what is meant by SDP ?

SDP :  Software Defined Perimeter 
( this can function as a next generation VPN, there is no need to compromise ).

What are the pros and cons of Current Generation VPN ?

Current generation VPN has worked for years to make accessing resources remotely easier and more secure.

1.  People can access resources from beyond their current network.
2.  VPNs work to send all your network traffic to a separate network.
3.  This allows you to access resources that are not locally available.
4.  They also provide features like improved security through encryption, limited profiled based access and visibility and monitoring.

At the same time, the focus of the current generation of VPN remains upon protecting resources behind.

what has proven to be, an ineffective network perimeter.

For this reason, its time for a more cloud-friendly alternative that accounts for the need for internal security within both a network and the cloud instead if relying on a firewall to protect a network perimeter as this can lead to vulnerabilities.

What is network perimeter ?

A network perimeter is the secured boundary between the private and locally managed side of a network, often a company's intranet, and the public facing side of a network, often the Internet. A network perimeter includes: Border Routers: Routers serve as the traffic signs of networks.

How does SDP works ?

A Software-Defined Perimeter dynamically creates one-to-one network connections between the user and the resources they access. A Software-Defined Perimeter is built on three core pillars: ... Built for the cloud – It is engineered to operate natively in cloud networks and delivers scalable security.


Which are common perimeter network configurations ?

The three most common topology design options are as follows: (1) web server on the public Internet network, (2) web server on the internal side of the network, and (3) web server in the demilitarized zone.

What is the primary purpose of perimeter network ?

Software architecture plays a significant role in the discussion of a security infrastructure because the primary purpose of the network's perimeter is to protect the application's data and services. When securing the application, you should ensure that the architecture of the software and the network is harmonious.


SDP:

Next generation VPN benefits of SDP include the following:

• Provides a Zero Trust/least privilege model—authorize then connect
• Mutual TLS using a provided PKI
• No ports open for public snooping/hacking
• Microsegmentation—a tunnel of one
• Policy-based configuration ensures users can only access specific resources
• Integrates with your existing Identity Access Mechanism (SAML/AD/LDAP)
• No additional hardware or network integration required
• Consistent user experience on premise or off
• Lightweight client requires no end user configuration
• Control access whether applications are on premise or in the cloud
• Provides additional security without additional throughput degradation
• Additional security without significantly more experience