Demo library › Walkthroughs

Replace the VPN

For teams running a VPN they want to retire.

~27 minutes · needs the lab

Before you start

• Lab only. Setup done, and the client able to switch between Alice and Rickie - see Switching who you are.

Chapters

1. Single sign-on and per-application access Single sign-on, groups imported from the identity provider, and access to each application decided by Zero Trust policy. · ~4 min · Lab and laptop
2. Replace the VPN for an internal app An internal app on a server with no open ports, reached by name through the Cloudflare One client. With the client off, the address does not answer. · ~8 min · Lab only
3. Admin access to servers without standing credentials SSH with a short-lived certificate and no key on the laptop, every command recorded, the database console behind the same group, and Postgres closed to everyone else. · ~10 min · Lab only
4. Only healthy devices reach sensitive apps pgAdmin requires a device with its firewall on. Turn it off and access ends. Backlog's response time is measured from every device. · ~5 min · Lab only