Sophos Central Zero Trust Network Access for Education 1-Year Subscription License

1-Year Subscription License.

Sophos Central Zero Trust Network Access (ZTNA) replaces broad “network access” with secure, per-application access—so users can reach exactly the internal apps they need (from anywhere), while everything else stays hidden and inaccessible to attackers. Instead of putting remote users “on the network” like a traditional VPN, Sophos ZTNA creates identity- and policy-based access to specific applications, reducing lateral movement risk and tightening control without adding complexity for end users.

What’s included (software/components)

• Sophos Central (cloud management console)
  A single place to deploy ZTNA components, define access policies, and monitor activity.
• ZTNA Gateway (connector)
  The component that publishes your internal applications securely.
• Can be deployed as an on-premises gateway (virtual appliance)
• Or a Sophos Cloud gateway deployment option
• In many environments, a Sophos Firewall can also act as the ZTNA gateway, simplifying deployment by eliminating the need for a separate gateway VM
• ZTNA Agent (endpoint client)
  Installed on user devices to enforce ZTNA access policies and provide secure connectivity to published applications.

Key features & benefits

• Application-level access (not network access): Users connect to approved apps, not your whole network—shrinking attack surface dramatically.
• Apps stay “dark” to attackers: Internal applications aren’t exposed publicly, reducing scanning and exploit attempts.
• Consistent access everywhere: Works for remote, hybrid, and on-site users with a seamless end-user experience.
• Centralized policy control: Manage who can access what, under what conditions, from one cloud console.
• Built for modern environments: Supports on-prem and cloud apps, and scales by deploying gateways where you need them.