About Appgate
Appgate sells ZTNA that is designed to operate at the intersection of IT and OT. Appgate says it safeguards enterprises and government agencies worldwide. Appgate describes Zero Trust Network Access, or ZTNA, as replacing implicit trust with continuous verification, with every access request evaluated on identity, device posture and risk. Appgate cloaks sensitive assets, supports IPv4 and IPv6 traffic, and works alongside industrial control systems that route legacy protocols.[1][7][8]
Appgate describes direct-routed ZTNA as a deployment model where traffic from users or devices is routed directly to the protected applications without passing through a centralized cloud proxy. Appgate says its ZTNA does not require a public cloud and can operate entirely on-premises or in hybrid environments. Appgate says its ZTNA can be fully deployed on-premises, including all controllers and gateways. Appgate says its ZTNA does not require a full mesh, and its direct-routed architecture supports hub-and-spoke or hybrid topologies. Appgate says traffic can continue to flow through alternate gateways if one fails.[11]
The core component of Appgate ZTNA is the appliance, and appliances can be virtual or physical. The Appgate ZTNA Controller acts as the policy engine and policy decision point. The Appgate ZTNA Gateway acts as the policy enforcement point and controls the flow of access to protected resources. Appgate says all appliances are delivered as a virtual machine at no cost and are alternatively available as a physical device for an additional charge. Appgate uses single packet authorization to make internet-facing resources invisible to unauthorized users. Appgate ZTNA uses mTLS FIPS 140-3 compliant encryption on every connection to an authorized gateway.[10]
Appgate says its ZTNA can be cloud-hosted, self-hosted or isolated. In the cloud-hosted model, the controller is hosted in the Zero Trust platform cloud environment, while other appliances remain hosted in the customer's controlled environment. In the self-hosted model, all Appgate ZTNA appliances are deployed in the customer's controlled environment and connected to the Zero Trust platform for value-add services.[10]
Appgate says ZTNA for OT extends identity-centric Zero Trust into operational technology environments and controls who and what can reach critical systems. ZTNA for OT secures access for the employees, vendors and OEMs who keep critical systems running. For sessions that need deeper oversight, Appgate brokers the connection instead of only authorizing it at the front end. Vaulted credentials are injected into the session, so users reach approved systems without seeing, holding or sharing the credentials. Governed sessions are recorded from start to finish, and a supervisor can end an in-flight session and capture a reason for the action. Appgate says ZTNA for OT can be deployed on premises.[11]
Appgate customers install a Linux Headless Client on servers, VMs or Kubernetes nodes running AI agents. Appgate offers a Kubernetes injector that automatically provisions ZTNA enforcement at the pod level.[12]
Appgate says its professional services team supports onboarding for AppGate ZTNA customers. Core deployment includes support for initial installation, access configuration and user acceptance testing for AppGate ZTNA production rollout. Stand-alone or add-on services can be procured, and custom services can replace or enhance standard implementation. Appgate's Adversary Simulation and Penetration Testing Service simulates sophisticated, real-world attacks under controlled conditions. Appgate says its testing combines automated tools (20%) with manual testing (80%), and that its team has a 20+ year history and thousands of tests conducted. Appgate says the service can test a security environment to verify compliance with regulatory standards like PCI-DSS, HIPAA, or GDPR.[13][14]
Appgate describes VPN replacement as secure access for users to business-critical applications and services, anywhere, without exposing the network. Appgate says AppGate ZTNA can operate alongside existing VPN infrastructure during migration. Appgate says ZTNA replaces broad VPN tunnels with time-bound, least-privilege entitlements enforced through its controller-based policy engine. Appgate offers a Zero Trust solution built to secure complex healthcare networks, safeguard legacy devices, and support uninterrupted, compliant care. Appgate says its ZTNA secures access to complex financial ecosystems, including customer data, trading platforms and payment networks. Appgate says its energy offering enforces least-privilege access policies across smart grids and decentralized networks to simplify adherence to NERC CIP. Appgate says its healthcare offering enforces least-privilege access policies across hospitals, imaging systems, and telehealth networks to simplify adherence to HIPAA and HITECH. Appgate says its financial services offering enforces least-privilege policies across hybrid environments to simplify adherence to PCI DSS, FFIEC, GLBA and GDPR.[1][8][12][14][15][16][17]
Appgate on the record