Nowadays, the „fortress” security model is less and less valid, when almost everything within the company network is allowed, but moving in and out of it is subject to strict permissions. Today, we can come across segmented and even increasingly micro-segmented networks, which may also include (private) cloud infrastructure. In these situations, it is no longer enough to have a classic firewall, even if it is a representative of the “Next-Generation” firewalls. The concept of “perimeter” is also changing: there is no longer only one, because each segment has one on its own, which can communicate with the perimeter of other segments, using the zero-trust principle.

In domestic conditions, although the equipment park and regulations are still lagging behind in this field, the aspiration and the concept have already been outlined. Requirement have arisen for the implementation of the new approach, and there is an intention to generate resources.

Implementing authentication solutions from a wide variety of vendors, it is possible to integrate users and groups efficiently. Thanks to the SSL-proxy function, all communications on an encrypted channel can be analysed, thereby eliminating SSL blind spots, thus providing complete visibility into all data traffic.

The integration of these devices with various technological solutions, such as anti-malware systems, blacklists and whitelists, as well as static and dynamic code analysis providers, data loss prevention systems, and the list goes on and on, is of paramount importance.

Users use several different devices to surf the Internet. All incoming connections can be interpreted, filtered, decrypted as needed, or transmitted to external security devices, regardless of whether the party wishing to communicate is aware that the traffic generated by it is passing through a proxy server.