Zero Trust Control Center
The Zero Trust Control Center is the control and management plane of the entire zero trust solution. The iOA SaaS edition of the Zero Trust Control Center is deployed on Tencent Cloud servers. Administrators can remotely manage and view it through a browser. User authentication and security policy configuration and delivery can be implemented through the Zero Trust Control Center, which mainly includes multiple security modules such as user management, access configuration management, terminal management, software management, and terminal antivirus EPP.
Zero Trust Security Gateway
The Zero Trust Security Gateway is the data forwarding plane of the zero trust solution. The iOA SaaS edition of the Zero Trust Security Gateway is deployed on Tencent Cloud servers. It is responsible for executing authorization policies delivered by the Zero Trust Control Center, proxying and forwarding legitimate access requests from clients, and blocking illegitimate access requests. Through the proxying and forwarding business logic, the gateway protects enterprise core resources and data, ensuring that unauthenticated users cannot access protected business resources.
The Zero Trust Security Gateway supports multiple common access protocol proxies: Layer 3 IP proxy, Layer 4 TCP proxy, and Layer 7 Web proxy. Based on Tencent's self-developed high-performance transmission protocol, it can be applied to various types of application proxy access, such as common OA, Mail, ERP, and H5 applications, providing users with a stable encrypted access channel.
Zero Trust Client
The Tencent iOA client supports deployment on PC and mobile terminals. In zero trust solutions, we typically recommend that users install the zero trust client for security and stable business release considerations. However, Tencent iOA also supports clientless access, helping users achieve secure business access in scenarios where the client cannot be installed.
The Tencent iOA client supports real-time monitoring of the terminal security environment, promptly reports terminal information to the Zero Trust Control Center based on enterprise-defined policies, and executes security policies delivered by the Control Center. Only after users pass Control Center authentication can secure business access be achieved.
Tencent iOA also has powerful scalability. Based on a single client, Tencent iOA can provide multiple security capabilities such as terminal security management, terminal antivirus EPP, EDR, and terminal data loss prevention DLP. It builds a closed-loop security protection system on the terminal side, helping customers address various terminal security issues in office scenarios and integrating security into business.
Connector
To enable customers to access local services through the security gateway on Tencent Cloud, a connector must be deployed on the service side during Tencent iOA delivery and reversely connected to the iOA Zero Trust Security Gateway deployed on Tencent Cloud, preventing business systems from being directly exposed to the internet. The connector is typically deployed in the DMZ zone to establish connectivity between business resources and the Tencent Cloud gateway, ensuring that users can securely access business resources through the client/browser.