VPN or Modern Tunnel Architecture

[Andreano Lanusse]

Lots of challenge those days around VPN solution, Workspace ONE Tunnel brings a new approach to increase security and end-user privacy, such as:

• Per application and per domain tunneling specifies the endpoint applications that can generate traffic towards the tunnel, significantly limit the surface of attack in case the endpoint is infected with malware.
• Designed around privacy, end-user knows what traffic is getting tunneling, allowing the separation of personal and corporate traffic.
• IT has the option to allow only Workspace ONE managed, registered and compliant devices to send traffic through the tunnel. Policies can be created to allow non-IT managed devices to access the web only but not internal resources, protecting the corporate infrastructure from vulnerable user-owned devices.
• Workspace ONE Tunnel integrates with the core of the OS platform, enabling split-tunneling to reduce load on the backend only tunneling the required traffic.
• Workspace ONE Tunnel integrates with Mobile Threat Defense to enable Phishing and Content protection on mobile devices, preventing malicious content from being loaded while applying device traffic rules and policies.

Check out the Secure Remote Access to Applications (VPN Replacement) resource page to learn more how to transition from legacy VPN solutions and take the modern Tunnel approach.