#1 most frequent
United States of America
60.1%188 installations of 313
What is Cloudflare Zero Trust Services?
Cloudflare's Zero Trust Network Access (ZTNA) technologies create secure boundaries around applications. When resources are protected with ZTNA, users are only allowed to access resources after verifying the identity, context, and policy adherence of each specific request. Cloudflare's Zero-Trust-as-a-Service model enables users to deploy access controls on the company's instant-on cloud platform, backed by Cloudflare's global network.
Categories & Use Cases
Videos
Top Performing Features
Multi-Factor Authentication
Using multiple, independent components to gain access
Category average: 8.2
Endpoint Detection and Response (EDR)
Continuous monitoring and response to advanced internet threats by endpoint agents.
Category average: 9.4
Network Analytics
Analyzes various data reports and logs (DNS, firewall, user data, security information etc.) to identify threats in a network.
Category average: 8.7
Areas for Improvement
Admin Access Control
Administrator-defined access control privileges that are assigned based on a user's need to access certain applications or areas of the network.
Category average: 8.8
Network Data Encryption
Encrypting data so that only the network users with the proper privileges may see and access the data.
Category average: 9.6
Network Topology Mapping
The ability to map a network, in detail, to show performance metrics, device and software connections, and resource utilization.
Category average: 8.4
Who Buys & Uses Cloudflare Zero Trust Services
#2 most frequent
Canada
6.4%20 installations of 313
#3 most frequent
United Kingdom of Great Britain and Northern Ireland
6.4%20 installations of 313
Very slick
Use Cases and Deployment Scope
Transitioning away from P2S VPN and moving over to Cloudflare Zero trust allowed us to jump massively towards a highly available service. Setting up multiple tunnels and routes in depending on device status and user properties allowed a secure and highly redundant service without spending a fortune on firewalls.
Since deploying our design we have yet to see a single outage for remote workers.
Pros
- Redundant tunnel endpoints
- Zero trust access management
Cons
- Static IP addresses are behind a subscription tier. Being able to pay for specific features would be useful when you don’t be the full stack on offer.
- Alerts for tunnels going down could be more granular. While you can subscribe to tunnel down events, there isn’t an obvious difference between 1/5 is down vs 9/10 out of action. Where the latter would be substantially more of a pressing issue you have to login to check which is the case.
Return on Investment
- 100% of our services run through zero trust, not even a printer can be accessed without the user being verified and the workstation in good standing via Defender. This means our WiFi is just a ‘guest’ internet access setup and is of no security risk to us.
Usability
Great Security with Amazing Network Performance.
Use Cases and Deployment Scope
We use Cloudflare's Zero Trust service as an alternative to Business VPN services. We wanted to get secure tunneling to connect to our servers without compromising on security and network performance. Cloudflare's Zero Trust is very easy to set up and get started with. It provides secure VPN-like services to secure any device with its 1.1.1.1 apps, and It also provides Warp protocol along with zero trust, so we get great network performance as well. Overall, it fulfills our basic requirements.
Pros
- Great Security with Zero Trust Concept.
- Provides Warp Protocol for faster performance.
- Provides capability to monitor the traffic.
- Is very easy and quick to set up.
Cons
- Cloudflare picks the nearest device location to route the traffic, but It would be great if we could select any particular location.
- Cloudflare enables monitoring for all the connected clients; it would be great if we could monitor any individual client device while keeping some client devices private.
- Sometimes, its DNS is not able to resolve a few project websites; we have to manually purge the cache and even disable the Security to get the work done. So, it would be better if we could manually provide a DNS list or whitelist some websites.
Return on Investment
- The cost of Cloudflare Zero trust is much lower, hence reducing spending on infrastructure security.
- The Network performance is improved thanks to Warp protocol.
- Requires less maintenance and hence saves time.
Usability
Cloudflare provides best ZTNA solution on the market
Use Cases and Deployment Scope
We use Cloudflare Services (WAF) for protecting University's site and inner restrictions in students' labs. Cloudflare gives us an option to make granular restriction rules with Magic Firewall.
Pros
- Granular Restrictions
- Bot Management
- DNS protection
Cons
- Cloudflare still need to improve CASB direction to complete set of SASE tools.
- More integrations with the third-party agents to check device posture in the Zero Trust framework.
- More granularity in firewall rules for full replacement of on-premise solutions.
Return on Investment
- Cloudflare as a multipurpose vendor and solution helped us to replace many overlapped imperfect solutions.
- Cloudflare gives the company administrator a single pane of glass view which makes his work more effective.
- Cloudflare makes cloud transformation easier and more effective.
Alternatives Considered
F5 Distributed Cloud WAF and FortiClient
Other Software Used
Bitdefender GravityZone, Tenable.io, Proofpoint Insider Threat Management (ObserveIT), Proofpoint Email Fraud Defense, AttackIQ Security Optimization Platform
Efficient and easy to use secure web gateway
Use Cases and Deployment Scope
In most scenarios Cloudflare Gateway is used with Cloudflare Access, actually, Gateway is a proxy that filters end-user requests to web resources. It keeps an organization's data safe from malware, ransomware, phishing, command & control, and shadow IT.
Pros
- Block access to known bad, risky, or unwanted destinations at the DNS or HTTP level.
- Excellent protection for remote users.
- Best in class browser isolation techniques.
Cons
- Good to see content re-categorization with different list for organizations.
- URL and headers rewrite.
- Events forwarding to on-premise SIEM.
Most Important Features
- Disabling download/upload, printing or keyboard input.
- Blocking suspicions web resources.
- Comprehensive applications list for policy usage.
Return on Investment
- Complete solution in case of using with Cloudflare Access.
- No need of maintenance.
- No skilled staff and trainings required.
Alternatives Considered
McAfee Web Gateway and Forcepoint Trusted Gateway System
Other Software Used
McAfee Web Gateway, Bitdefender GravityZone, Fortinet FortiGate
Good product with great features
Use Cases and Deployment Scope
Cloudflare is used for providing internal application access through Cloudflare tunnel and using Google IDP from WARP installed system. It was a replacement for VPN. Also used Cloudflare for DNS management to maintain domain records. Cloudflare provides cloud-based WAF to protect the internet-facing applications from external web-based threats. Deployment is very quick and gets good support.
Pros
- Fastest DNS response
- Managed WAF firewall rules
- Analytics and detailed information
- SSL certificate
Cons
- Schedule report
- Email notifications for required rules
- Filters save for admins
Return on Investment
- Makes application faster
- Complete security with ZTNA
- replacement of on premise WAF