Nowadays enterprise security requires a huge stack of security tools, and offencing that mindset, because connectivity is made on a fundamentally fluid model, where devices can make connections and send data to servers without absolutely no authentication whatsoever. 
The old mindset of stack in a tonn of security pranks on top of each other to sell a fundamentally flown architecture is just not working.
So we really need to rethink Connectivity.
Today, when clients want to communicate with servers the first thing they do – is to connect with them, and this occurs before the client has been authenticated. That means that the servers are exposed to every device on the network, they listen to every device, to every client, to every server, and every pre-render and switch. Every device on that network can make TCP connection to the server before any trust is established. 
Therefore, compromised clients will scan the network looking for servers and if a server or any of the applications have vulnerabilities - attackers will compromise them too. 
Then, users log into the service, typically with username and password or until on tokens. Credential Theft enables attackers to do the same, from any client, from anywhere on the network. 
Finally, for those highdive applications you had multifactor authentication to defeat credential theft. That makes a painful to your users and productivity will suffer. 
Precision access provides a total re-thinking of connectivity, precision access does MFA (Mulifactor authentication) first, then verifies the trust to the device before allowing the user to log-in. 
And finally, it enables trusted users on trusted devices to connect to authorized service . 
Using this methodology, it defeats server exploitation, credential theft, connection hijacking, and even compromised devices. The requirements for this methodology are:
1. Isolate the servers. You do that with gateway that isolates the protected applications from the network.
2. Separate the control plane from the data plane, so that we can pre-attest devices before providing access, we do this with high availability controller.
& 3. Only enable authorized users to access the controller. 
This is done with the same client and some cryptographic artifacts. 
Well let`s see it in the action. When the device boots up, the same client connects to the controller using it one time, cryptographic token, which is the multifactor authentication. 
And then the client sends the security context to the controller. After receiving this to applications, the user is authorized to access in the next step, the apps that are prohibited by the security context will be removed. 
Next. User logs into the controller and the applications here sheers authorized to access or attained. 
And finally, the controller sets up dynamic connections from the client to the gateways and from the gateways to the protected applications. 
PrecisionAccess is a tool rethinking how clients connect to servers. One that defeats server exploitation, credential theft, connection hijacking and compromised clients.