Managed Protect
Secure web gateway, SSE and zero trust access
Your people work from home, the office and the train. Your firewall only protects one of those. We protect their web browsing and app access wherever they are.
- Coverage
- Anywhereoffice, home and on the move
- Access
- Per appnot the whole network
- VPN
- Replacedor phased out alongside it
- Reporting
- Monthlyblocked threats and app use
01 / The problem
The office isn't the perimeter any more.
Remote users skip the firewall
At home, web traffic goes straight to the internet. The filtering in your office never sees it.
VPNs open too much
A traditional VPN puts the user on the network. If that account is stolen, the attacker gets the same reach.
Nobody knows which apps are in use
Staff sign up for file-sharing and AI tools without asking. Company data ends up in places you can't see.
02 / What’s included
Web, apps and access, from one service.
Secure web gateway
Cloud-delivered web filtering with URL categories, malware scanning and inspection of encrypted traffic. It follows the user, not the building.
Zero trust network access
Users reach the specific apps they're allowed, after checking who they are and the state of their device.
VPN replacement
We move users off the old VPN in stages, starting with the apps that matter most.
Cloud app control
A CASB (cloud access security broker) shows which SaaS apps people use and lets us allow, limit or block them.
Data loss prevention
Stops sensitive files being uploaded to personal storage or unapproved apps.
Monthly reporting
Blocked threats, risky apps and access trends, with the changes we recommend.
[Placeholder: offer for this service, written by ITB]
03 / How it works
From VPN to zero trust, in stages.
- Discover We map your users, apps, current VPN and the cloud services people actually use.
- Design We agree access rules by role, and decide which apps move first.
- Roll out A light agent goes on each device. Web filtering starts, then apps move to ZTNA in batches.
- Manage We run policies, handle changes and report monthly. The VPN is switched off when you're ready.
A VPN trusts everyone who gets in. Zero trust checks every time.
How ITB designs remote access
04 / Why ITB
One framework, run by one team.
SSE (security service edge) brings web filtering, cloud app control and zero trust access into one cloud service. We design it, roll it out and run it.
- Staged rollout: We move apps across in batches, so nobody loses access on day one.
- Works with what you have: We connect to your identity provider, such as Entra ID or Okta, and your existing devices.
- Joined to the rest: We also run your firewalls, endpoints and email security, so policies line up.
- Plain reporting: One monthly report covers web threats, app use and access.
· 05 / Questions
SSE and ZTNA, plainly answered.
Q01 What's the difference between SWG, SSE and ZTNA?
A SWG (secure web gateway) filters web traffic. ZTNA (zero trust network access) controls who can reach which internal app. SSE (security service edge) is the framework that delivers both, plus CASB, from the cloud.
Q02 Do we have to get rid of our VPN?
No. Many organisations run both while apps move across. Once everything people need is on ZTNA, the VPN can go.
Q03 How does it work for remote workers?
A light agent on each device sends web traffic through cloud filtering, wherever the user is. App access is checked each time, without a VPN tunnel to the office.
Q04 Is this the same as SASE?
Nearly. SASE (secure access service edge) is SSE plus networking such as SD-WAN. If you need the networking side too, our firewall team can cover it.
Q05 Will it slow down browsing?
Traffic goes through the nearest cloud point of presence, so most users notice no difference. We check performance during rollout.
Related services
Firewall / NDR
Protects the office network and its links to the cloud.
See the serviceEmail & Collaboration
The other main way attacks reach your people.
See the serviceEDR / XDR / MDR
Device health that ZTNA can check before granting access.
See the serviceManaged SIEM / SOC
Watches access and web logs for signs of attack.
See the service· [Placeholder]
[Placeholder] [Placeholder]
[Placeholder: written by ITB]