--- title: Zero Trust Architecture (ZTA) Introduction description: Zero Trust Architecture is the latest concept in security. We’re hearing this term widely used and in this explainer blog, let's look at what ZTA means. image: https://blog.iptel.com.au/hubfs/Blogs/Zero%20Trust%20Architecture/ZTA%20Zero%20Trust%20Architecture%20(Instagram).gif --- [![IPTellogo-byline-2020-dark-v2-pnd-optimised-500 (1)](https://blog.iptel.com.au/hs-fs/hubfs/IPTellogo-byline-2020-dark-v2-pnd-optimised-500%20(1).png?width=200&height=59&name=IPTellogo-byline-2020-dark-v2-pnd-optimised-500%20(1).png "IPTellogo-byline-2020-dark-v2-pnd-optimised-500 (1)")](https://iptel.com.au) - [Home](https://iptel.com.au/) - [Solutions](https://iptel.com.au/solutions) Technologies - [Cisco Access Manager](https://iptel.com.au/technologies/cisco-access-manager) - [Cisco Catalyst Centre](https://iptel.com.au/technologies/cisco-catalyst-center) - [Cisco Meraki](https://iptel.com.au/technologies/cisco-meraki) - [Cisco SDA Fabric](https://iptel.com.au/technologies/cisco-sda-fabric) - [Cisco Spaces](https://iptel.com.au/technologies/cisco-spaces) - [Everpure Storage](https://iptel.com.au/technologies/everpure-storage) - [Industrial IoT](https://iptel.com.au/technologies/industrial-iot) - [LAN](https://iptel.com.au/technologies/lan) - [Security and Cisco ISE](https://iptel.com.au/technologies/security-and-cisco-ise) - [Thousand Eyes](https://iptel.com.au/technologies/thousandeyes) - [Virtualisation](https://iptel.com.au/technologies/virtualisation) - [Wi-Fi](https://iptel.com.au/services/wi-fi-surveys) Services - [Backup Assure](https://iptel.com.au/services/backup-assure) - [Cisco URWB](https://iptel.com.au/services/cisco-urb) - [Cisco Webex Calling](https://iptel.com.au/services/cisco-webex-calling) - [Eco-Friendly Network Refresh](https://iptel.com.au/services/eco-friendly-network-refresh) - [Network Equipment Supply](https://iptel.com.au/services/network-equipment-supply) - [Splunk](https://iptel.com.au/services/splunk) - [Wi-Fi Assurance Review](https://iptel.com.au/services/wi-fi-assurance-review) - [Wi-Fi Surveys](https://iptel.com.au/services/wi-fi-surveys) - [Industries](https://iptel.com.au/industries) Education and Healthcare - [Education and Campuses](https://iptel.com.au/industries/education) - [Healthcare and Clinical](https://iptel.com.au/industries/healthcare) - [Aged Care](https://iptel.com.au/industries/aged-care) Enterprise - [Enterprise Networks](https://iptel.com.au/industries/enterprise) Industrial - [Mining and Camps](https://iptel.com.au/industries/mines) - [Utilities](https://iptel.com.au/industries/utilities) Retail & Warehousing - [Retail](https://iptel.com.au/industries/retail-and-stores) - [Warehousing](https://iptel.com.au/industries/warehousing) Entertainment - [Stadiums](https://iptel.com.au/industries/stadiums) - [Hospitality](https://iptel.com.au/hospitality-and-hotels) - [MSP](https://iptel.com.au/managed-services) Meraki MSP - [Meraki Access and Security](https://iptel.com.au/managed-services/meraki-access-and-security) - [Meraki SD Wan](https://iptel.com.au/managed-services/meraki-sd-wan) Cisco MSP - [Cisco Secure Access](https://iptel.com.au/managed-services/cisco-secure-access) - [Security Service Edge](https://iptel.com.au/managed-services/security-service-edge) FSO MSP - [Full Stack Observability](https://iptel.com.au/managed-services/full-stack-observability) Meeting Rooms MSP - [Meeting Rooms as a Service](https://iptel.com.au/managed-services/meeting-rooms-as-a-service) - [Equipment](https://iptel.com.au/services/network-equipment-supply) Equipment Supply - [Network Equipment Supply](https://iptel.com.au/services/network-equipment-supply) - [Buy Cisco Equipment](https://iptel.com.au/services/cisco-equipment-supply) - [Buy Meraki Equipment](https://iptel.com.au/services/meraki-equipment-supply) Get Pricing - [Get a Hardware Quote](https://iptel.com.au/services/network-equipment-supply#hardware-quote) - [Wi-Fi AP Estimator](https://iptel.com.au/resources/wifi-access-point-estimator) - [Blog](https://blog.iptel.com.au) - [Resources](https://iptel.com.au/resources) Free Resources - [Top Wi-Fi Secrets](https://iptel.com.au/top-8-wi-fi-secrets) - [Cisco SDA Fabric](https://iptel.com.au/the-cios-guide-to-sda-fabric) - [Catalyst Center