TMPros SASE FAQ

TMPros SASE is a cloud-native platform combining Zero Trust Network Access (ZTNA), Firewall-as-a-Service (FWaaS), and DNS filtering to replace legacy VPNs and secure distributed workforces. This document answers common questions regarding its architecture, security features, and deployment procedures.

Core Capabilities Overview

Service Component	Primary Function
Zero Trust Network Access (ZTNA)	Enforces least-privilege access and continuously verifies identity and context.
Firewall-as-a-Service (FWaaS)	Provides unlimited adaptive cloud firewall rules per tenant.
DNS & Web Filtering	Blocks threats like ransomware, phishing, and botnets in real-time.

General & Architecture

• What is TMPros SASE?
  It is an all-in-one Secure Access Service Edge platform designed for MSPs and enterprises to secure hybrid workforces, manage cloud firewalls, and control network access through a centralized dashboard.
• What security services does TMPros SASE replace?
  TMPros SASE consolidates and replaces legacy hardware VPNs, standalone DNS/web filtering agents, activity trackers, dark web monitoring tools, and legacy on-premises perimeter firewalls.
• How does traffic routing operate?
  The TMPros Connect client routes user traffic through encrypted tunnels to dedicated or shared cloud gateways hosted in regional data centers.

Zero Trust & Security Features

• How does Zero Trust Network Access (ZTNA) work in TMPros SASE?
  TMPros SASE continuously verifies user identity, device posture, geographic location, and behavioral context on every session, enforcing least-privilege access to scoped resources rather than granting broad network exposure.
• How does DNS and Web Filtering block threats?
  It performs real-time DNS filtering to block ransomware, zero-day malware drop servers, phishing domains, command-and-control botnets, and newly registered domains (registered within the last 30 days).
• Are there limits on cloud firewall rules?
  No. Administrators can create an unlimited number of adaptive cloud firewall rules and ZTNA access policies per tenant.

Deployment & Operations

• How long does setup take?
  Deployments can be completed in under 30 minutes via the TMPros Manager portal by assigning regional sites, creating user profiles, and deploying the client app.
• Do endpoints still need EDR software alongside TMPros SASE?
  Yes. While TMPros SASE secures network traffic, cloud gateways, and DNS access, Endpoint Detection and Response (EDR) software remains necessary to protect local endpoint processes and disk files.
• Which Identity Providers (IdPs) and MFA options are supported?
  TMPros SASE supports adaptive multi-factor authentication (MFA) triggered by risk factors (e.g., new device or location) and integrates directly with major IdPs like Microsoft Entra ID, Google Workspace, and Okta.
• Does TMPros SASE support split tunneling and dedicated static IPs?
  Yes. TMPros SASE supports custom split tunneling to direct corporate traffic through dedicated static IPs while offloading non-essential web traffic to preserve bandwidth.