Name: Securing Expanding Attack Surfaces and Multi-Cloud Deployments
Uploaded: 2025-12-16T06:26:05.896Z
Duration: 1 h 2 min 24 s
Description: Securing Expanding Attack Surfaces and Multi-Cloud Deployments

Transcript for "Securing Expanding Attack Surfaces and Multi-Cloud Deployments": Hi, everyone. So, perhaps that we will waiting for another thirty seconds for other people to join to our webinar. So let's wait for them first. Yep. Okay. Hi, everyone. So my name is Fifi. So thank you for joining today. I promise, we will keep this session, practical, lax, and also a little bit fine. So they will have a pool, along the way, so that I have an interaction with you guys. So today, we're talking about securing and spending a safe surfaces and multi, Cloud deployments. So which honestly just means that, the users are everywhere, the apps are everywhere, Data is everywhere. So the security is trying very hard to keep up, as, time for time. So most organization, today are dealing with, remote or hybrid work, which is have a heavy SaaS usage and the cloud migration and sometimes all of that at once. So but many are still protecting SaaS, the same way that they did for, like, ten or fifteen years ago with, VPNs. Yeah. So if you ever use a VPN, then you will probably already know where this is going because, as as what, like I said, and, I mean, as what, like, I have experienced it before during my internship, back then. There are situation where I need to, like, reboot the servers, the switches, but then, I can only take the action, later because of having a connection issue with, the VPN during that time. So, today, we will cover more about, like, eliminate VPN pains, then why change? Why we need to change the VPN to the new solution, and then how it all works with the new solution and how to get started. And if you can see for the last one is benefit of zero trust. So, yes, that is the new solution that I will be suggested, in to to change from the VPN to the new, solution for your organization. So, yeah, We're moving to the next one. So now let's talk about getting a rate of VPN pains. So today, as we know that we have a hybrid work. So everyone is, like, working from home or perhaps that, some of you might working from anywhere. So it is a norm right now, and both apps and also users are distributed globally. So this connectivity model doesn't cut it. So VPNs are too complicated. And as you can see, it it it didn't align for the modernization, today. So, the VPN augmentation and replacement projects are one of the most, common starting points organization take when it's implementing, wider zero trust, strategies. So you can see that that VPNs have been around forever, but, honestly, they are quite risky, too complex, and too slow, as you have experienced it, before. So for the first one, for the risk, VPN VPNs give, like, broad network access. As you can see that when you enter the VPN, you actually can, access to many things at once. So that didn't have, like, a particular limitation for, the certain users to access certain application or certain access. So if if you can see from the slide right now, so in 2034 alone, like Palo Alto GlobalProtect, Cisco, and Internet VPN, all had headline grabbing, vulnerabilities about the VPN. And it also will be complex for the, IT admin to manage the configuration because for you, I I'm not really sure about how you view the VPNs. But for me, you might see the VPN is easy to set up because once a user can access to the VPN, so it means that they can access through the, application or, organization. But then it's actually most organization are running three plus VPN gateway just for a remote user. I mean, like example, vendor need to have, like, a a different, VPN to access it. So our employee have a different VPN to access it. So it's it's it's get complicated if you have, like, a new user or, I mean, a new application that need to configure together to make sure all the reboot user or outside from your organization can attest to it. So for the performance, like, 8181% of the users are frustrated by slow, clunky, and unreliable VPN. So, if you experience it, when the VPN is breaks, then your IT department will get swamped with the ticket and productivity, have been stalled. So it will, impact on the performance side I mean, in the technical side and also in the business side because, this, eventually affect your, performance of your organization and also, your customer. So moving to the next one. Okay. Sorry. Okay. So we will talk about, the what happens when business delay fixing VPN challenges. So as you can see, like, here is the woman the human side. So nobody is enjoys fighting the VPNs because whenever VPNs have an issue, you always, like, getting frustrated with it. And as an employee, we we feel like it's very inconvenience and really, really frustrated to handle it. So, when this thing happen, we as a employee will feel like we want to work in other organization that will, provide a better tools for us to use so that we can keep up with our work instead of we need to deal the same issue day today. So whether it's SaaS apps, self hosted platforms, or developer tools, organization needs to access, experience so that they can ensure the IT team has been provided with the secure access for everyone. So, the legacy VPNs, they also will held back, the digit digital modernization. So that is why I say that this VPN, environment is not really suitable for our current, SASE, environment today because we we have, like, cloud migrations, MAA projects, and innovation initiative that all hit roadblocks if access is slow or brittle. So the solution is what is the solution? For