{"id":102,"date":"2026-09-13T20:56:41","date_gmt":"2026-09-13T20:56:41","guid":{"rendered":"https:\/\/neranis.com\/?post_type=nrn_service&#038;p=102"},"modified":"2026-09-13T20:56:41","modified_gmt":"2026-09-13T20:56:41","slug":"acces-securise-a-distance-et-acces-reseau-a-faible-confiance","status":"publish","type":"nrn_service","link":"https:\/\/neranis.com\/fr\/services\/secure-remote-access-and-zero-trust-network-access\/","title":{"rendered":"Acc\u00e8s distant s\u00e9curis\u00e9 et acc\u00e8s r\u00e9seau Zero Trust"},"content":{"rendered":"<section class=\"wp-block-group nrn2-section nrn2-page-hero is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-breadcrumb wp-block-paragraph\"><a href=\"https:\/\/neranis.com\/fr\/\">Accueil<\/a> <span aria-hidden=\"true\">\/<\/span> <a href=\"https:\/\/neranis.com\/fr\/expertise\/\">Expertise<\/a> \/ <a href=\"https:\/\/neranis.com\/fr\/expertise\/securite-des-reseaux\/\">S\u00e9curit\u00e9 des r\u00e9seaux<\/a><\/p>\n\n\n<div class=\"wp-block-group nrn2-service-top nrn2-hero-layout-r3 is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-hero-split-copy is-layout-flow wp-block-group-is-layout-flow\">\n\n<p class=\"nrn2-kicker wp-block-paragraph\">NET \/ NET-04<\/p>\n\n\n<h1 class=\"wp-block-heading nrn2-title\">Acc\u00e8s distant s\u00e9curis\u00e9 et acc\u00e8s r\u00e9seau Zero Trust<\/h1>\n\n\n<p class=\"nrn2-lead wp-block-paragraph\">Donnez \u00e0 chaque utilisateur ou fournisseur un acc\u00e8s uniquement aux ressources n\u00e9cessaires apr\u00e8s v\u00e9rification de l'identit\u00e9 et des conditions d'acc\u00e8s. Le projet r\u00e9duit l'acc\u00e8s \u00e9tendu au r\u00e9seau sans pr\u00e9senter le mod\u00e8le Z\u00e9ro Trust comme un produit magique.<\/p>\n\n<\/div>\n\n\n<figure class=\"wp-block-image size-full nrn2-context-image nrn2-visual-asset-service-family-net\"><img loading=\"lazy\" decoding=\"async\" width=\"1600\" height=\"500\" src=\"https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-net.webp\" alt=\"\" class=\"wp-image-246\" srcset=\"https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-net.webp 1600w, https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-net-300x94.webp 300w, https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-net-1024x320.webp 1024w, https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-net-768x240.webp 768w, https:\/\/neranis.com\/wp-content\/uploads\/2026\/09\/service-family-net-1536x480.webp 1536w\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\" \/><\/figure>\n<\/div>\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-service-top is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-service-intro is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">QUAND C'EST UTILE<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Une r\u00e9ponse cibl\u00e9e<br>\u00e0 un besoin d\u00e9fini.<\/h2>\n\n\n<p class=\"nrn2-body-lg wp-block-paragraph\">Le travail \u00e0 distance, la maintenance des fournisseurs, les applications internes expos\u00e9es gr\u00e2ce \u00e0 des VPN trop permissifs ou la n\u00e9cessit\u00e9 de distinguer les appareils g\u00e9r\u00e9s et non g\u00e9r\u00e9s.<\/p>\n\n\n<div class=\"wp-block-buttons nrn2-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/neranis.com\/fr\/contact\/\">Discutez de ce service<\/a><\/div>\n\n<\/div>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-facts is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">EN UN COUP D'\u0152IL<\/p>\n\n\n<p class=\"wp-block-paragraph\"><strong>Famille<\/strong><br><a href=\"https:\/\/neranis.com\/fr\/expertise\/securite-des-reseaux\/\">S\u00e9curit\u00e9 des r\u00e9seaux<\/a><\/p>\n\n\n<p class=\"wp-block-paragraph\"><strong>Engagement<\/strong><br>Mise en \u0153uvre<\/p>\n\n\n<p class=\"wp-block-paragraph\"><strong>R\u00e9f\u00e9rence<\/strong><br>NET-04<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section nrn2-canvas is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-section-heading is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">PORT\u00c9E ET R\u00c9SULTATS<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Ce que couvre la mission.