Prisma Access ZTNA 2.0: Zero Trust Access Beyond the VPN

Prisma Access ZTNA is a cloud-delivered Zero Trust Network Access solution through which users, wherever they are, reach private and cloud applications based on identity, device posture and continuous risk assessment. A traditional VPN places an authenticated user onto part of the network; a compromised account or device can use that broad access as a path for an attack to spread. ZTNA connects the user only to the applications they are authorised for.

From ZTNA 1.0 to ZTNA 2.0

According to Palo Alto, first-generation ZTNA solutions still control access at the IP address and port level and stop watching the session once access has been granted ("allow and ignore"). ZTNA 2.0 targets both gaps: access is defined with App-ID at the application and sub-application level (for example, download only or upload only), and trust is re-evaluated throughout the session by monitoring device posture, user behaviour and application behaviour.

The Five Principles of ZTNA 2.0

Least Privilege Access: Users reach only the application and function they need to do their job.

Continuous Trust Verification: Device and behaviour changes are monitored after access is granted; if risk rises, access is narrowed immediately.

Continuous Security Inspection: Allowed traffic is also inspected for threats; most breaches happen within allowed activity.

Protects All Data: A single data loss prevention (DLP) policy applies across private applications and SaaS.

Secures All Apps: Cloud-native, dynamic-port and server-initiated applications are covered too.

Delivered with Prisma Access

ZTNA 2.0 is delivered through Prisma Access, Palo Alto's cloud-delivered security platform. The ZTNA Connector automatically discovers private applications in the data centre or cloud and connects them to the platform, reducing the need for manual tunnel and connection management. SaaS Security, Enterprise DLP and Autonomous Digital Experience Management (ADEM), which monitors the user experience end to end, can be added as options.

Benefits for Organisations

Remote workers, contractors and branches share a single access model, reducing reliance on separately managed VPN concentrators. Application-level access shrinks a compromised account's room for lateral movement. With central policy, onboarding a new application or user takes minutes rather than days, and the Zero Trust strategy becomes measurable.

To map the path from your VPN infrastructure to ZTNA 2.0 and try Prisma Access with your own users, get in touch with ATEON's specialists.