Sophos ZTNA v1.1 Now Available

Products•Sophos ZTNA

Gateway support for the Microsoft Hyper-V 2016 platform, plus troubleshooting and scalability enhancements.

Sep 08 2022 By

Sophos Zero Trust Network Access is now available with gateway support for the Microsoft Hyper-V 2016 platform and above. This release also introduces troubleshooting and scalability enhancements with an increase in tunnel capacity from 1,000 to 10,000 clients per node, representing a ten-fold increase.

New to this release:

  • Hyper-V support
  • Troubleshooting via console diagnostics
  • Capacity enhancements
  • SaaS application access with Synchronized Security

Hyper-V 2016+ Support

Hyper-V support expands the ZTNA gateway deployment options considerably by including Microsoft’s very popular hypervisor platform.  Download the new ZTNA gateway image for Hyper-V from the ZTNA Gateways area in Sophos Central.  Click ‘Download gateway VM’ at the top of the screen.

The virtual gateway is also accessible from the ‘Protect Devices’ menu in Sophos Central.

Troubleshooting via Console Diagnostics

One of the most frequently requested enhancements which comes with this release, is support for troubleshooting via console diagnostics on the ZTNA gateway. Users can access the console and run pre-defined diagnostics tests to troubleshoot connectivity or other issues preventing a gateway from being managed via Sophos Central. A brief explanation will be displayed on the console itself. Check out the ZTNA troubleshooting guide for further information.

Node Capacity and Scaling enhancements

Client capacity has been significantly enhanced in this release.  Sophos ZTNA gateways with a single VM node (using 2 cores and 4 GB of RAM) now support up to 10,000 clients, and the maximum cluster of 9 nodes supports up to 90,000 clients. This represents a ten-fold increase over the previous version.

Existing deployments should update their gateway firmware to take advantage of this enhanced capacity.

Zero Trust Access to SaaS Applications

ZTNA takes advantage of the simplicity of SaaS-based IP Access Enforcement and provides a new method for controlling access to SaaS applications.

ZTNA routes SaaS application traffic via the ZTNA gateway and provides several security benefits.

  • Visibility into SaaS access: visibility and reporting from application access to SaaS and private applications.
  • Enforcement: control what users and access methods are allowed to SaaS apps with a Zero Trust approach.
  • Dynamic access with Synchronized Security: automatically isolate and gate access from infected endpoints to stop threats from spreading and impacting data in SaaS applications and private applications.

To take advantage of this feature, your SaaS applications must support IP access controls. Whether your users are working remotely or in the office, ZTNA ensures that only verified users and healthy devices can access your important SaaS applications. While this is not a replacement for a full-featured CASB solution, it does provide additional controls and security enhancements for your SaaS applications and data.

Find out more in the ZTNA User Documentation.

New to Sophos ZTNA?

If you’re new to Sophos ZTNA and want to learn more, head over to Sophos.com/ztna to learn why ZTNA is the ideal remote-access solution to securely connect users to your networked applications.

About the Author

Chris McCormack is a network security specialist at Sophos where he has been focused on firewall and network protection since joining Sophos in 2008. When not evangelizing Sophos network security products, Chris specializes in providing advice and insight into the latest threats and network protection technologies and strategies.