right now, what can I see? The best to replace, the VPN is zero trust network access, which is, VPN eight. It ends as a as a bridge, a smoothing transition from all tech to modern apps. Because if someone wants to change from the, old architecture to the SASE architecture right now, as we, we have been used to it right now, So it need you need to have a smoothing transition from old to new wine so that there are no downtime experience, from the user side. So that is, the most important thing. So I would like before we move into the next one, I would like to to share with you the full question so that, I can understand what is your, view on this, particular topic. So we they should have a pop up poll from your screen. Okay? You can answer that. Yep. So why are organization shifting from VPN to zero trust solutions like Cloudflare? You can actually work for that. K. I can see some of them would. Yeah. Same. Good. Okay. Okay. Some of okay. Some of you are also answered for the first one. Okay. They want a system that automatically grants access when a device is connected. So this one is actually a VPN concept, which is once you already got the grant access, then you can actually connect it to the device that connected, which is a a bit risky, actually. For the last one is they plan to remove identity verification entirely for faster logins. Okay. If you remove the identity verification, it's actually a really dangerous action. So it's okay. But, okay, I can see that most of the people are also voting for the, the the second answer, which is they need a model that reduce lateral movement by verify verifying every request, which is the this one is, an exact implementation of the zero trust, which, they have a concept, no trust, not not trust everybody. So you need to once you went to access to something, you need to actually, authenticate yourself, then only you can, you can, use the application or get an access to it. So, yeah, I can see some of you might have, like, a little bit confusion, but it's okay. We will go along the way, and you will have, like, an idea what is, zero trust is about. Yeah. So, okay. So moving to the next. So if VPNs are no longer viable and the risk of delaying change are this high, So the next question becomes, like, why are organization organization choosing ZeroTrace as the way for weight? So anyway. Okay. Okay. So now that we all agree that we VPNs are quite an issue for, our modernization architecture, so the truth is just patching VPN is just not enough. So you need to have, like, a solution which is a zero trust. Think of it like a bouncer with check who who will text, everyone before they enter every time. So it it's not like it just assuming someone is safe because they're already inside the network. Because if you can see, or as you know from the old architecture, when you're working inside your company I mean, inside the building, you did you didn't have to use VPN. But if you're working at outside, you might need to use VPN. So, virtual doesn't work in that way because it's either you inside in the building or outside working from anywhere, working from home. You still need to pass through the authentication to access the application. So that is why, the risk will automatically goes down because every user, device, and connection is need to be verified. So the lateral movement, we didn't have that kind of issue because example, like, you want to access something that should be accessed by, HR department only. You're unable to to go through it because, when they authenticate you and knows that you are from the IT department, example, if you are IT department, then the the the authentication will be failed, and you don't have any access to go through it and to see any important, details from that. So, the abilities will, automatically goes out to you can add users on what news apps or tweak policies with the hours of painful, config work. So I will show you, in the demo, later, on how the dashboard is, shows to the end, through the users so that, they can have, like, a really simple setup and understanding, on our dashboard. So, let's not forget the end users. Zitania also, enforce security closer to where people actually are not backhauling everything through some distant VPN disturbance. So, the clouds the cloud, z 10 a means, you will have a faster connection, less troublesome, and resilience during the, outages. Yep. So moving to the next, you can see the SASE is an architecture designed for zero trust. Okay. From the left side is the nowadays, so the the I mean, not nowadays. I mean, the the previous corporate network, and the right side is the SASE, architecture, which is a network modernization. So let's focus specifically on security and networking. So this migration of capability to a single cloud platform, which is as a secure access, service age. So as a reminder, SASE is an architecture model. So you can see address side that congress security and networking onto a single platform. So you can have a control you can control one panel so, it will be easier for you to manage it. So, basically, it will say it's like, why manage 10 different tools when you can actually have one cloud platform that does it all. You can actually handle security network, the the control of the, access through the one panel. So it's it's really, easy for the the organization to handle it. So network and security will come together in one unified system. So one console, one set of policies, so it will have a better solution for the organization. So every request, every connection, every user check, you ask, is the user legit? I mean, is the device healthy if this person can access