Enablement](https://iptel.com.au/cisco-catalyst-center-enablement) Assessments - [Cloud AI Assessment](https://score.iptel.com.au/cloud-ai-assessment) - [Collaboration Assessment](https://score.iptel.com.au/collaboration-assessment) - [Network Assessment](https://score.iptel.com.au/network-assessment) - [Security Assessment](https://score.iptel.com.au/security-assessment) - [Splunk Assessment](https://score.iptel.com.au/splunk-assessment) Tools - [Automating Meraki](https://www.automatingmeraki.com) - [MAC Address Converter](https://iptel.com.au/resources/mac-address-converter) - [MSP Assessment Tool](https://score.iptel.com.au/cisco-managed-services) - [Thousand Eyes Option Tool](https://score.iptel.com.au/thousandeyes) - [Wi-Fi AP Estimator](https://iptel.com.au/resources/wifi-access-point-estimator) Demos and Design - [Request a Meraki Demo](https://iptel.com.au/free-meraki-demo) - [FREE Meeting Room Design](https://iptel.com.au/schedule-meeting-room-design-session) - [Catalyst Center Enablement](https://iptel.com.au/cisco-catalyst-center-enablement) - [About](https://iptel.com.au/about-us) IPTel Solutions - [About us](https://iptel.com.au/about-us) - [Job Applications](https://careers.iptel.com.au/job-application) - [Privacy Policy](https://iptel.com.au/privacy-policy) - [Careers Blog](https://careers.iptel.com.au) Contact Us - [Contact Us Form](https://iptel.com.au/contact-us) - [Email Us](mailto:sales@iptel.com.au) Customer - [Customer Feedback](https://iptel.com.au/customer-feedback) - [Customer Referral](https://iptel.com.au/customer-referral) - [Terms and Conditions](https://iptel.com.au/terms-and-conditions) News Stories - [Project Guardian uses Networking Infrastructure as a Sensor](https://www.dailytelegraph.com.au/news/nsw/transport-for-nsw-launches-worldfirst-sensor-trial-to-stop-rail-and-bridge-trespassers/news-story/8dc52e8fbca4c471da408e670cf0163e) - [IPTel partners for monitoring for Meeting Rooms as a Service](https://www.commsbusiness.co.uk/content/news/highlight-partners-with-iptel-solutions) - [Webex Monitoring with Highlight](https://itbrief.co.uk/story/highlight-iptel-add-webex-monitoring-for-meeting-rooms) - [ITBrief with Meeting Room Monitoring](https://itbrief.com.au/story/highlight-iptel-add-webex-monitoring-for-meeting-rooms) - [Cisco Webex Meeting Rooms Monitoring](https://telconews.co.uk/story/highlight-iptel-add-webex-monitoring-for-meeting-rooms) - [IPTel adopts Highlight](https://itbrief.com.au/story/iptel-adopts-highlight-to-enhance-managed-services) - [Highlight MSP Upgrade](https://datacentre.solutions/news/71753/iptel-solutions-upgrade-with-highlights-service-platform) - [Cisco 360](https://www.crn.com.au/news/2026/networking/aussie-partners-react-cisco-360) - [DP World Transformation](https://www.cisco.com/site/us/en/about/case-studies-customer-stories/dp-world.html) - [Cisco Managed Services](https://www.arnnet.com.au/article/1251771/how-partners-can-take-a-leap-of-faith-with-managed-services.html) - [Project Delivery Excellence](https://channellife.com.au/story/cisco-honours-top-nz-partners-cisco-live) - [Great Place to Work](https://greatplacetowork.com.au/companies/iptel-solutions/) - [Wi-Fi Doesn't have to be Unreliable](https://www.techpartner.news/feature/iptel-wi-fi-doesnt-have-to-be-unreliable-494069) Buying from IPTel - [Buying Panels](https://iptel.com.au/professional-supply-panels) - [IPTel Store](https://store.iptel.com.au) - [Request a Quote](https://iptel.com.au/request-a-quote) - [Managed Services](https://iptel.com.au/managed-services-enquiry) Case Studies - [DP World Video](https://blog.iptel.com.au/hubfs/Case%20Studies/DP%20World_Case_Study.mp4) - [DP World](https://blog.iptel.com.au/dp-world-case-study) - [Backup Assure](https://blog.iptel.com.au/backup-assure-a-disaster-recovery-case-study) [Contact Us](https://iptel.com.au/contact-us) This is a search field with an auto-suggest feature attached. - There are no suggestions because the search field is empty. ## Zero Trust Architecture (ZTA) Introduction July 24, 2026 Zero Trust Architecture is the latest concept in security architecture. We’re starting to hear this term widely used and in this explainer blog, we take a look at what Zero Trust means – and why you might want to implement this technology. ![ZTA Zero Trust