3.4Establish network components

1. Enterprise assets have basic network connectivity.

2. The enterprise must be able to distinguish between what assets are owned or managed by the enterprise and the devices' current security posture.

3. The enterprise can observe all network traffic.

4. Enterprise resources should not be reachable without accessing a PEP.

5. The data plane and control plane are logically separate.

6. Enterprise assets can reach the PEP component.

7. The PEP is the only component that accesses the policy administrator as part of a business flow.

8. Remote enterprise assets should be able to access enterprise resources without needing to traverse enterprise network infrastructure first.

9. The infrastructure used to support the ZTA access decision process should be made scalable to account for changes in process load.

10. Enterprise assets may not be able to reach certain PEPs due to policy or observable factors.