through it? So this is how, Zero Trust acts. And also when you want to have a SASE architecture in your, organization which combining all of these, so Zero Trust is one of the, solution that you can start with, then only you can you can expand it from one, up. You can, expand it one by one. So that's the thing. So we move to the next one, which is no other vendor can start repressing your VPN faster. Okay. So if you can see from here, you can see the timeline the timeline because, not everything you need to, implement it altogether at one time. So here is the pipe that people will worry about. So replacing your VPN at one point, suddenly, is quite like a nightmare for them because they're worried that they will have a downtime, during the transition. So it's okay. I just want to highlight that you can actually try to do it all at once. You can actually try to do it one by one instead of all at once. So you don't have to do it everything immediately. So most organizations starts with a pilot, one or two critical apps, meaning that the tools that you always use or, I mean, a small group of user, maybe apps with the most sensitive data, data, you can actually try to move it, from that particular pipe, then move it, the other pipes, along the way. So with Cloudflare, it's surprisingly easy. You connect, the apps to our global network, and then you can plug in identity, providers like Okta or employee tools like CrowdStrike because our Zero Trust product is actually integrate with many, tools from, our partners. So, later also, I will show you, during the demo live the integration of, IDP and also, the endpoint tools that you can actually, configure it together. So the browser based apps, you can start actually without even installing a client. So over the time, you can expand more ads and more users and also more high to reach internal resources. You can integrate internal DNS, check what's, being accessed with shadow IT discovery. And, the point is, you need to make sure the incremental progress where instead of you want to, to to change it all all at once. So every app you move off VPN makes your organization more secure. And not only your organization, I mean, your IT teams, maybe security teams, IT department, admin will be much happier to handle your configuration right now because you have a simple, setup instead of the, the the one that you use, right now, which is, VPN. So yep. So why adopt zero trust to aid that, compliance? So this one is, quite important. We will talk about, access. Access is great, but protecting your, your security is also even better. So we are living in a world with more data than ever, which have, like, customer info, financial records, employee chats, and, yes, quote quote. Because quote is now, like, price asset for the organization because once someone can breaks into your quotes, it will be really a disaster for your organization to, fix the issue. So SaaS adoption, great for productivity. And 81% of breaches now involve data store in cloud apps because we know we we we keep it in the public, area. So it's quite it's quite dangerous for it. And right now, everyone is using AI as I know, like, everyone each of us are familiar with, CheckGPT, Gemini. We are using AI to make our life easier. I mean, to do our job. Maybe we need, like, some help from this AI too. So, yeah, it's quite, maybe it's not our intention to share the, like, confidential information through this platform, but sometimes we are not realized, that we are actually enter this kind of inputs. So traditional, the API tools, honestly, they are, like, really hard to maintain and not fast enough to keep up, with the modern risk like leak code or sensitive, data sharing across multiple platform. So with the zero trust, you can actually re or, you can actually enforce the proactive and also the contextual controls that who can access what. So maybe this this particular department can access what thing and this particular department can access what thing. And specifically on from which device, also you can configure on that too. So whether there are employee, your vendors, or your contractors, you actually can, configure that specifically based on what you prefer. It's about making sure the sensitive data is handled, safely so you can reduce the risk of breaches and stay, compliant without drowning your, admins in complexity. So yeah. And before we move to the next topic, I would like, you to imagine that if you, right now would like to change to the zero trust, so do you have, like, any idea on how it all will works? So if if you, like, feel like you're stuck, you don't have, like, an idea how to how am I supposed to start with and how is actually work so you can stay focused on this, section. So the VPNs right now are broken, and, also, we're delaying the, the the work the work that we are, working on right now. So with Zero Trust, it will modernize your architecture and improve the user experience that will make your IT life easier and protects your data. So up next, we will dive into how all of this actually works in the real world setup architecture and demos. So one really important thing to understand about us, Cloudflare. So you need to know that every Cloudflare service is runs on every Cloudflare server. So on those servers are not sitting in just one or two regions. They are deployed in every Cloudflare data center because we are across 330 cities in more than 120 countries, which is quite big. And what that means in practice, you whether a user in Asia, in Europe, or The US, they actually get the same security service, the same policies, and the same performance. You don't have to worry about that