<\/h2>\n\n<\/div>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-delivery-grid is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-delivery-card is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Port\u00e9e<\/h3>\n\n\n<ul class=\"wp-block-list nrn2-list\">\n<li>Inventaire des utilisateurs et des applications<\/li>\n\n\n<li>SSO\/MFA<\/li>\n\n\n<li>politiques bas\u00e9es sur le r\u00f4le<\/li>\n\n\n<li>position du corps pendant l\u2019utilisation du dispositif, lorsque disponible<\/li>\n\n\n<li>Acc\u00e8s temporaire<\/li>\n\n\n<li>briques<\/li>\n\n\n<li>r\u00e9vocation<\/li>\n\n\n<li>acc\u00e8s d'urgence<\/li>\n\n<\/ul>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-delivery-card is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Livrables<\/h3>\n\n\n<ul class=\"wp-block-list nrn2-list\">\n<li>Architecture d'acc\u00e8s<\/li>\n\n\n<li>Catalogue de ressources<\/li>\n\n\n<li>r\u00e8gles sp\u00e9cifiques \u00e0 la population<\/li>\n\n\n<li>Processus de joignant et de d\u00e9couplage<\/li>\n\n\n<li>pilote utilisateur<\/li>\n\n\n<li>tests de d\u00e9ni<\/li>\n\n\n<li>Documentation de support<\/li>\n\n<\/ul>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-delivery-card nrn2-evidence is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Preuve de r\u00e9ception<\/h3>\n\n\n<p class=\"wp-block-paragraph\">L\u2019acc\u00e8s autoris\u00e9 est enregistr\u00e9 ; la suppression de l\u2019utilisateur est effective ; les ressources hors de leur \u00e9tat normal restent inaccessibles ; les sc\u00e9narios de perte de facteur et d\u2019interruption sont pris en compte.<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-section-heading is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">LIVRAISON<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Comment le travail est structur\u00e9.<\/h2>\n\n<\/div>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-two-col is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-prose is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Approche<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Cartographier le trafic ; concevoir et dimensionner ; piloter ; migrer progressivement avec possibilit\u00e9 de retour arri\u00e8re ; tester et documenter les op\u00e9rations.<\/p>\n\n\n<h3 class=\"wp-block-heading\">Pr\u00e9requis et responsabilit\u00e9s<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Client : r\u00e9seau, applications, op\u00e9rateurs, fen\u00eatres de changement et acceptation m\u00e9tier. Fournisseur : conception, migration et tests. L'acc\u00e8s des tiers et l'inspection TLS n\u00e9cessitent des approbations appropri\u00e9es.<\/p>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-prose is-layout-flow wp-block-group-is-layout-flow\">\n<h3 class=\"wp-block-heading\">Facteurs de port\u00e9e<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Sites, d\u00e9bit r\u00e9el inspect\u00e9, trafic, r\u00e8gles, utilisateurs distants, disponibilit\u00e9 et int\u00e9grations. Le mat\u00e9riel, les abonnements de s\u00e9curit\u00e9 et les op\u00e9rations r\u00e9currentes sont distincts.<\/p>\n\n\n<h3 class=\"wp-block-heading\">Questions \u00e0 clarifier<\/h3>\n\n\n<p class=\"wp-block-paragraph\">Qui acc\u00e8de \u00e0 quoi \u00e0 distance ? Les appareils sont-ils g\u00e9r\u00e9s ? Quelles applications ne peuvent-elles pas supporter les m\u00e9canismes d\u2019acc\u00e8s propos\u00e9s ?<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section nrn2-compact is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-boundaries is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">LIMITES IMPORTANTES<\/p>\n\n\n<p class=\"nrn2-body-lg wp-block-paragraph\">La protection d\u00e9pend de l\u2019identit\u00e9, des appareils et des applications. Un service ZTNA ne garantit pas en soi la s\u00e9curit\u00e9 de l\u2019ensemble du r\u00e9seau ou de chaque cas d\u2019utilisation.