Block All Internet Access Except to Destinations You Trust
Restricted Internet Access, a CloudConnexa feature, builds an impenetrable wall around your network and the internet.
Allow Access to ONLY Configured Internet Destinations
Restricted Internet Access, a built-in CloudConnexa feature, allows you to block all internet access for select user groups and networks, except to the trusted configured internet destination, thus reducing the attack surface and shielding users from cyber threats. This is Zero Trust in practice: instead of implicitly trusting any destination a device can reach, Restricted Internet Access enforces a default-deny policy and grants access only to internet destinations you've explicitly approved.
Get a modern approach to secure network connectivity that meets the needs of a virtualized workforce
Restricted Internet Access reduces the need for additional security devices (e.g., UTM) by limiting communication to private and trusted internet destinations.
Security for IoT devices
Specialized devices don't need broad internet access; block their internet access to everything except necessary internet services.
IDS/IPS and tunneling
Traffic to trusted internet destinations is always encrypted and tunneled to your WPC; for additional security, Cyber Shield IDS/IPS functionality can now examine the traffic.
IP addresses and Domain Names
Trusted applications can be configured using both internet domain name and IP address ranges.
Reduce security costs
As the only internet destinations being accessed by devices are trusted public applications, the need to invest in a full stack of internet security tools decreases.
Restricted Internet Access and Zero Trust Network Access (ZTNA)
Restricted Internet Access is one of the built-in capabilities that make CloudConnexa a ZTNA solution, not just a VPN. Traditional network access assumes a device can reach anything it isn't explicitly blocked from; Zero Trust Network Access (ZTNA) flips that assumption — nothing is trusted by default, and access is granted only to specific, pre-approved destinations. Restricted Internet Access applies that same least-privilege model to internet traffic, which shrinks the attack surface for every connected user, device, and IoT endpoint.
Never trust, always verify
Every internet destination is denied by default; only explicitly approved apps and domains are reachable.
Enforce least privilege access
Users, devices, and IoT endpoints get exactly the internet access their role requires, and nothing more.
Reduce lateral movement and exposure
A device that can't reach the open internet can't be turned into a bridge for malware, phishing payloads, or data exfiltration.
Restricted Internet Access works alongside CloudConnexa's other ZTNA controls — including Device Identity Verification & Enforcement (DIVE) and Application-based Domain Routing — to build a complete Zero Trust Network Access (ZTNA) architecture. See how it fits into a broader ZTNA strategy on our Zero Trust Network Access (ZTNA) use case page.
FAQs
If you have any difficulties, we have collected all of the useful materials for this product in our video library, tutorials, and documentation. You can also browse CloudConnexa's features.Additional Features
Everything you need to know about the product and billing. Can’t find the answer you’re looking for? Please chat to support
Cyber Shield
Cyber Shield This built-in feature of CloudConnexa is an easy-to-use, customizable IDS/IPS and Content Filtering feature that protects remote access.
Cloud Protection/ZTNA
Don’t sacrifice safety for the benefits of the Cloud. Create a dedicated worldwide private overlay network, exclusively for your use, with CloudConnexa.
Application-based Domain Routing
Domain name awareness combined with sophisticated routing logic so you can define routes to connected networks using domain names.
See what nearly 20,000 customers, hundreds of partners, and all major cloud providers already know.
Jason K. REPAYEasy to configure options, add users, and that it has two factor authentication built in. You can configure the system to allow connections on common ports so that you're able to connect from pretty much anywhere in the world.
Johnathan B. Surry TelephoneConfiguring and updating my own server is super simple. In my experience, I've always had some difficulty setting up hardware VPN appliances, but OpenVPN was no-nonsense.
Alex H. DGDeanThe OpenVPN Access Server AMI is a great out of the box VPN solution for your AWS VPC...
John G. Anovys, LLCOpenVPN offers users a very simple and secure VPN option that is both economical and quick to install. Users are able to easily install it on their client devices.
Jeremy F. Intelligent PathwaysThe availability of client software for all operating systems and mobile devices means my customers can connect regardless of their setup.
Josh Wc. nexgen|packaging, LLCExcellent, flexible solution for our Azure environment.