one because, we can confirm, that all this all the, solutions, you will get the same even you are at any other place without traffic being backhauled to a central location. So when we talk about Cloudflare data protection, right now as you can see on the screen, so this isn't about launching on shiny new product. It's really about bringing together existing services. Things like DLP, CASB, I mean, the data protection, the broker, the z 10 a, and browser isolation, and using them together to solve modern data protection problems. You, you can rely on your trust, but if you want to have, like, a great security protection of, for your data for your data. So you need to consider as well, any other features such as, like, what I say, just now, like, the LP, CASB, RBI. So then only, you can ensure that your data is protected. Your data can well protect it. So and that matters because data today isn't just, like, sitting in one place. It it it is in a motion. Sometimes at rest and actively being used across SaaS apps because we are we are broadly using SaaS apps, the Internet apps, browsers, maybe the APIs, and even the AI tools. So you need to consider to protect your data well, in the way, in the long, in the long run. So CloudFlare, every CloudFlare is like every service everywhere that you can get it. So this kind of model let us, like, protect our data consistently across all of those states. So without forcing customer to stitch, together, the disconnected tools. So you can actually delivering the fast and, the good performance for the user. So now let's talk about why CloudFlare can do this differently. So as you can see at the map and also the details from, at the right side, you can see that, we are we have, like, 330 cities across, the 120 countries, include China. And also we also have, like, 160 plus AI inference locations powered by GPU and 296, terabytes per second of global edge capacity. So which is, quite big for to for us to, support the, the capacity and the performance of our users. So here is the important thing. It's not just a big network, but every cloud service is actually runs at every location on that map. I mean, that map. So that means security, networking, performance, and data protection are enforced, to that will be closer to the users and to the apps and also close to the data. So it will not back hold through a few regional choke points. So this is, this is, an important things that you need to take note because, this is what we mean by Internet native, which is a programmable, cloud network. So, in this foundation, I never some feature power things, which is, three things. The first one is consistent, security policies is everywhere, and it's end up faster end user experience globally globally globally, which is great for the end user. Sorry. And then the last one is, even the ability to deploy, AI workloads that can be closer to the users at the scale. So this isn't just about, today's need. Cloudflare actually focus on today and also for the future. So, is Cloudflare, continued commitment to supporting future digital initiative? That is why we are trying to, like, tell you more about how you can go from the old architecture to this new architecture with SASE and study with, Zero Trust. So, because our future digital initiative will include AI, multi cloud, and globally distributed teams. So it's quite important because right now, the revolution of IT is quite fast, so we need to keep up with that thing. Yeah. So now let's look at the reality inside most organization today. So you can see from the slide, the zero trust is actually a combination for many features inside it. A number like secure access, internal gateway, SaaS app security, browser isolation, cloud email security, data loss prevention, and deleted experience monitoring, which is like a lock. So at the center of this, are actually, we want to highlight that not only the access we can control, but instead, there are many more features that actually for we can provide to the, organization to ensure your organization is, well protected. So for the first one, we talk about core data protection services. So at the center of this are the LP, CASB, and RBI. So these are critical for solving data protection problems. Because, as I said before, you, you, not recommended for you to only focus on zero trust itself, but you also need to consider to add on some, features to strengthen your security for your organization. So for DLP, data loss prevention is actually can inspect HTTP and HTTP HTTPS traffic and files and applies allow or block policies consistently. So you don't have, like, to, keep on changes the configuration. It's actually, you can actually, like, create the LPE profiles, and then you can match it with which kind of policies that you want to, and then it will it will run through it. So, it will be, easier for the IT admin to handle it. So for the second one is, CASB scans, SaaS, apps via APIs to detect misconfiguration. So CASB is quite useful, features for, someone I mean, some organization that maybe have a sensitive data store in platform like, Google Workspace or Microsoft three six five. And RBI is a browser, the isolates browser session that will enforce, contrast like blocking downloads, copy paste or uploads because sometimes we have this kind of, like, habit where, we maybe copy paste, unnecessary things. So this can protecting data while it's actively being used. And then we have, like, access and inspection layer. This focus more on SWG, which is, the web gateway, which means that z 10 a will work together with web gateway, so that you can have, like, the right you can ensure the right user can