We recommend starting with the introductory sections to build an understanding of the core concepts of ZTNA before moving on to the sections on prerequisites and design requirements to help plan and implement your architecture. The final section on anti-patterns is particularly important because we see many ZTNA deployments fail, not because of missing technology features, but because legacy trust assumptions are carried forward into new designs.
As with all the NCSC’s zero trust guidance, ZTNA should be considered as part of a wider architectural approach, rather than a standalone solution.
If you have feedback on the guidance, please contact us at [email protected]
