Hillstone Secure Connect

Unlike traditional VPNs that grant broad access to an entire network, Hillstone Secure Connect is a Zero Trust Network Access (ZTNA) solution. It utilizes a software-defined perimeter to grant access only to specific, authorized applications on a per-session basis. This drastically reduces the attack surface and prevents lateral movement by potential threat actors.

Yes, the solution continuously evaluates the security posture of the connecting device before granting access to corporate resources. It checks for things like OS version, firewall status, and antivirus updates using the Hillstone CloudHive or integrated endpoint agents. If a device is deemed non-compliant, access is automatically denied.

Hillstone Secure Connect easily integrates with major Identity Providers (IdPs) like Microsoft Active Directory, Okta, and LDAP. This integration allows administrators to enforce granular, role-based access control (RBAC) policies. Users authenticate through their standard corporate credentials before being granted application-level access.

The ZTNA functionality is built natively into the Hillstone Networks operating system (StoneOS). It can be deployed on Hillstone's physical next-generation firewalls (NGFW), virtual appliances, or as a cloud-based service. This flexibility allows businesses to deploy secure remote access without entirely replacing their existing network infrastructure.