Bowtie Private Access vs Forcepoint ZTNA

Bowtie Private Access creates encrypted connections from devices to private resources without routing traffic through intermediary networks. Its Zero Trust policies grant authenticated access according to user or device characteristics. Bowtie Internet Access adds web filtering enforced on the device rather than through a centralized gateway, while its policy engine can unify overlapping networks and segment access. The product uses WireGuard encryption; Bowtie says keys are generated and stored in the customer's environment and traffic does not pass through its cloud. Basic is free for up to 3 users, 2 devices per user, and 2 controllers. Essentials costs $11 a month per user and supports up to 1000 users, 3 devices per user, and 4 controllers. Enterprise pricing is custom. SSO options include Okta and Entra ID, with configurations also described for GitHub, GitLab, SAML, AWS Identity Center, and Google IDP. Essentials includes API access and a Terraform provider; Enterprise adds MDM deployment and SIEM integration. Bowtie supports iOS, Linux, macOS, web, and Windows, with client downloads for Mac, Windows, and Linux.

Forcepoint ZTNA provides controlled access to private applications from managed and unmanaged devices, including personal devices and contractor access. Its agentless and agent-based options let users reach internal applications without requiring a VPN service on their device. Administrators can base access policies on user or group, device type or operating system, management status, and location. Agent-based access supports private web applications and non-web protocols, including TCP applications through SmartEdge Agent. The product can proxy private-app traffic and apply inline data loss prevention controls intended to help prevent data leakage and malicious uploads or downloads. Forcepoint cites more than 190 predefined DLP policies and malware scanning for private web apps. Deployment requires a connector in the network hosting internal apps. Agent-based use requires SmartEdge Agent 1.6.1 or newer, and end-user machines must run Windows 10 or newer. Forcepoint says its AWS-based platform provides 99.99% service uptime with no planned downtime. The paid product has pricing on request and no free plan.