# What is Zero Trust Network Access (ZTNA)?

> Zero trust network access (ZTNA) is an access approach that connects an authenticated and authorized user or device to a specific application or resource instead of granting broad reachability to a network.

- Canonical URL: https://yellowcube.eu/glossary/zero-trust-network-access/
- Publisher: Yellow Cube
- Language: en
- Contact: hello@yellowcube.eu

## Content

The access decision can use identity, device posture, requested resource, risk signals, and policy, and should be reassessed as conditions change.

ZTNA can reduce the implicit trust and lateral movement associated with traditional remote network access. It is best understood as one implementation component within a wider zero trust architecture, where trust is not granted solely because a request originates inside a particular network.

### Key points

- **Primary purpose:** Enforce least-privilege, resource-specific access for remote and internal use cases.
- **Typical components:** Identity provider, policy engine, device assessment, access broker or gateway, application connectors, and telemetry.
- **Design requirement:** Applications, users, service dependencies, and non-human access must be understood before policy can be safely narrowed.
- **Important limitation:** ZTNA does not fix an insecure application, prevent an authorized user from misusing data, or implement zero trust across the whole organization by itself.

### Related terms

[Zero trust architecture (ZTA)](<https://yellowcube.eu/glossary/zero-trust-architecture/>) · [Identity and access management (IAM)](<https://yellowcube.eu/glossary/identity-and-access-management/>) · [Multi-factor authentication (MFA)](<https://yellowcube.eu/glossary/multi-factor-authentication/>) · [Least privilege](<https://yellowcube.eu/glossary/least-privilege/>) · [Network segmentation](<https://yellowcube.eu/glossary/network-segmentation/>)

### Sources

[NIST SP 800-207: Zero Trust Architecture](https://csrc.nist.gov/pubs/sp/800/207/final) · [NIST SP 800-215: Guide to a Secure Enterprise Network Landscape](https://csrc.nist.gov/pubs/sp/800/215/final)

## Attribution and scope

This Markdown representation is generated from the same approved content records as the canonical HTML page. Cite the canonical URL above when referencing this material. Product and service descriptions are informational; confirm project-specific requirements with Yellow Cube.