Getting started with Zero Trust "Black Cloud" Overlay

The Zero Trust "Black Cloud" Overlay is a managed service built on Zscaler Private Access. Moraph licenses, designs, configures and operates it so that your applications make only outbound connections and have no inbound listening ports or public IP addresses for an attacker to find. Access is decided per user, per device and per application by policy your organization approves, and every decision is logged for your security team and assessors.

What it is for

Many mission and business applications are still reached through VPN concentrators and firewall rules that expose an address and an open port to the internet. Once an attacker or a compromised device is on the network, the same flat access that lets staff reach their applications lets the attacker map and probe everything else. Programs are directed to move to zero trust, but the work of segmenting applications, rewriting access rules around identity and keeping the evidence for assessors falls on teams already running operations.

• Applications are reachable on public or network-wide addresses and can be discovered by scanning
• VPN access places users on a network rather than giving them a single application
• Access rules are written around IP addresses rather than people, devices and missions
• Evidence that access is limited and reviewed is hard to produce for assessors

Who uses it

• Defense and intelligence program offices moving applications to zero trust access
• Information system security managers and officers responsible for authorization evidence
• Network and security operations teams who run remote and site access today
• Mission application owners who need their systems reachable only by the people who use them
• Assessors and inspectors who review access controls and logs

Before you start

• Your organization uses Zero Trust "Black Cloud" Overlay as a managed platform from Moraph, under an agreement that covers it.
• Licences for Zscaler, bought through Moraph or under your own agreement with the vendor.
• A Moraph account in your organization for each person who works with Moraph on the service.
• Named technical and security contacts, recorded in the Moraph Portal.

Steps to get started

1. Agree the scope of the managed service for Zero Trust "Black Cloud" Overlay with Moraph, including which environments and teams it covers.

2. Name your administrators, technical contact and security contact in the Moraph Portal under People and access.

3. Review the configuration baseline Moraph proposes for your regulations, and record any changes you need.

4. Confirm how users will sign in, through your identity provider where the platform supports it.

5. Agree the pilot group and the cut-over plan with your Moraph delivery lead.

Where to go next

• Onboard Zero Trust "Black Cloud" Overlay
• Everyday tasks
• Connect your systems
• Security, data and compliance
• Troubleshooting and the support guide
• Product overview on moraph.com