Application access method, device and computing device in zero trust

Abstract

The embodiment of the present invention relates to the field of computer network technology, and discloses an application access method, an application access gateway, and a gateway system in zero trust. The method includes: when a user initiates access, the application access gateway initiates a network penetration proxy Connect to the secure access gateway and establish a network channel; if the terminal agent and the application access gateway are not in the same network segment, receive the access request sent by the terminal agent through the network channel to access the application and send the application feedback request to the terminal agent through the network channel; If they are on the same network segment, the terminal agent is directly connected to the application access gateway through the security access gateway according to the same network segment information, directly receives the access request sent by the terminal agent to access the application, and directly feeds back the application feedback request to the terminal agent. Through the above method, the embodiment of the present invention can perform application deployment under the mixed-match situation of public cloud and private cloud, so as to realize the consistency of experience of users accessing the application inside and outside the network.

Description

Application access method, device and computing device in zero trust technical field Embodiments of the present invention relate to the technical field of computer networks, and in particular to an application access party in zero trust methods, devices and computing equipment. Background technique [0002] In the mobile office environment, a virtual private network (Virtual Private Network, VPN) is usually used. Internet, VPN itself is based on network security, once it is breached, it will lead to insecure applications on the entire network, so the proposed A zero-trust network based on application security, because it runs with the least privilege, even if it is compromised, all applications will not be in the High risk, but the zero trust network architecture of existing vendors is not suitable for complex network environments, such as private cloud and public cloud hybrid The agency has certain limitations. The prior art can utilize the authentication strategy...

AI Technical Summary

Problems solved by technology

This method does not have continuous identity and permission verification, nor a reliable access mechanism, which will bring security risks to the application, does not meet the requirements of zero trust security, and requires the cooperation of other components to be used safely

Images