Bowtie Zero Trust Network Access is a ZTNA platform that establishes encrypted connections directly from devices to private resources without routing traffic through middleman networks or reverse proxies. Key capabilities: Private Access: - Creates direct encrypted tunnels from device agents to cloud, data center, and office resources - Handles authentication, encryption, and access enforcement transparently on the device - Removes the need for backhauling traffic through centralized gateways Internet Access / Secure Web Gateway: - Delivers web filtering via a distributed architecture rather than a centralized cloud gateway - Bowtie controllers are deployed in the customer's own environment - Policy execution occurs on-device, keeping all infrastructure under the customer's control Network Segmentation: - Unifies networks, including environments with overlapping IP address spaces - Uses a policy engine to segment networks without requiring complex re-architecture - Segmentation is managed through a single unified administration console Encryption and Key Management: - Uses WireGuard for encryption - Private keys never leave the customer's infrastructure - Control plane runs as a distributed overlay network on the customer's own cloud or data center infrastructure, with no dependency on Bowtie's hosted services User Experience: - Device agents operate transparently in the background with no user disruption - Supports always-on connectivity - Centralized monitoring for administrators Deployment: - Requires a client agent and a software connector - Designed for rapid deployment (approximately 10 minutes) - All functionality is included in the core platform with no add-on features required