Architecture](https://blog.iptel.com.au/hs-fs/hubfs/Blogs/Zero%20Trust%20Architecture/ZTA%20Zero%20Trust%20Architecture.gif?width=1440&name=ZTA%20Zero%20Trust%20Architecture.gif) There are a number of important enterprise network trends emerging. With [technologies such as SDA Fabric](https://blog.iptel.com.au/what-is-sda-fabric), along with the whole concept of the increased use of Identity and granular security technologies such as [Micro Segmentation](https://blog.iptel.com.au/blog/cisco-sd-access-micro-segmentation-explained), networking as we know it is on the move. Here’s the term you’ll get used to: ZTA – Zero Trust Architecture. Related reading - [What is SDA Fabric](https://blog.iptel.com.au/what-is-sda-fabric) - [SDA Fabric Key Concepts](https://blog.iptel.com.au/cisco-sda-fabric-key-concepts) - [Zero Trust Deployment](https://blog.iptel.com.au/zero-trust-deployment) --- ## Zero Trust: Background In a typical network (let’s say a ‘classic’ network, as opposed to a software defined SD-Access style network), we have a three layer hierarchy. The typical core, distribution and access layer network design has been around for a long time and is generally configured with a range of VLANs for end user device access. [![Cisco SD Access\_ Micro Segmentation (Instagram)](https://blog.iptel.com.au/hs-fs/hubfs/Blogs/Cisco%20SD%20Access%20Mirco/Cisco%20SD%20Access_%20Micro%20Segmentation%20(Instagram).png?width=254&name=Cisco%20SD%20Access_%20Micro%20Segmentation%20(Instagram).png)](https://blog.iptel.com.au/blog/cisco-sd-access-micro-segmentation-explained)The VLANs are trunked from access, through distribution to the core layer. Any device on a particular VLAN has access to all other devices on that VLAN. This is an open trust model. For Zero Trust, every device must be specifically allowed access for every interconnection to every device (sounds like a familiar concept, if you've [read about Micro Segmentation](https://blog.iptel.com.au/blog/cisco-sd-access-micro-segmentation-explained) - this is just a part of the subset that makes up ZTA). In a nutshell, the whole network becomes a giant firewall, with minimum access between any two points granted on an as-required basis. Related reading - [Cisco SDA: Micro Segmentation](https://blog.iptel.com.au/blog/cisco-sd-access-micro-segmentation-explained) - [Catalyst Center Enablement](https://blog.iptel.com.au/cisco-catalyst-center-enablement) - [Cisco Spaces Introduction](https://blog.iptel.com.au/cisco-spaces-introduction) --- ## ZTA Reasoning There’s a bunch of reasoning behind Zero Trust, but the most obvious is security. This is a massive step up in security from our classic open trust model. The ability to provide highly granular control of what clients can connect with, means that you have a much higher level of control. This granular control is known as micro segmentation, and we’ve got other blogs that cover this concept in more detail. Greater visibility is also a benefit – now that you know what clients are meant to be able to access, you can view what they are doing against that backdrop – and confirm they are in fact only using the access they are meant to have. Reducing cost is arguably a benefit. There is of course a lot of up front effort to configure the Zero Trust network, which is primarily spent in working out the access contracts and policies (eg what can clients actually do), but this is all part of having a secure network anyway. The cost savings come later – once you have the type of access each client is allowed to have worked out, you can allow clients to roam freely. All access ports are configured the same (this is a saving) and clients can plug in anywhere and be granted the access they’re allowed to have. Related reading - [Cisco Catalyst Center Beginners Guide](https://blog.iptel.com.au/cisco-catalyst-center-beginners-guide) - [5 Ways Catalyst Center Solves your Challenges](https://info.iptel.com.au/cisco-dna) --- ## Inherent Security with Zero Trust ZTA is not about a single technology – it’s an approach to how you secure your network. The Zero Trust approach in essence is about eliminating *inherent trust.