Horizon Inc Cloudflare One demo

Demo library › Path

Replace the VPN

For a room that runs a VPN concentrator and is tired of it.

~27 minutes · needs the lab - at least one chapter reaches the private estate

Not all of this path is built yet

Chapter 7, Device posture for sensitive applications is planned. Skip it for now, or describe what it will show without claiming it is live.

  1. Who are our people, and what are they allowed to reach? One sign-in, groups that come from the identity provider rather than being typed into Cloudflare, and an application that simply does not exist for someone not entitled to it. · ~4 min · Lab and laptop
  2. Retire the VPN concentrator. An internal ticketing app on a server with no open ports, reached by name through the Cloudflare One client - and with the client off, the address does not answer at all. · ~8 min · Lab only
  3. Admins reach servers without standing credentials. SSH to the apps server with a certificate Cloudflare issues for the session - no key on the laptop, no password on the account - and the database console behind the same group. · ~10 min · Lab only
  4. Only healthy, managed devices reach production. Planned The database console requires a device that passes posture; break one check and access ends, with the audit log naming the check that failed. · ~5 min · Lab and laptop