ATARC | Scenario 2

Secure access to cloud resources with SASE and protect endpoints with Endpoint Privilege Management

Scenario

An agency employee and/or contractor, working on from an agency satellite office and using government furnished equipment, is accessing Internet sites. The sites vary between sites supporting job related research and his/her personal bank. Limited personal use is acceptable per agency policy.

Solution

The user would log in to their GFE with their username/password, PIV/CAC card, and YubiKey. Then, they would use CyberArk Identity to gain access to job-related research sites and other agency resources.
Netskope to broker access to personal bank (Wells Fargo) sites but could also block access to restricted sites (Facebook). (lab 30) has Netskope Agent installed and will apply a URL blacklist-blocking policy.