your Active Directory over the same network.
SaaS or On-Prem
hosted by Computer Port, or on infrastructure you nominate.
What changes as a result
- Narrower access than a VPN that lands a user on a whole subnet
- Nothing published to the internet
- One decision per connection instead of a rule per site or per firewall
Three ways to find out if it fits.
AD Readiness Review
Forty-five minutes on your directory and remote access, and a one-page verdict you can circulate.
Book the reviewThe 14-Day Pilot
Five criteria agreed in writing first, then tested on real endpoints. If it fails, you walk.
Plan a pilotTalk to Us
Tell us about your sites, endpoints and directory. We will tell you what the overlay changes.
Talk to us
Design zero-trust access for your estate
Bring us your directory, your remote access and your sites. We will map what the overlay changes before anyone signs anything.