Zero Trust is a security framework that focuses on securing interactions within an organization’s network. It operates on the core principle, “never trust, always verify,” requiring verification before proceeding with any action. There are two approaches to Zero Trust:

IDENTITY-BASED

• What is it? With identity-based Zero Trust, access to resources and systems within a network is granted based on the identity of the user or device, rather than their location within the network.
• What are the drawbacks? It is a complex framework that demands substantial time, budget, and continuous monitoring to prevent unauthorized access. This complexity often causes legitimate users to be denied access, negatively impacting productivity. In highly distributed environments, it can create bottlenecks, slowing operations and affecting efficiency. Moreover, hybrid workplaces expand the potential attack surface, creating additional workload when it comes to verifying increased users or devices. When managed on your own, while it may aid your security strategy, it can do more harm than good.

APPLICATION-BASED

• What is it? With application-based Zero Trust, every access request for applications is authenticated, authorized, and continuously monitored, regardless of the user’s or device’s location within the network. These access controls and security policies safeguard applications’ data from attacks.
• What are the drawbacks? Application-based Zero Trust places the emphasis on securing applications’ interactions within the network. The problem that can arise with application-based Zero Trust is that companies may not know whether to:
  • Block all applications, accepting only what’s necessary, which can hinder productivity,
  • Leave all applications unblocked, except a few, which can leave the door open for an attack, or
  • Block only known bad applications, without knowing what that list should entail.

Although one approach is not superior to the other, the team at Blackpoint Cyber has deep insight into two critical factors: the MSP experience and the modern-day threat landscape. We often see firsthand that MSPs have a frustrating experience with identity-based Zero Trust due to resource strain, poor user experience, disruption of service, and the expansion of the remote workforce.

Understanding the MSP’s experience with the pitfalls of both strategies, the Blackpoint team set out to create a solution that harnessed our deep insight into the modern-day threat landscape. We took the same core principle, “never trust, always verify,” and spun it on its head, thus creating Managed Application Control. We shifted the focus to providing you with the list of applications you should block, based on the real-world attacks our Security Operations Center sees firsthand every day. This managed, threat-based approach allows you to stay as secure as possible, without hindering your employees’ and customers’ productivity with endless authentication requests.

Rather than going from a fully customizable solution to a solution void of user input, we added the ability to create Custom Block Rules in addition to the SOC’s Curated Block Rules. Each of your customers’ needs differ, therefore, directly within our portal, you can adjust the complete list by adding custom rules based on filename, hash, and/or signing certificate. Exceptions and Assigned Customers are also available for further customization.

With Blackpoint on your side, we will additionally handle the response to requests trying to access all blocked applications. Our SOC will immediately detect and block these requests on your behalf. Monitoring Mode is also available, which notifies the partner when the specified application(s) is launched. With Managed Application Control, you will experience:

• Simplified security management
• Increased IT visibility
• Reduced false positives
• Increased operational efficiency

Zero Trust is a security framework that aims to secure interactions within an organization’s network by requiring verification before proceeding with any action. There are two approaches to Zero Trust – identity-based and application-based – and each has its own strengths and weaknesses. Identity-based Zero Trust can create resource strain, poor user experience, and disrupt services, whereas application-based Zero Trust can minimize the attack surface but lead to companies blocking necessary applications. To address the limitations of both approaches, Blackpoint Cyber has developed Managed Application Control, which focuses on providing a curated list of applications to block based on real-world attacks, while still allowing for the creation of custom rules within the portal. This managed, threat-based approach is available through Blackpoint Response and can be a valuable addition to an organization’s security stack.

Continuing to add value to our product bundle without increasing the cost, Managed Application Control is available through Blackpoint Response. Offered alongside MDR, Managed EDR, Cloud Response, Vulnerability Management, and Managed Defender for Endpoint, this security bundle can cross off many of your security stack’s needs simultaneously and cohesively. These solutions will help with asset visibility, network hardening, threat detection, and real-time response. For an end-to-end cybersecurity strategy, choose Blackpoint Response.

Ready to learn more? Book a demo today.