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Les modifications pr\u00e9servent les services essentiels et les parcours de r\u00e9tablissement. Le dimensionnement, les licences et les tests de recette refl\u00e8tent les fonctionnalit\u00e9s qui seront r\u00e9ellement activ\u00e9es.<\/p>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-section-heading is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">EN PRATIQUE<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Situations illustratives.<\/h2>\n\n<\/div>\n\n\n<p class=\"nrn2-section-lead wp-block-paragraph\">Ces exemples d\u00e9crivent des engagements possibles et des r\u00e9sultats cibles. Il ne s'agit pas de r\u00e9f\u00e9rences clients ni de r\u00e9sultats obtenus.<\/p>\n\n<\/div>\n\n\n<details class=\"wp-block-details nrn2-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Sc\u00e9nario 01<\/summary>\n<p class=\"wp-block-paragraph\">Une soci\u00e9t\u00e9 de conseil offre \u00e0 chaque consultant un acc\u00e8s complet au VPN. Probl\u00e9matique : limiter l\u2019acc\u00e8s aux applications assign\u00e9es et requ\u00e9rir une authentification solide. R\u00e9sultats vis\u00e9s : une s\u00e9paration v\u00e9rifiable entre les missions, avec des exceptions document\u00e9es pour les outils obsol\u00e8tes.<\/p>\n\n<\/details>\n\n\n<details class=\"wp-block-details nrn2-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Sc\u00e9nario 02<\/summary>\n<p class=\"wp-block-paragraph\">Un fabricant h\u00e9berge un prestataire de maintenance externe. Projet : acc\u00e8s limit\u00e9 dans le temps aux ressources agr\u00e9\u00e9es avec enregistrement des activit\u00e9s. Objectif : une maintenance sans acc\u00e8s permanent \u00e0 l\u2019environnement g\u00e9n\u00e9ral ; l\u2019acc\u00e8s est supprim\u00e9 apr\u00e8s acceptation.<\/p>\n\n<\/details>\n\n\n<details class=\"wp-block-details nrn2-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Contexte technologique et de r\u00e9f\u00e9rence<\/summary>\n<p class=\"wp-block-paragraph\">Exemples : solutions ZTNA, VPN segment\u00e9s et services d\u2019identit\u00e9 compatibles ; s\u00e9lectionner en fonction de protocoles, d\u2019endpoints et de contraintes op\u00e9rationnelles.<\/p>\n\n\n<p class=\"wp-block-paragraph\">L'ensemble final des technologies est convenu lors du cadrage, sur la base de l'interop\u00e9rabilit\u00e9, des licences, des droits d'acc\u00e8s et des exigences op\u00e9rationnelles.<\/p>\n\n<\/details>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-section-heading is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">SERVICES CONNECT\u00c9S<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Construisez l'\u00e9tape suivante.<\/h2>\n\n<\/div>\n\n\n<p class=\"nrn2-section-lead wp-block-paragraph\">Ces services peuvent compl\u00e9ter la mission. Ils ne sont pas inclus automatiquement.<\/p>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-related-grid is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-service-card is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-ref wp-block-paragraph\">PEN-02<\/p>\n\n\n<h3 class=\"wp-block-heading\"><a href=\"https:\/\/neranis.com\/fr\/services\/internal-and-assumed-breach-penetration-testing\/\">Tests d'intrusion internes et bas\u00e9s sur une compromission suppos\u00e9e<\/a><\/h3>\n\n\n<p class=\"nrn2-card-desc wp-block-paragraph\">Une \u00e9valuation de ce qu'un attaquant pourrait atteindre apr\u00e8s avoir obtenu un point d'ancrage interne initial, examinant les privil\u00e8ges excessifs et la faible s\u00e9paration.