Universal ZTNA General Release Information

Overview

Universal ZTNA integrates network, application, and device access security within a single solution to bolster security organization wide. Establish and maintain a consistent security policy across your network with a single solution to manage and enforce an identity-level zero trust policy for all users. You can also manage user networks, applications, and Internet of Things (IoT) device access independent of the user‘s location.

Universal ZTNA combines and enhances remote and campus access security. Remote access leverages ZTNA continuous authentication, tunneled application sessions with direct to cloud routing. On campus access combines ZTNA and NAC capabilities to control access to the network and applications for headed and headless devices.

Switch Onboarding Options​

Option 1 – Managed​

• Supported NOSs: Switch Engine only​
• Supported Switches: 4120, 4220, 5320, 5420, 5520, 5720, x435
• Minimum NOS version: 33.2.1​
• Summary: Switch configuration is fully managed by ExtremeCloud IQ. The Instant Secure Port workflow is used to provision RADIUS/authentication and Universal ZTNA policy is provisioned via static policy.

Option 2 – Locally Managed​

• Supported NOSs: Fabric Engine and Switch Engine​
• Supported Switches: 5320, 5420, 5520, 5720, 7520, 7720, x435 ​
• Minimum NOS version: Fabric Engine 9.0.2, Switch Engine 33.2.1
• Summary: Switch is onboarded but switch must be manually configured to use RadSec Proxy or native RadSec to the cloud RADIUS server. Universal ZTNA network policy is provisioned by dACLs by RADIUS VSAs.

Note

Extreme Networks provides support for many other Extreme and non-Extreme devices with additional manual configuration.

Firewall Considerations