Advanced
ZTNA
Zero-trust application access with claims and optional peer binding.
Goal
Restrict routes to identities that satisfy ZTNA policies.
Steps
- Open Advanced → ZTNA.
- Define applications and policies (claims/groups as supported).
- Bind policies to routes.
- Optionally require client certificate or tunnel peer where configured.
- Publish and test with allowed vs denied identities.
Verify
- Authorized identity reaches upstream.
- Unauthorized identity is denied at the edge.
Note
ZTNA complements gateway authentication; design both together.