Building a Zero-Trust Network Access Proxy with Mutual TLS and JWT Authentication By Chidananda B V
Building a Zero-Trust Network Access Proxy with Mutual TLS and JWT Authentication By Chidananda B V Introduction For my MCA (Cyber Security) major project, I focused on addressing a critical security challenge that continues to affect organizations globally. Many enterprises still depend on the conventional perimeter-based security model, which assumes that users become trustworthy once they authenticate or gain internal network access. Although this approach served its purpose in earlier times, it proves inadequate against contemporary cyber threats including credential theft, malicious insiders, device compromise, and horizontal movement across networks. To tackle this issue, I developed and deployed a Zero-Trust Network Access Proxy that performs continuous verification of both the user and device before granting resource access. This implementation adheres to the foundational Zero Trust philosophy: Never Trust. Always Verify. The Problem Conventional security approaches assume...