{"id":41823,"date":"2024-11-09T09:26:34","date_gmt":"2024-11-09T14:26:34","guid":{"rendered":"https:\/\/netfoundry.io\/?post_type=resources&p=41823"},"modified":"2026-01-29T12:17:10","modified_gmt":"2026-01-29T17:17:10","slug":"netfoundry-cloud-simplifying-zero-trust-networking-deployments","status":"publish","type":"resources","link":"https:\/\/netfoundry.io\/resources\/netfoundry-cloud-simplifying-zero-trust-networking-deployments\/","title":{"rendered":"NetFoundry Cloud: Simplifying Zero Trust Networking Deployments"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t
\n\t\t
NetFoundry<\/a><\/div>\n\t\t<\/div>\n\t\t<\/div>\n\t\t<\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

NetFoundry Cloud: Simplifying Zero Trust Networking Deployments<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
Technical Brief<\/a><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"NetFoundry\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

NetFoundry Cloud is a comprehensive, enterprise-grade Network-as-a-Service (NaaS) solution designed for seamless deployment, configuration, and management of zero trust overlay networks powered by the NetFoundry Ziti platform and architecture. Widely adopted by the open source OpenZiti community, <\/span>NetFoundry Cloud<\/span><\/a> supports development, prototyping, and production deployment of OpenZiti solutions, even in highly secure and mission-critical environments.<\/span><\/p>

Harnessing the global innovation of <\/span>OpenZiti<\/span><\/a>, NetFoundry Cloud provides a robust NaaS designed for IT and OT applications with stringent security demands. As a fully managed service, NetFoundry handles all hosting, updates, maintenance, and security, allowing organizations to deploy secure, high-performance overlay networks instantly across the programmable NetFoundry Fabric\u2014without the need for additional infrastructure or hardware.<\/span><\/p>

This resilient, scalable service significantly reduces the cost, time, and complexity of implementing zero trust internet overlays, enabling businesses to focus on their core objectives while benefiting from enhanced security, streamlined scalability, optimized performance, and complete network visibility.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Instant Secure Networks<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Unlock secure, high-performance connectivity with NetFoundry Cloud, the enterprise-grade NaaS solution that deploys zero trust overlay networks effortlessly.<\/em><\/p><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

NetFoundry vs DIY<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Forget the complexities of DIY: NetFoundry Cloud simplifies deployment, management, and compliance with zero trust principles and global reach, while cutting costs and reducing risk.<\/em><\/p><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

NetFoundry Cloud Advantages<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

NetFoundry Cloud drastically simplifies secure networking compared to traditional private self-managed networks. Companies must carefully consider the challenges of building and operating their own infrastructure and networks given the complexity of today\u2019s hyper-connected world and constant exposure to security risks. Here are some advantages of using NetFoundry Cloud over traditional DIY (Do It Yourself) in-house approaches:<\/p>

Ease of Deployment<\/h3>

DIY: Requires significant time and expertise to manually configure and deploy network components across multiple cloud environments.<\/p>

Multi-Tenant and OEM\/White label<\/h3>

NetFoundry Cloud: The NetFoundry platform is designed to be EOMed and embedded in physical and software products. It is geared toward MSPs, software companies and smart connected product manufacturers who want to build zero trust connectivity into their products and services to deliver to clients. This includes providing a multi-tenant platform with a multi-account structure and RBAC, per customer PKI with the ability to integrate individual customer identity and 3rd party tools seamlessly, extensive logging and auditing, centralized consumption, reporting and billing, high automation and APIs, as well as the ability to white label and brand the product with flexible pricing to fit your commercial Go-To-Market strategy.<\/p>

DIY: Requires custom solutions for multi-tenancy, RBAC, PKI\/integrations, logging, billing, APIs, and white labeling.<\/p>

Cost Efficiency<\/h3>

NetFoundry Cloud: Reduces costs with a managed service model, eliminating the need for extensive in-house resources and ongoing maintenance. NetFoundry provisions, configures, manages, and upgrades the infrastructure, including OS, Ziti software installations, and NetFoundry-hosted controllers and routers.<\/p>

DIY: High initial setup costs and ongoing expenses for infrastructure, maintenance, and skilled personnel.<\/p>

Scalability<\/h3>

NetFoundry Cloud: Seamlessly scales with automatic resource adjustments based on demand, ensuring optimal performance and cost-efficiency. It supports over 150 million fabric sessions weekly.<\/p>