* This inherent trust has historically meant that we allow clients to connect to switch ports, but tend not to limit in detail what those clients can do. [![Cisco SDA FAbric Key Concepts (Instagram)](https://blog.iptel.com.au/hs-fs/hubfs/Blogs/Cisco%20SDA%20Fabric%20Key%20Concepts/Cisco%20SDA%20FAbric%20Key%20Concepts%20(Instagram).gif?width=241&name=Cisco%20SDA%20FAbric%20Key%20Concepts%20(Instagram).gif)](https://blog.iptel.com.au/cisco-sda-fabric-key-concepts)With the network segmentation we are taking that control back, but Zero Trust is more than just allowing access on a need-to-know basis, it’s also about account security and the way in which we use end-users’ identities to grant access to information, as well as network resources. What does this mean in practice? It means that all access requires trust. It needs to be given, not just automatically allocated. Think of 802.1X - we've had this technology around for quite a long time. This allows a client to authenticate on a port and receive a dynamic VLAN assignment. The client has no connection until this point and all ports are configured the same. ZTA is essentially a major step up from this, but takes a lot from the 802.1X approach. Related reading - [Cisco AI Analytics in operation](https://blog.iptel.com.au/cisco-ai-analytics-in-operation) - [Cisco Machine Learning and AI](https://blog.iptel.com.au/cisco-machine-learning-and-ai) --- ## ZTA Standards There are some standards for Zero Trust, which are detailed in the list below: - [Forrester – Zero trust extended](https://www.forrester.com/report/The+Forrester+Wave+Zero+Trust+eXtended+Ecosystem+Platform+Providers+Q3+2020/-/E-RES157494) - [NIST: SP 800-207](https://www.nist.gov/news-events/news/2020/08/zero-trust-architecture-nist-publishes-sp-800-207) - [Gartner: CARTA](https://www.gartner.com/teamsiteanalytics/servePDF?g=/imagesrv/media-products/pdf/Forcepoint/Forcepoint-1-4YCDU8P.pdf) Each of the major standards bodies has their own approach, but ZTA is fundamentally about some key, core concepts. This is about only allowing the minimum required access on your network, then undertaking automated baseline and alerting on the network. This of course requires [AI and Machine Learning](https://blog.iptel.com.au/cisco-machine-learning-and-ai)to play out fully, however the key concept is about the approach to allowing user access to the network. --- ## Zero Trust Architecture: Summary In a nutshell, ZTA is all about taking back control, or to put it a different way, only granting access to specific users, devices and data, specifically where required. This involves micro-segmentation of what users and devices can access, but requires a lot more thought to develop the policies and contracts for what those users and devices are allowed to access. The AAA / NAC servers are key in this process, and tracking of the user’s identity – and allocating rights based upon this – is a key concept in the ZTA rollout. If you're ready to read more - we've got a blog on the concepts of [Zero Trust Deployment](https://blog.iptel.com.au/zero-trust-deployment). Related reading - [Cisco SDA: Micro Segmentation](https://blog.iptel.com.au/blog/cisco-sd-access-micro-segmentation-explained) - [What is SDA Fabric](https://blog.iptel.com.au/what-is-sda-fabric) - [SDA Fabric Key Concepts](https://blog.iptel.com.au/cisco-sda-fabric-key-concepts) - [ZTA Deployment](https://blog.iptel.com.au/zero-trust-deployment)   #### Related Articles ###### [Zero Trust Architecture (ZTA) Deployment](https://blog.iptel.com.au/zero-trust-deployment) July 24, 2026 ###### [Deploying Cisco SDA](https://blog.iptel.com.au/cisco-sd-access-deployed) Apr 10, 2025 ###### [Cisco SD Access: Micro Segmentation Explained](https://blog.iptel.com.au/blog/cisco-sd-access-micro-segmentation-explained) May 9, 2025 ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "IPTel Solutions", "url" : "https://blog.iptel.com.au/author/iptel-solutions" }, "dateModified" : "2026-10-03T07:37:51.091Z", "datePublished" : "2026-07-24T02:54:53.000Z", "headline" : "Zero Trust Architecture (ZTA) Introduction", "image" : [ "https://blog.iptel.com.au/hubfs/Blogs/Zero%20Trust%20Architecture/ZTA%20Zero%20Trust%20Architecture%20(Instagram).gif" ], "mainEntityOfPage" : { "@id" : "https://blog.iptel.com.au/zero-trust-architecture", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.iptel.com.au/hubfs/IPTel_Solutions_February2020%20-%20Header%20SiteMap/Images/IPTellogo-byline-2020-dark-v2.png" }, "name" : "IPTel Solutions Pty Ltd" } } ```