access the right apps, whether they are actually, SaaS, maybe self hosted or Internet apps. So, this web gateway, we can, inline the HTTP in inspection, and it will enforce the SPN, RBI policies during the browsing. So as SWG also provides, controls and shadow IT discovery, which, really help the organization to have a visibility into unmanaged app users app usage. So, if you can see the integration and ecosystem, in the slide in the in the picture, picture, you can, you can also can see that we are actually can integrate with many things, with many partners because we have, like, a bunch of, like, IDP providers that integrate, well with, our zero trust solution. So putting it all together, when, you zoom out the architecture, at the right side, you can see that, if you need, like, a specific scenario, example, like you want to have a threat protection, so there is a recommendation, features such as SaaS, CES, which in which means cloud security, SLOG, and RBI. So this, list is, the list recommendation for you to consider, to have a zero trust with, additional features, on our platform to protect, more on your organization. So you will get a simpler and more resilient platform in one particular panel. So you will have a really, really easy configuration, just on one panel, but you can manage many different apps, inside that. So now that you have seen how everything fits together, the next question is the most important. So how do you actually get started? Because everyone can have a plan. Everyone can have an idea, but you're not really sure how can you get started with, this kind of solution. So we will cover this topic on next. So usually, k, what CloudFlare for a second? You can usually, customer, always tell us that CloudFlare is faster and easier to deploy because, our dashboard is quite easy. Oh, by the way, I just want to share with you that that our zero trust, our zero trust platform can actually, you can actually explore it using a a free plan. So, with all the information that you can get today is you can actually learn it, using your your own pace, through our through our dashboard. So okay. Back to back to our site. So customer constantly say that, our solution is, easier to deploy rather than traditional SASE or SSE solution. So that is, that is important thing because a lot of organization, either just starting their SaaS journey or they might stop halfway because they don't really know how to deploy it. So one big differentiator is that every CloudFlare service is available in every network location. And, from the user's perspective, this shows up as a better global, user experience because the policies are enforced fast and consistently. So the traffic is routed over a highly resilient global network. So your performance will be stay strong even during the outages, because, we we also using, any, Anycast, routing. So it's it's it's good for the performance for our client. So where many customer have, their, realizing that CloudFlare isn't just solving to this success problem. As what I said previously, it's also built for a long term modernization. So instead of stitching together tools, you actually can get one unified network and control panel to to make sure that you can easily control it from your side. So we simplify any to any connectivity between users, apps, clouds, data centers, and the Internet while helping organization consolidate security and networking tools over the time. So it's really important for them. And finally, this isn't just about technology. The customer often call out Cloudflare as a, like, collaborative business partner. We we usually have, that kind of thing because, from the technical support during presales, to the business, we actually can convince them to, be a partner, partner connection, between us. So, this is how actually the, operation is work. So now let's talk about one time integration. I think it's quite it's okay. Later we will we will, I will share the post so that you can have, like, interactive session with me. So, okay, continue with that. Let's talk about, the one time integration. So, once as as you can see, there are four, main part here, which is network on RAM, endpoint protection, IDP, and also log storage, and SIM partners. We are actually have, like, more partners with us to ensure that our zero trust can integrate with their, their tools seamlessly. So Cloudflare integrates with a huge ecosystem with these, with these partners. And, once they have connected, so those two become part of, the Cloudflare ecosystem. So you do have, to, like, configure on the Cloudflare site, and, also, at the same time, you need to configure at the site. You don't have to do that because it's all it's already sync synchronized since you have integrate the, tools, with, our platform. So this actually dramatically lowers, the friction when getting started to make it easier to expand over time without rearchitecting or duplicating effort. Yeah. So, we move to the next one. Okay. You can see, that in Zero Trust, there are many features, and you can also see that, you don't have that to configure it all at once as I stated before. So all of these use cases are educated to through our Cloudflare one, which is our success platform. So, these services are compressible, meaning you'd have to adopt everything at once. You can start small, maybe through access, and then you can start with, like, have a browsing style security and then layer capabilities at your own pace, based on your needs. Because every service runs in every CloudFlare location, inspection and policy enforcement, which will can happen in single pass. So no matter where you start, maybe