DIY: Manual scaling is complex and resource-intensive, requiring careful planning and execution.<\/p>

High Availability<\/h3>

NetFoundry Cloud: Built-in redundancy, load balancing, and multi-region replication ensure high availability and reliability, with daily backups and disaster recovery (DR) across sites for high SLAs.<\/p>

DIY: Ensuring high availability requires significant expertise and resources to implement and maintain redundancy and failover mechanisms.<\/p>

Security<\/h3>

NetFoundry Cloud: Comprehensive security services including IAM, encryption, DDoS protection, and zero trust principles are built-in and managed. Production and development systems run in ‘dark networks’ with no inbound ports, with administrative access ephemeral based on JIT\/JEA policy.<\/p>

DIY: Implementing and maintaining robust security measures requires extensive knowledge and continuous effort.<\/p>

Global Reach<\/h3>

NetFoundry Cloud: Utilizes a global network of data centers for low-latency routing and edge computing, enhancing performance and user experience. Controllers and edge routers can be deployed in several cloud providers\u2019 data centers or self-hosted. Networks can also be geographically constrained and deployed locally for sovereignty.<\/p>

DIY: Establishing a global presence requires significant investment in infrastructure and expertise in managing distributed networks.<\/p>

Simplified Management, Visibility, and Analytics<\/h3>

NetFoundry Cloud: Centralized management of multi-tenant zero trust networks via a web console and APIs, with built-in telemetry, monitoring, patching, upgrades, and detailed dashboards for connection health checks, network flows, path latency, and more. Each network is dedicated to the customer and isolated from other customer networks.<\/p>

DIY: Requires custom solutions for management, monitoring, and maintaining visibility across the network.<\/p>

Expert Support and Proactive Monitoring<\/h3>

NetFoundry Cloud: Access to NetFoundry’s team of experts ensures your network runs smoothly and efficiently. NetFoundry provides 24\/7 support, including technical engineering and pre-sales assistance, along with built systems and tooling to monitor networks and act on alerts.<\/p>

DIY: Requires in-house expertise to troubleshoot and resolve issues, adding to operational complexity.<\/p>

Self-Healing Network<\/h3>

NetFoundry Cloud: Configures the network to properly utilize OpenZiti self-healing capabilities, providing the least latency paths within the fabric for your traffic based on \u201csmart routing\u201d.<\/p>

DIY: Setting up and operating a self-healing network properly requires advanced knowledge, expertise, and experience.<\/p>

Accelerated Software Updates<\/h3>

NetFoundry Cloud: Customers can request and receive priority paths for feature requests, sometimes delivered within days, providing rapid software fixes and enhancements. This access to NetFoundry’s product and engineering teams accelerates development and ensures critical capabilities are available when needed.<\/p>

DIY: Requires internal development resources to create and implement new features, which can be time-consuming and costly.<\/p>

Compliance and Integration<\/h3>

NetFoundry Cloud: SOC2 Type 2 certified, with a legal framework and SLAs in place. Offers pre-built integrations with leading IdP\/CAs, IAM, directories, SIEM\/SOC\/SOAR, EDR, SSO, and more, simplifying compliance and integration.<\/p>

DIY: Achieving and maintaining compliance and integrating with various enterprise systems requires significant effort and expertise.<\/p>

Liability Protection<\/h3>

NetFoundry Cloud: The Cyber Resilience Act (CRA) and the Product Liability Directive (PLD) are two cornerstone regulations designed to address security, safety, and accountability. NetFoundry\u2019s zero-trust platform helps companies meet these by embedding secure, scalable networking into digital products, reducing vulnerabilities and ensuring compliance.<\/p>

DIY: Without zero trust designed in, companies must bolt on software to comply. This leads to complex security management, higher operational costs, and increased risks.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

