NPass PDP is a Policy Decision Point that follows the architecture of Korea's MSIT Zero Trust Guidelines 2.0. It controls on-site switches, wireless APs and remote access under a single policy.
The common cause of recent major breaches was not the failure of any individual product. It was the implicit trust that "inside is safe."
Once a single management server is compromised, internal credentials carry the attacker through everything.
Once through the VPN or logged in once, movement and access are effectively unlimited.
Former employees' accounts and unregistered equipment keep accessing the internal network.
The core principles set out in the Ministry of Science and ICT's Zero Trust Guidelines 2.0 (December 2024).
| No | Core principle | How NPass answers it |
|---|---|---|
| 01 | Trust no access; verify explicitly before allowingKeep watching even after successful authentication, and require additional authentication or end the session when something looks suspicious. | The trust evaluation engine keeps verifying during the session |
| 02 | Consistent, centralized policy management and access controlManage policy in a single Policy Decision Point (PDP) so that permission changes such as departures take effect immediately. | NPass PDP decides policy for on-site and remote access in one place |
| 03 | Management of users and devices, strong authenticationKeep an inventory of internal users and devices, authenticate users strongly and manage device state. | Device registration in the self-service portal, certificate‑based 802.1X authentication, biometric MFA |
| 04 | Resource classification and least privilegeControl access finely by subject and resource, so a single compromised system does not spread damage. | Dynamic VLAN by user and device, remote access that connects only permitted services |
| 05 | Logical boundaries, per-session access, protected communicationsPlace logical boundaries between resources, manage access per session and protect data in transit. | An access token issued for each session, encrypted remote access |
| 06 | Monitoring and logging of all states, continuous verification of trustObserve all the state information needed to evaluate trust, and evaluate and audit it in real time. | Access logs and real-time dashboard in the unified management console |
NPass PDP is a Policy Decision Point that controls several kinds of Policy Enforcement Points (PEPs) together. The same policy applies no matter which path the connection takes.
Policy Enforcement Points that can be integrated
Primary and secondary authentication results, device information and OS, whether required apps are installed, location and permission level are gathered in real time.
Real-time trust evaluation and threat evaluation are combined to determine the risk of a connection.
Allows or denies access, and requires additional authentication when needed.
Verification continues after successful authentication, responding immediately to suspicious situations.
A free IP visibility assessment is not a big project. We agree the scope and timeframe, and you get numbers you can report to management.
Request a consultation and we will get back to you within 24 hours.