portnox/ztna-gateway repository overview

⁠Portnox ZTNA gateway

The ztna-gateway container is required if you want to use Portnox Zero Trust Network Access (ZTNA) for hosted resources (private web applications that only run on-premises or in a private cloud) or console resources (RDP, SSH, VNC, Telnet). It is not used for ZTNA with SSO web applications using SAML or OIDC, since those work directly between the application, the identity provider, and Portnox Cloud.

You can create as many gateways as you need, in any network that can reach the resources you want to make available, on-premises or in a cloud provider's network.

From the user's side, each resource gets its own URL, opened like any other website. This can be a portnox.com address generated for you, or a URL in your own company's domain if you set one up. The browser connects over HTTPS to Portnox Cloud, which checks the user's identity and opens a secure tunnel to the ztna-gateway container in your network. The gateway then connects to the resource. Unlike a VPN, the user does not install any client software, and Portnox Cloud can check the device's certificate and security status on every connection.

⁠Deploy

You do not need to build the docker run command yourself. When you create a gateway in Portnox Cloud, it generates the complete command for you, already filled in with the values for that gateway. Copy this command and run it as-is, there is no need to change it in any way. For example:

sudo docker run -d --name ztna-dockerhub-example --restart always \
  -e APIUSER=<org_id> \
  -e APIKEY=<api_token> \
  -e GWID=<gateway_id> \
  --cap-add=NET_ADMIN --cap-add=NET_RAW \
  -v /dev/net/tun:/dev/net/tun \
  --sysctl net.ipv6.conf.all.disable_ipv6=0 \
  --sysctl net.ipv6.conf.all.forwarding=1 \
  portnox/ztna-gateway:latest

⁠Updating

Update the container by redeploying it manually, or automate updates with the portnox-autoupdate container⁠. Cloud deployments cannot use the autoupdate container and must be redeployed by hand.

⁠Full documentation

For full documentation, see: docs.portnox.com⁠.