NetFoundry Cloud Feature Summary\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\n\t\t\t\t
Aspect<\/div><\/div><\/div><\/th>
NetFoundry Cloud<\/div><\/div><\/div><\/th>
Unique Capabilities<\/div><\/div><\/div><\/th><\/tr><\/thead>\n\t\t\t\t\t\t\t\t
Ease of Deployment<\/strong><\/div><\/div><\/div><\/td>
Quick with orchestration tools.<\/div><\/div><\/div><\/td>
NetFoundry Console & Orchestration Platform<\/div><\/div><\/div><\/td><\/tr>
Cost Efficiency<\/strong><\/div><\/div><\/div><\/td>
Lower costs, managed service.<\/div><\/div><\/div><\/td>
Rapid provisioning, volume purchase power of public cloud computing power, economies of scale<\/div><\/div><\/div><\/td><\/tr>
Scalability<\/strong><\/div><\/div><\/div><\/td>
Automatic scaling.<\/div><\/div><\/div><\/td>
Proven, tuned, optimized NetFoundry Fabric<\/div><\/div><\/div><\/td><\/tr>
High Availability<\/strong><\/div><\/div><\/div><\/td>
Built-in redundancy and DR.<\/div><\/div><\/div><\/td>
Over 140 POPs available\n\n<\/div><\/div><\/div><\/td><\/tr>
Security<\/strong><\/div><\/div><\/div><\/td>
Comprehensive, managed security.<\/div><\/div><\/div><\/td>
Configured with no open inbound ports; Services including IAM, encryption, DDoS protection\n\n<\/div><\/div><\/div><\/td><\/tr>
Global Reach<\/strong><\/div><\/div><\/div><\/td>
Global data centers, low-latency.<\/div><\/div><\/div><\/td>
Over 140 POPs available<\/div><\/div><\/div><\/td><\/tr>
Management and Analytics<\/strong><\/div><\/div><\/div><\/td>
Centralized with built-in tools.<\/div><\/div><\/div><\/td>
NetFoundry Console & Telemetry; automated monitoring and alerts<\/div><\/div><\/div><\/td><\/tr>
Support and Monitoring<\/strong><\/div><\/div><\/div><\/td>
24\/7 expert support.<\/div><\/div><\/div><\/td>
Experienced team<\/div><\/div><\/div><\/td><\/tr>
Self-Healing Network<\/strong><\/div><\/div><\/div><\/td>
Utilizes self-healing capabilities.<\/div><\/div><\/div><\/td>
Optimized set up of Ziti self-healing features<\/div><\/div><\/div><\/td><\/tr>
Software Updates<\/strong><\/div><\/div><\/div><\/td>
Rapid updates and fixes.<\/div><\/div><\/div><\/td>
Automated processes<\/div><\/div><\/div><\/td><\/tr>
Compliance and Integration<\/strong><\/div><\/div><\/div><\/td>
SOC2 certified, pre-built integrations.<\/div><\/div><\/div><\/td>
Hardened and compliant environments<\/div><\/div><\/div><\/td><\/tr>
Liability Protection<\/strong><\/div><\/div><\/div><\/td>
Secure by design, ideal for CRA and PLD compliance.<\/div><\/div><\/div><\/td>
Zero Trust connectivity that can be embedded and designed into products.<\/div><\/div><\/div><\/td><\/tr><\/tbody>\n\t\t\t<\/table>\n\t\t<\/div>\n\n\t\t<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Navigating EU Regulations<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The EU has introduced the <\/span>Cyber Resilience Act <\/b><\/a>(CRA)<\/b> and <\/span>Product Liability Directive<\/b><\/a> (PLD)<\/b> to ensure digital product security, accountability, and safety. These regulations highlight secure product standards and hold companies accountable for harm due to security flaws, making compliance essential for regulatory adherence and customer trust.<\/span><\/p>

\u00a0<\/p>

Overview of the Cyber Resilience Act (CRA)<\/b><\/h3>

The CRA mandates that connected devices meet cybersecurity standards, covering design, lifecycle maintenance, and post-market updates. It applies to IoT devices and software applications, requiring regular testing and documentation. CRA also introduces penalties for non-compliance, pushing manufacturers to uphold strict security measures.<\/span><\/p>

Overview of the Product Liability Directive (PLD)<\/b><\/h3>

The PLD holds companies liable for defects, expanding this to include cybersecurity flaws. It eases the burden of proof for consumers and extends liability across the supply chain, covering new types of damages like data loss. Non-compliance with PLD can lead to financial penalties for manufacturers.<\/span><\/p>

How the CRA and PLD Work Together<\/b><\/h3>

CRA proactively requires cybersecurity integration from design, while PLD reactively addresses liability when security flaws cause harm. Together, they enforce cybersecurity as part of product safety, offer consumers protection, and incentivize compliance.<\/span><\/p>

How NetFoundry Supports Compliance<\/b><\/h3>

NetFoundry\u2019s zero-trust solution helps meet CRA and PLD requirements by embedding security into network operations. Key benefits include:<\/span><\/p>