What is Versa Zero Trust - Premises?

Versa Zero Trust – Premises is the Zero Trust Network Access (ZTNA) component of Versa Zero Trust Everywhere built for campus and branch users. Rather than trusting a device because it sits on the office network, it applies the same granular, least-privilege access policies Versa’s ZTNA uses for remote users – enforced at the point of connection.

Key takeaways

• One of four components making up Versa Zero Trust Everywhere.
• Applies ZTNA-style least-privilege access to campus and branch users.
• Closes the gap cloud-only ZTNA leaves for in-office and on-site work.
• Policy stays consistent whether a user is remote, on the road, or on-site.
• Pairs with Versa Secure Private Access, the ZTNA leg for remote users.

On this page: Why it matters · How it works · Zero Trust Everywhere Components · Versa Zero Trust – Premises & Versa · FAQ

Why is Versa Zero Trust – Premises important?

Most Zero Trust programs start with remote access – a VPN replacement for people working from home or on the road – and stop there. That leaves a gap: a user who walks into a campus building or branch office and joins the local network is still granted broad, implicit trust simply because of where they connected, the exact assumption Zero Trust is meant to eliminate.

Versa Zero Trust – Premises closes that gap. It extends the same continuous-verification, least-privilege model Versa applies to remote users out to campus and branch locations, so access to an application depends on who a user is, what device they’re on, and what they’re trying to reach – not which port or Wi-Fi network they joined. Because policy is centrally managed and consistently enforced whether someone is at home, on the road, or in the office, security teams write one access policy instead of separate rules for remote and on-site users.

What is Versa Zero Trust – Premises?

Versa Zero Trust – Premises is the Zero Trust Network Access (ZTNA) component of Versa Zero Trust Everywhere that applies granular, least-privilege access policies to campus and branch users at the point of connection – the switch port, access point, or LAN segment a device joins, rather than a VPN gateway a remote user connects through.

It draws on the same ZTNA engine Versa uses for remote access: application-specific policies with user- and group-based access control that adjusts dynamically to context, continuous verification of device posture and activity, and adaptive micro-segmentation that stops a compromised device from moving laterally to other systems on the same network. Being physically on-premises no longer implies a device is trusted – every connection is evaluated the way a remote one would be.

Zero Trust Everywhere Components

Versa Zero Trust – Premises is one of four components that make up Versa Zero Trust Everywhere, Versa’s framework for extending Zero Trust from remote users to every location a workforce operates from.

Versa Secure Private Access provides ZTNA for remote users – the traditional VPN-replacement case. Versa Zero Trust – Premises provides the same access model for campus and branch users, evaluated at the point of connection rather than a remote gateway. Versa Secure SD-LAN is the software-defined campus and branch networking layer beneath it, contributing microsegmentation, zero-touch provisioning, and application/user/device policy. Versa SASE Fabric supplies the cloud security services and middle-mile connectivity that optimize the application experience once traffic leaves the site. Together, the four components let one Zero Trust policy follow a user everywhere they work.

Versa Zero Trust – Premises & Versa

Versa Zero Trust – Premises lives on the Security tab of the VersaONE platform, alongside the rest of Versa’s Security Service Edge (SSE) portfolio – ZTNA for remote users, Secure Web Gateway, CASB, DLP, and the other services documented there. These capabilities are natively integrated into a single software stack rather than assembled from separate point products, which is what lets one policy apply consistently across users, devices, and locations instead of needing separate enforcement points for remote and on-premises traffic.

Versa’s broader SSE portfolio, of which Zero Trust – Premises is a part, is recognized in the 2024 Gartner Magic Quadrant for Security Service Edge – third-party validation of the same integrated approach that lets Zero Trust Everywhere present one policy model across remote, campus, and branch access.

Frequently asked questions

What’s the difference between Versa Zero Trust – Premises and Versa Secure Private Access?

Both are ZTNA, applying the same least-privilege, continuously-verified access model. Secure Private Access covers remote users connecting from outside the network. Versa Zero Trust – Premises covers campus and branch users, evaluating access at the point of connection rather than at a remote gateway.

What problem does Versa Zero Trust – Premises solve?

Cloud-only ZTNA typically protects remote users but leaves campus and branch workers on the older, location-based trust model – connect to the office network, get broad access. Versa Zero Trust – Premises closes that gap by applying the same least-privilege verification on-site.

Does being on the office network still grant automatic trust?

No – that is the assumption Versa Zero Trust – Premises removes. Access to an application still depends on user identity, device posture, and context, evaluated continuously; a device on the local network isn’t trusted more than a remote one connecting through Secure Private Access.

What are the other components of Versa Zero Trust Everywhere?

Alongside Versa Zero Trust – Premises, the framework includes Versa Secure Private Access (ZTNA for remote users), Versa Secure SD-LAN (software-defined campus and branch networking with built-in microsegmentation and zero-touch provisioning), and Versa SASE Fabric (cloud security services with middle-mile connectivity).

Is Versa Zero Trust – Premises managed separately from remote-access policy?

No. A single security policy is centrally managed and consistently enforced whether a user is at home, on the road, or in the office – the same policy engine covers Versa Zero Trust – Premises and Versa Secure Private Access together.

More on Versa Zero Trust – Premises

If you want to learn more, these are sources we trust.

Related terms

If you’re reading about Versa Zero Trust – Premises, these are worth looking at next.