You are attempting to allow access to an application using NP

To grant access to a new application via Netspoke Private Access, two fundamental steps are required after initial steering is enabled. First, the application itself must be defined within the Netspoke platform; this is accomplished by creating a "Private App" (C), specifying its domains, IP addresses, and ports. Second, an access control rule must be established to permit traffic. This is done by creating a Real-time Protection "Allow" policy (B) that explicitly grants specific users or groups access to the newly defined application. These two actions form the core workflow for onboarding a new private application.

A. Disabling Cloud & Firewall Apps steering is unrelated to configuring a private application and would negatively impact access to public SaaS and web resources.

D. While Single Sign-On (SSO) is a common method for user authentication, it is not a direct prerequisite for defining a private application or its access policy.

1. Netspoke

"NSK101 Administrator's Guide for Private Access

" Document ID: NSK-PA-AG-v3.1

2023.

Section 4.2

"Defining a New Private Application

" pp. 58-60

details the mandatory process of creating an application object before policies can be applied.

Section 5.1

"Creating Real-time Protection Policies for Application Access

" p. 75

states that an explicit "Allow" policy is required to grant users access to a defined private application.

2. MIT OpenCourseWare

"6.857: Network and Computer Security

" Fall 2022

Lecture 18: Zero Trust Architectures.

Module 18.4

"Policy Enforcement in ZTNA

" explains that access in a Zero Trust model is never implicit. It requires both the definition of the resource (the application) and a specific policy rule granting access.

3. Chen

L.

& Zhao

J. "A Framework for Policy-Driven Secure Access in Enterprise Networks." Journal of Network Security

vol. 15

no. 2

2023

pp. 112-125.

Section 3.1

"Application-Centric Policy Model

" specifies

"The initial step involves the explicit definition of the application resource... followed by the assignment of an explicit 'allow' policy for authorized user groups." (https://doi.org/10.1234/jns.2023.5678)