Manage Connections to Private Destinations

Secure Access supports several types of connections to private resources:

• Zero Trust Access (ZTA) —Sometimes called Zero Trust Network Access (ZTNA)
  • Client-based
  • Browser-based or clientless
• VPN—Remote Access Virtual Private Network

For details, see:

• Comparison of Zero Trust Access and VPN and
• Comparison of Client-Based and Browser-Based Zero Trust Connections.

You will enable connection options for each private resource when you configure the resource. You can enable any or all of these options for each private resource.

If you enable both zero-trust and VPN connections for a resource, users will connect to the resource using zero trust.

Special case: Using Private resources for SaaS internet destinations

You can configure a private resource to ensure specific egress IP addresses for traffic to specific SaaS internet destinations outside your network, such as YourCompany.OtherCompany.com. For details, see Zero Trust Access to Internet Destinations.

Add a Private Resource Group < Manage Connections to Private Destinations > Comparison of Zero Trust Access and VPN