users, branches, clouds, or data center, CloudFlare actually can support it and can provide the multiple flexible on ramps to send traffic to our global network. As you can see, if you have, like, maybe your highlight is zero trust security, you can consider, which feature on this, slide. So it's actually helpful for the customer to decide on how you want to get it started, in your organization. So before we move to the next slide, I would like to, I would like to ask you a question. So there we have a pop up post you can see, which is how does Cloudflare validate a user before granting application access? I just want to see the the your understanding on this, particular pipe. Maybe, maybe some of you will have, like, confusion, on this pipe since you might not experience or might not, explore more on the zero trust. So feel free to actually vote it so I can see someone has worried. Okay. I can see that most of you guys actually understand what is happening, so I'm really happy with that. K. Some of it might have still, maybe still have a confusion. It's okay. Maybe when during the demo live, when I show the dashboard, some of you will get a point. So okay. For the first one and for the second one, which is by comparing the user's IP address and also my address, actually, Zero Trust didn't, didn't see in that way. It actually will, authenticate your, I mean, your, credentials, and you need to, put into it, and then only you can access it. It doesn't mean that zero trust will read your IP or MAC address. If you are considered as a person that can access through this application that you can access. So it it it didn't work as that way, but it's okay. Thank you for joining our polls so that I can have, like, an interaction with the with the audience so we can continue to the benefits of the viewer trust. So getting started with CloudFlare isn't about a massive RIP and and replace. So it's about starting where it makes sense. So we will wrap up by looking at the benefits of zero trust and what organization gain once these pieces are in place. So you can see from here that why Cloudflare is best of breed for z and a. So where things really differ is how easy it is to actually make that real. So because Cloudflare is actually runs every security service and in every global location, as I what I said previously, so v 10 a will have an access to stay fast, to connect with the users that, that have, nearest age instead of being that whole hallway across the world. Because if imagine that you stay in, like, Singapore, but you your your server might be from, far away, so it will be really, really slow. But since Cloudflare have coverage, a big coverage, within the global, so it ensures that the access will be fast. So we also rely on any cost, routing, which means traffic automatically routes around the network issues so that, our resilience zero trust assessment will be in, the ridden redundancy. So, importantly, that CloudFlare builds, SASE and SSE services on its own developer platform. So that let us shift faster, evolve as new protocols, tenders, and image, patterns so Cloudflare can innovate quickly. So in short, we do have, like, a simple setup that can provide a better performance to the user and a platform that keeps up with the changes. This is a really important things because if your, solution is not keep up with the technology revolution, it's kind, like, high for you guys to maintain, to that oil implementation. Yep. And it's also can protect your data. So Cloudflare will help reduce overall data exposure risk by giving the teams a unified visibility. So you actually can control to reduce your attack surface with this zero trust solution. And, also, the end result for an organization when you are applying zero trust in your, implementation is the first one, you will most secure with, protective, data protection. And then the second one, you will have more productive. So thanks to a faster enforcement and simpler connectivity. And the last one is more agile. So it it's quite flexible because, programmable and cognitive network makes it easier to adapt and innovate, and you can actually easily to integrate with, any, tools from, our partners. Yeah. So sorry? Okay. So moving to the next one, we will go to a demo so that you can understand better. And, actually, before we jump into a demo, I want to just let you know that, my demo is not cover all because we have, like, a very limited time. So today, I actually wants to cover a relation between the zero trust and AI because as we know that all of us are familiar with AI is because AI tools like TagGPT, Gemini, Deepsea are everywhere. So we use them mostly to refine emails. Usually, we are doing that thing. So summarize documents, write code, troubleshoot issues. But many organization or I can say employees, actually not realized that they are testing sensitive information into these tools, which is not a good a good practice for for the organization because it will lead to the, security risk. So what I want to show you in this demo is how zero trust changes that conversation. And instead of you block it I mean, you block you cannot use AI at all. You actually can, have, like, a granular control to make sure some of things, you unable to place it through the AI. So I will show it to you. Give me a moment. I'll share my screen. Hold on. Wait a minute. K. So you can see there are two there are two tab here. K. So this one is the zero trust, dashboard, which have, many features inside here that, your IT team can control, it. And this right side is the, the example of what can I say? The device that I have connected with my zero trust. So what I want to show you today