Staff see only what they are meant to.

Every connection is checked, and access opens only to assigned resources. Traffic stays in Uzbekistan.

Request a demo

UZS 35,900 per user per month, excl. VAT

ztna.uzcloud.uz/policies

Device

Laptop · Nigora Karimova

Windows 11 23H2
Antivirus active
Updates installed
Disk encrypted

1C:Accounting10.0.4.12 AccessHidden
File serverfiles.corp AccessHidden
CRMcrm.corp AccessHidden
Database server10.0.9.3 AccessHidden
Branch network, Samarkand10.20.0.0/16 AccessHidden

The Finance group sees 2 of 5 resources. The rest are hidden from the network.

Illustration with sample data.

What’s inside

Microsegmentation
Rules by user, group, IP, port and protocol.
Device checks
OS version, antivirus and updates are checked before connecting. A non-compliant device does not get onto the network.
No open ports
Resources are hidden from the internet and cannot be scanned from outside.
Branches on one network
Offices connect over the ordinary internet, with no dedicated lines.
Private DNS
Internal addresses work only inside the protected network.
Connection log
Who connected to which resource, when and from which device. With export to SIEM.

Six checks on every connection

WireGuard tunnels run directly between devices, with no central server.

UzCloud ZTNA logExample with sample data

UzCloud ZTNA log
Time	Source	Event	Result
09:02:11	N. Karimova	Sign-in through UzCloud IAM with a second factor	Passed
09:02:13	Laptop	Windows 11, antivirus active, updates installed	Passed
09:02:14	Finance policy	1C:Accounting and the file server allowed	2 resources
09:02:14	Database server, branch network	Not in the group policy, resources hidden	Unavailable
09:15:40	Contractor TechnoSnab LLC	Attempted to open CRM	Denied

Who it is for

Large business

Protected access without a classic VPN for thousands of staff and contractors.
Government bodies

Network traffic and connection data stay in Uzbekistan.
Telecoms

Linked to corporate IAM, with a connection log and export to SIEM.

Interface rows are examples with sample data.

How we implement it

On top of your network

1 server per segment

No hardware replacement. The client goes on one server, and we leave the other servers alone.
Clients for every device

5 platforms

Staff install the client and sign in with their work account.
- Windows
- macOS
- Linux
- iOS
- Android

Price

UzCloud ZTNA

UZS 35,900

per user per month, excl. VAT · all features included

Corporate

On request

Plus a dedicated manager, priority support, architect consultations and an individual contract

Questions

How is ZTNA different from a VPN?

A VPN opens the whole network: whoever connects sees everything. ZTNA checks every connection and opens only the assigned resources. A compromised account does not open the whole network.

Does every server need a client?

No. The client goes on one server in the segment and routes traffic to the other resources in the subnet.

Will things slow down?

Traffic runs directly between devices, not through a central server. In most cases the difference is not noticeable.

What if the management server is unavailable?

Established connections keep working, and users do not lose access. Until it is restored, only new connections cannot be opened.

Other Gate modules

Move from a VPN to targeted access

We will show you the platform and calculate the cost for your infrastructure. A solutions architect will help.

Staff see only what they are meant to.

Microsegmentation

Device checks

No open ports

Branches on one network

Private DNS

Connection log

Large business

Government bodies

Telecoms

Move from a VPN to targeted access