Google enters zero-trust market with BeyondCorp Remote Access offering

Google enters zero-trust market with BeyondCorp Remote Access offering

Technology giant makes internal zero-trust access infrastructure available on a subscription basis as an alternative to VPNs

Credit: Google/Gerd Altmann, modified by IDG Comm

Google is launching a commercial zero-trust remote access service that will allow companies to enable their work-from-home employees to access internal web-based applications without the need of virtual private networks (VPNs).

Called BeyondCorp Remote Access, the subscription-based service will be part of Google Cloud's portfolio and will cost US$6 per user per month, but it will not require customers to already be users of Google's existing cloud-based services or enterprise collaboration tools.

Google has been an early adopter of zero trust network architecture for its own corporate network, a process that started a decade ago and has been documented over the years in a series of papers and blog posts.

The company calls its approach BeyondCorp, and it is centred around the idea of access to applications and services being granted based on user and device identity and security posture regardless of their location in respect to the traditional corporate network perimeter.

With a lot of IT infrastructure moving to the cloud and enterprises having to accommodate outside contractors in addition to their own remote employees, having security policies tied to a strictly defined network perimeter has become increasingly hard.

With BeyondCorp and zero-trust access in general, there is no network perimeter. All users are treated as external users and are subject to the same identity and security checks before being granted access to resources.

The Covid-19 pandemic has forced many organisations to adapt to a new reality where much of their staff have to work from home. This poses significant challenges because the existing VPNs companies had in place were not designed to handle a sudden explosion of remote workers.

Because infrastructure is hard and expensive to scale, experts believe that this is a good opportunity to pilot zero trust networking, as it is more cost efficient and future proof.

"We've been actively working for the past few years to bring a version of BeyondCorp technology, which we pioneered many years ago, to the enterprise," Sunil Potti‎, vice president and general manager for Google Cloud, tells CSO.

With the advent of Covid-19, some of the core elements and technologies behind that approach have been accelerated into a product that allows companies to use basically the same infrastructure that enables 100,000 plus Google employees to work from home, he says.

How does BeyondCorp Remote Access work?

For now the platform can only enforce access controls for web-based applications, which means that companies connect their previously internal web-based apps to Google Cloud. The control plane and data plane related to access control is then done in the cloud. Google plans to expand the technology in the future to cover non-HTTP-based services and applications.

The platform uses signals and metadata collected through the browser or through an optional endpoint agent with a small footprint to establish user identity and determine the security state of the device.

Customers can opt to use only the context-aware signals collected through the browser, but for a higher degree of accuracy and security, they can ask employees to install the agent. This is particularly useful when dealing with staffers working from non-enterprise-managed personal devices.

It's not just the browser headers information, Potti‎ says. "We know where you're coming from. We know that you've used your session in the past. There's a ton of behind-the-scenes machine learning technology that's being applied to provide that context-aware access control. I would say that 60 per cent to 70 per cent of the core value is outside of the endpoint."

"That's the unique aspect of this particular solution: There's so much metadata and signals and learning that we could be doing behind the scenes to provide a very high degree of contextual access control. Then that 60 per cent to 70 per cent goes up to 80 per cent, 90 per cent and 100 per cent depending on how much you allow us to control your input."

The Google zero-trust differentiators

While zero-trust access solutions exist from other companies, Potti believes some differentiators make Google's solution stand out from the rest. For one, the product uses Google's network, so it benefits from its global scale, low latency and reliability. The company is even deploying its own intercontinental underwater fibre optics cables.

It's not just about the connectivity. The compute clusters and servers that process the information use all the security technologies and defences that Google has developed for itself, from custom-made cryptographic chips like Titan on the back end to highly optimised TLS implementations and a global visibility into threats and attacks that Google has to deal with every day to protect its other services.

Many companies have thousands or tens of thousands of employees suddenly working from home and are tackling it by increasing VPN, but this is a way for them to get both a tactical solution that can scale two or three orders of magnitude more than what they're used to and, at the same time, give them a better security posture, Potti says.

"The biggest thing that Google has always done is that we use various signals from endpoints, from the network, from the user location, and a whole bunch of other things to essentially protect our own employees from threats, whether insider or external.

"This is not only something you can do in the near-term, but it's the right architecture for the long-term. If you add more VPN, at some point in time, you will have to rip it apart as you move to a world of web applications or SaaS applications and so forth."

Follow Us

Join the newsletter!


Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags Googlevpn



Meet the Reseller News 30 Under 30 Tech Awards 2020 winners

Meet the Reseller News 30 Under 30 Tech Awards 2020 winners

This year’s Reseller News 30 Under 30 Tech Awards were held as an integral part of the first entirely virtual Emerging Leaders​ forum, an annual event dedicated to identifying, educating and showcasing the New Zealand technology market’s rising stars. The 30 Under 30 Tech Awards 2020 recognised the outstanding achievements and business excellence of 30 talented individuals​, across both young leaders and those just starting out. In this slideshow, Reseller News honours this year's winners and captures their thoughts about how their ideas of leadership have changed over time.​

Meet the Reseller News 30 Under 30 Tech Awards 2020 winners
Reseller News Exchange Auckland: Beyond the myths — how partners can master cloud security

Reseller News Exchange Auckland: Beyond the myths — how partners can master cloud security

This exclusive Reseller News Exchange event in Auckland explored the challenges facing the partner community on the cloud security frontier, as well as market trends, customer priorities and how the channel can capitalise on the opportunities available. In association with Arrow, Bitdefender, Exclusive Networks, Fortinet and Palo Alto Networks. Photos by Gino Demeer.

Reseller News Exchange Auckland: Beyond the myths — how partners can master cloud security
Reseller News welcomes industry figures at 2020 Hall of Fame lunch

Reseller News welcomes industry figures at 2020 Hall of Fame lunch

Reseller News welcomed 2019 inductees - Leanne Buer, Ross Jenkins and Terry Dunn - to the fourth running of the Reseller News Hall of Fame lunch, held at the French Cafe in Auckland. The inductees discussed the changing face of the IT channel ecosystem in New Zealand and what it means to be a Reseller News Hall of Fame inductee. Photos by Gino Demeer.

Reseller News welcomes industry figures at 2020 Hall of Fame lunch
Show Comments