is okay. Example. We have we have a configuration on AI gateway because I want to let you see the difference between these two, AI prom, which is Checkat g p t engine nine prom with these two. So I will allow anything, that I put into CheckGPT, so it will respond to me. But if on the Gemini site, when I put a prom, it will be blocked. So in detail, you can actually configure like this. So the application so the value is what application that you want to block or allow it. So there are many application inside here, and then you can also actually have a granular control based on the application control. So for today, I just want to show you a simple a simple, example. So I just click for the pro, and then I will have an allow action. So k. It's already saved. And then I try I will try to access it. Maybe Sorry for that. Okay. Maybe I will put Maybe. So you can see that it actually responds to your, to your prom. So this is an the block is, like, what we configure. But if for Gemini Example. For example. So you can actually see that it will have a pop up, block and let you know that, your action has been blocked because, your administrator is is actually have a lot of blocking rule for it. So the most interested part on, the log file, if you can see from here, this is the log file because since we have configured the HTTP firewall policy, so I will go to HTTP record. And I will apply the filters. Okay. For the Gemini, I think maybe it's take time, take a little bit time. So what what things that I want to show you as an IT admin, you actually can know what what kind of question or what kind of things that your user is input inside the, Checkatrade, which is you can, decrypt the prom log. Okay. Here. And then you can put the private, the private key. This one, before you can use this, you actually need to, need to generate a k p a a key pair of private and public, and then only you can, decrypt it. So when you decrypt it, you can see that what is actually your employees input inside the, AI. So yeah. So for the k. Going back to it. Let me I'm not really sure why it didn't maybe I will think. Hold on. Because I I already make the test before. I'm not really sure why it didn't, have maybe take some time to synchronize with the logs. So example, like, if you have a block a block action, so you can actually, like, click Can you have that Gemini one? You can actually click and also see the why is in why this, why this action has been blocked. So we have, like, AI implementation in our dashboard, which can tell you which, which rules that are blocked, the policy the, the request, and why is it has been blocked. Yep. So this is, the example of generate, because I I create a rules that block PII, which is, what sorry. Confidential information, cannot be prone inside the CheckatpT because it will be directly blocked. For example for example, can you rewrite me the email to my customer? For example, if Checkatrade notice that there is, I mean, our our interest notice that we are trying to paste a confidential information to through this AI tools so it will directly block the action. So it it can we can ensure that our employees do not, share any of this kind of information inside the, this AI tool. So for today, I just would like to, present this demo live only for this one, particularly. So if you want to know more about these features, what is inside it, you can actually, explore it using a free plan, Cloudflare account. Yeah. So that's all for the demo. I hope you can get something. And before we end our session, I would like to have one more boost, to ask you so that I can, actually understand that if you are actually I'm sorry for the wrong sound. Actually understand and actually interested get interested, to our solution. Yeah. So you can answer it. I hope you, can learn many things today. Maybe maybe it's not as detailed as you want it, but I also, provide many documents, at the document site so that you can, download it, then you can know more details about our solution and can see if it fits your needs and your, your, organization. So I can see that I can see that we are you many of you are quite interested using the zero trust. It's okay. You can have time to explore it. So right now, I would like to go to q and a session so that, maybe you have, like, some questions that you would like to ask or if there is any technical deep questions. So if there is, any technical deep question, maybe we can reach you through the email so that we can talk it further. Yeah. There is no any question. So perhaps that everyone maybe understand, the importance of the zero trust to replace the VPN. It's okay. I I can see the answer from the poll. There are some of organization, I mean, attendees today where their organization is still using VPN. It's okay. But maybe this is the starting point for you to get an idea to change it. So thank you for your time. I guess there is no any question and answer. Question. How to set up the demo and trail? So, this one, we will, we will get back to you through the email because this need to this need to have a proper process if you want to have a demo with us. I am managing okay. From Raj Saini. I am managing multi cloud GCP AWS as a and how to manage. Okay. This kind of, this kind of, request I mean, question, it will be, helpful for us to reach you from the email so that we can get more details on how, you want to set it up. So, Rastani, we will get back to you through email. Is it okay? Okay. Sure. So there is no any other most question, I guess. So thank you. Thank you for your time, to to to to learn and to join this webinar. I really appreciate for your time. So thank you. Bye bye.