As mentioned, the CloudGen Access architecture relies on three main components:
Agent (CloudGen Access App)
Proxy (CloudGen Access Proxy)
Administration Console (CloudGen Access Enterprise Console)
The CloudGen Access agent operates at the network layer. When a device starts a connection to a protected resource, the CloudGen Access agent intercepts it and opens an mTLS connection with the CloudGen Access Proxy, also sending the device and user attributes to the CloudGen Access Enterprise console, which then evaluates the policy, checks the attributes, and allows or denies the connection to the resource. Admins can configure policies on the CloudGen Access Enterprise Console UI.
We also provide an API for the CloudGen Access Enterprise Console functionality, as well as a thin wrapper around it as a command-line utility - CloudGen Access CLI.