<\/p>\n\n\n<p class=\"nrn2-text-link wp-block-paragraph\"><a href=\"https:\/\/neranis.com\/fr\/services\/internal-and-assumed-breach-penetration-testing\/\">D\u00e9couvrir ce service <span aria-hidden=\"true\">\u2197<\/span><\/a><\/p>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-service-card is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-ref wp-block-paragraph\">NET-03<\/p>\n\n\n<h3 class=\"wp-block-heading\"><a href=\"https:\/\/neranis.com\/fr\/services\/detection-et-prevention-des-intrusions-dans-les-reseaux-ids-ip\/\">D\u00e9tection et pr\u00e9vention des intrusions sur le r\u00e9seau \u2014 IDS\/IPS<\/a><\/h3>\n\n\n<p class=\"nrn2-card-desc wp-block-paragraph\">Un IDS observe et alerte en cas d'activit\u00e9 suspecte ; un IPS peut \u00e9galement bloquer le trafic lorsqu'il est d\u00e9ploy\u00e9 en position de filtrage. Le service d\u00e9ploie, ajuste et connecte ces contr\u00f4les \u00e0 un processus de traitement.<\/p>\n\n\n<p class=\"nrn2-text-link wp-block-paragraph\"><a href=\"https:\/\/neranis.com\/fr\/services\/detection-et-prevention-des-intrusions-dans-les-reseaux-ids-ip\/\">D\u00e9couvrir ce service <span aria-hidden=\"true\">\u2197<\/span><\/a><\/p>\n\n<\/div>\n\n\n<div class=\"wp-block-group nrn2-service-card is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-ref wp-block-paragraph\">SOC-03<\/p>\n\n\n<h3 class=\"wp-block-heading\"><a href=\"https:\/\/neranis.com\/fr\/services\/collecte-de-journaux-et-deploiement-du-siem\/\">Collecte des journaux et d\u00e9ploiement du SIEM<\/a><\/h3>\n\n\n<p class=\"nrn2-card-desc wp-block-paragraph\">Centraliser les \u00e9v\u00e9nements de s\u00e9curit\u00e9 utiles et les rendre exploitables pour la recherche, les alertes et les investigations. Le projet aborde la qualit\u00e9, les horodatages, la r\u00e9tention et le co\u00fbt tout autant que l'installation de la plateforme.<\/p>\n\n\n<p class=\"nrn2-text-link wp-block-paragraph\"><a href=\"https:\/\/neranis.com\/fr\/services\/collecte-de-journaux-et-deploiement-du-siem\/\">D\u00e9couvrir ce service <span aria-hidden=\"true\">\u2197<\/span><\/a><\/p>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>\n\n\n<section class=\"wp-block-group nrn2-section is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-wrap is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group nrn2-cta is-layout-flow wp-block-group-is-layout-flow\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-kicker wp-block-paragraph\">Commencer une conversation<\/p>\n\n\n<h2 class=\"wp-block-heading nrn2-h2\">Clarifiez la port\u00e9e.<\/h2>\n\n<\/div>\n\n\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow\">\n<p class=\"nrn2-body-lg wp-block-paragraph\">Nous clarifierons l'objectif, les d\u00e9pendances et les responsabilit\u00e9s de ce service avant de proposer la livraison.<\/p>\n\n\n<div class=\"wp-block-buttons nrn2-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/neranis.com\/fr\/contact\/\">Discutez de vos priorit\u00e9s<\/a><\/div>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/div>\n\n<\/section>","protected":false},"excerpt":{"rendered":"<p>Donnez \u00e0 chaque utilisateur ou fournisseur un acc\u00e8s uniquement aux ressources n\u00e9cessaires apr\u00e8s v\u00e9rification de l'identit\u00e9 et des conditions d'acc\u00e8s. Le projet r\u00e9duit l'acc\u00e8s \u00e9tendu au r\u00e9seau sans pr\u00e9senter le mod\u00e8le Z\u00e9ro Trust comme un produit magique.<\/p>","protected":false},"featured_media":0,"template":"single-nrn_service","meta":{"footnotes":""},"nrn_family":[10],"class_list":["post-102","nrn_service","type-nrn_service","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_service\/102","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_service"}],"about":[{"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/types\/nrn_service"}],"version-history":[{"count":2,"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_service\/102\/revisions"}],"predecessor-version":[{"id":497,"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_service\/102\/revisions\/497"}],"wp:attachment":[{"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/media?parent=102"}],"wp:term":[{"taxonomy":"nrn_family","embeddable":true,"href":"https:\/\/neranis.com\/fr\/wp-json\/wp\/v2\/nrn_family?post=102"}],"curies":[{"name":"Bien jou\u00e9","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}