Identity Aware Proxy — Taking a Meaningful Step Toward Zero Trust
summary
Identity Aware Proxy (IAP) is presented as a way to move toward a Zero Trust security model by replacing or augmenting traditional VPN access. The talk explains how IAP selectively grants application-level access based on user and device identity instead of network perimeter, describing the problem of remote access growth and proposing identity- and policy-based proxying as the approach.
AI-written summary · about
chapters (13)
- 0:00Identity Proxy intro
- 1:08VPN risks and lateral movement
- 3:20Prerequisites for Identity Proxy
- 5:06How Identity Proxy works
- 7:17Advantages over VPN
- 10:10Dynamic access policies
- 13:00Google Front Proxy vs Identity Proxy
- 15:50VPN vs Identity Proxy risks
- 18:22Security audit recommendations
- 19:46Implementation approach
- 22:14Future development directions
- 24:45VPN in Zero Trust
- 25:49Q&A
related talks
19mZero Trust: From Airports to Identity-Aware Proxies
23mZero Trust: From Airports to Identity-Aware Proxies
25mOAuth Gets You In, Zero Trust Keeps You Safe
45mZero Trust: Getting to Step One..and What to Do When You Get There
27mLeveraging Infrastructure as Code to Create Zero Trust Access to Your Apps and Infrastructure
38mIdentity Based Segmentation for a ZTA
25mRisk-based authentication and zero trust architecture ZTA
19mIdentity:The missing link in API security