CFA is not ZT. It is "simply" moving the auth point to the CF gateway. It's stil...

		jiveturkey on March 3, 2020 \| parent \| context \| favorite \| on: Remote access to production infrastructure (death ... CFA is not ZT. It is "simply" moving the auth point to the CF gateway. It's still a VPN (or bastion, if you will). ZT is when you move [strong] authn and authz to the endpoint itself.