The company calls its approach BeyondCorp, and it is centered around the idea of access to applications and services being granted based on user and device identity and security posture regardless of their location in respect to the traditional corporate network perimeter.
#Vulnerabilities of beyondcorp series
Google has been an early adopter of zero trust network architecture for its own corporate network, a process that started a decade ago and has been documented over the years in a series of papers and blog posts. Called BeyondCorp Remote Access, the subscription-based service will be part of Google Cloud's portfolio and will cost $6 per user per month, but it will not require customers to already be users of Google's existing cloud-based services or enterprise collaboration tools. “As a result, we’ve invested many years in bringing our customers a solution that is cost-effective and requires minimal disruption to existing deployments and business processes, using trust, reliability and scale as our primary design criteria.Google is launching a commercial zero-trust remote access service that will allow companies to enable their work-from-home employees to access internal web-based applications without the need of virtual private networks (VPNs). “Nonetheless, these enterprises understand the zero trust journey is an imperative,” Potti wrote. A solution that is open and extensible and built on an expanding ecosystem of technology partners in Google’s BeyondCorp Alliance, open at the endpoint to incorporate signals from security partners and extensible to the app too allow integration into services from partners.Ĭustomers can’t “merely flip a switch” to implement zero trust in their own organizations, Potti said, reflecting on the company’s decade-long zero trust journey.Continuous and real-time end-to-end protection that includes embedded data and threat protection in Chrome, phishing-resistant authentication, continuous authorization for every interaction between a user and protected resource, end-to-end security, and automated public trust SSL certificate lifecycle management.A scalable, reliable zero trust platform in a secure and agentless architecture that includes non-disruptive, agentless support through the Chrome Browser, Google’s global network with 144 network edge locations in more than 200 countries and territories, an entire surface protected by Google’s DDoS protection service and built-in, verifiable security.Read Next: Google Says Company Mitigated 2.5 Tbps DDoS Attack, Largest EverĪs defined by cybersecurity giant Crowdstrike, Zero Trust is the IT security concept that all users – even those inside the enterprise network – are required to be authenticated, authorized and continuously validated before being granted or keeping access to applications and data.Īccording to Potti, BeyondCorp Enterprise brings three key benefits to customers and partners: “Living and breathing zero trust for this long, we know that organizations need a solution that will not only improve their security posture, but also deliver a simple experience for users and administrators.”īeyondCorp Enterprise replaces and improves BeyondCorp Remote Access, Google’s subscription-based zero trust service that the company launched in April to help remote employees access internal applications without having to use a VPN. “BeyondCorp Enterprise brings this modern, proven technology to organizations so they can get started on their own zero trust journey,” Potti wrote in the blog. In a blog post, Sunil Potti, vice president and general manager of Google Cloud Security, said the company has for more than a decade been internally using BeyondCorp to protect Google’s applications, data and users.
Google’s cloud security team has announced the general availability of the company’s new zero trust product offering BeyondCorp Enterprise that extends and replaces BeyondCorp Remote Access.Īccording to Google, this release is in response to global cybersecurity incidents that are forcing companies to rethink their security plans as attackers become more sophisticated and skillful.
0 kommentar(er)
