What is zero trust security and how do ZTNA and SASE fit into it?
3 minute read
Jonny Scott
July 3rd, 2025
As organisations navigate hybrid work, cloud-first strategies, and increasingly sophisticated threats, traditional perimeter-based security models are no longer enough. Instead, zero trust has emerged as the new standard.
But what does that mean in practice? Explore how Zero Trust Network Access (ZTNA) and Secure Access Service Edge (SASE) bring zero trust to life.
The foundations: zero trust
Zero trust is a strategic approach built on the principle of “never trust, always verify.” Unlike legacy models that trust users inside the network by default, zero trust treats every access request as potentially hostile. That means continuous identity verification, least-privilege access, and strict access controls for every user, device, and application.
This mindset is essential in a world where data, users, and threats all exist beyond traditional boundaries. Zero trust is implemented through technologies like ZTNA and SASE.
Zero Trust Network Access (ZTNA)
ZTNA is the first practical step in applying zero trust. Rather than providing broad network access via VPNs, ZTNA delivers granular, identity-based access to specific applications, without ever exposing the wider network. Learn more about how Phoenix is helping organisations rethink secure access with ZTNA in a Zero Trust world.
ZTNA operates on an adaptive trust model, assessing user identity, device posture, and context (such as location and time) to determine if access should be granted. This minimises the attack surface and is especially effective for remote or third-party users.
There are typically two approaches to ZTNA:
- Agent-based: requires software on the user’s device, ideal for corporate-managed endpoints
- Agentless: delivered via a browser or secure gateway, ideal for BYOD or unmanaged devices
Enjoying this content? Don’t miss out!
Join now to keep informed on all things IT. Sign up below.
What is SASE?
Where ZTNA solves for secure access, Secure Access Service Edge (SASE) takes things further by integrating networking and security services into a single cloud-delivered solution. Coined by Gartner, SASE combines:
- ZTNA
- Secure Web Gateway (SWG)
- Cloud Access Security Broker (CASB)
- Firewall-as-a-Service (FWaaS)
- Software-defined WAN (SD-WAN)
The benefit? SASE simplifies IT environments and provides end-to-end visibility and control across all access points, no matter where users or resources are located.
To support this shift, Phoenix offers a range of network security solutions designed to protect users, data, and infrastructure across hybrid and cloud environments.
Putting it all together
To recap:
- Zero trust is the mindset: trust nothing, verify everything
- ZTNA is the access control layer: application-specific, identity-driven, and invisible to outsiders
- SASE is the framework: integrates ZTNA alongside other security services via the cloud for holistic protection
Several of our cyber security partners have extensive experience in zero trust strategies, playing a critical role in enabling this journey:
for identity governance and access control
for cloud-native ZTNA and secure access
for data security and recovery
for endpoint detection and response
Together with Phoenix, these technologies create a scalable, secure, and flexible security posture that supports your digital transformation goals without compromising on protection.
Want to explore more about Zero Trust? Check out our other blogs:
Catch up on our free on-demand webinar: Living on the edge: Building a secure future with ZTNA
Discover how ZTNA is reshaping modern security strategies in our expert-led webinar.
About the author
Jonny Scott, Head of Cyber Advisory.
Beginning his career in IT at 17, Jonny first built a strong foundation in Corporate Sales, where he developed a deep understanding of customer needs and the commercial drivers behind technology adoption. Even in these early years, long before cyber security became the priority it is today, Jonny was drawn to the challenge and importance of helping organisations protect their people and data. This ambition guided his move into more strategic roles within business development, building out a security focused strategy for Phoenix.