Replace your VPN
Learning path
Give users secure, auditable network and application access.
Modules: 7 Reading time: 65 min
Concepts
Concepts explain the basic ideas behind how Cloudflare Zero Trust works.
Get started with Zero Trust
Start replacing your legacy VPN with Cloudflare’s ZTNA solution.
Connect your private network
This module covers how to connect your private network services and applications to Cloudflare. In many ways, this connection will replace the concept of a traditional VPN concentrator or headend device.
Configure the device agent
The following steps are identical to Configure the device agent in the Secure your Internet traffic and SaaS apps implementation guide. If you have already completed Secure your Internet traffic and SaaS apps, you can skip ahead to Connect user …
Connect user devices
Now that your device enrollment policies and WARP profiles are configured, you can begin deploying the WARP client to user devices for testing.
Build secure access policies
With Cloudflare Zero Trust, you can apply granular security policies to all traffic proxied from the user device to your private network. Policies can key off of domain name, user identity, device posture, SNI, IP address, port, protocol, and other …
Troubleshooting
Learn how to troubleshoot your ZTNA deployment.