[{"data":1,"prerenderedAt":811},["ShallowReactive",2],{"header-announcements":3,"customer-success-story-closing-the-wetransfer-gap-how-de-hooge-waerder-built-sovereign-sse":295,"recent-stories-sidebar":791},[4,10,16,22,27,33,37,43,49,54,60,66,72,76,82,88,94,99,105,111,117,123,129,135,141,147,153,159,165,171,177,183,189,195,201,207,213,219,225,231,237,243,249,255,261,267,273,278,283,289],{"slug":5,"title":6,"description":7,"createdAt":8,"date":9},"zenconsole-maintenance-october-2026","Scheduled Maintenance for Zenconsole","We would like to inform you about the upcoming scheduled maintenance for Zenconsole, during which the system will be temporarily unavailable.","2026-10-15 12:00","October 15, 2026",{"slug":11,"title":12,"description":13,"createdAt":14,"date":15},"legacy-cti-cloud-endpoints-retirement","Important Notice: Retirement of Legacy CTI Cloud Endpoints for Zenarmor Versions Prior to 2.1 (Effective October 31, 2026)","Legacy CTI cloud endpoints for Zenarmor versions prior to 2.1 will be retired on October 31, 2026. Upgrade to the latest release to maintain live threat protection.","2026-09-24","September 24, 2026",{"slug":17,"title":18,"description":19,"createdAt":20,"date":21},"zenarmor-recognized-as-a-winner-in-the-2026-q2-product-awards-by-products-that-count","Zenarmor Recognized as a Winner in the 2026 Q2 Product Awards by Products That Count","Zenarmor has been named a winner in the Cybersecurity category of the 2026 Q2 Product Awards by Products That Count, recognized among just 73 winners selected from more than 1,000 nominations across cybersecurity, healthcare, and fintech.","2026-08-03 11:00","August 3, 2026",{"slug":23,"title":24,"description":25,"createdAt":26,"date":21},"why-zenarmor-sase-was-named-a-2026-msp-today-product-of-the-year-award-winner","Why Zenarmor SASE Was Named a 2026 MSP Today Product of the Year Award Winner","Zenarmor SASE has been recognized as a 2026 MSP Today Product of the Year Award winner by TMC's MSP Today, honoring products that deliver meaningful innovation, measurable customer value, and real impact for managed service providers and the channel.","2026-08-03 10:00",{"slug":28,"title":29,"description":30,"createdAt":31,"date":32},"zenarmor-selected-as-a-finalist-in-the-2026-top-infosec-innovator-awards","Zenarmor Selected as a Finalist in the 2026 Top InfoSec Innovator Awards for the SASE Category","Recognizing Zenarmor's commitment to simplifying enterprise network security for today's distributed organizations. Zenarmor has been selected as a finalist in Cyber Defense Magazine's 2026 Top InfoSec Innovator Awards, with finalists officially announced at Black Hat USA 2026.","2026-07-27 10:00","July 27, 2026",{"slug":34,"title":6,"description":7,"createdAt":35,"date":36},"zenconsole-maintenance-announcement","2026-05-18 20:30","May 18, 2026",{"slug":38,"title":39,"description":40,"createdAt":41,"date":42},"zenarmor-extends-sase-architecture-to-mobile-and-containerized-environments","Zenarmor Extends Industry-First Distributed SASE Architecture","Advancements to the Zenarmor SASE Anywhere Architecture™ Enable Sovereign SASE Deployments Across Partner- and Customer-operated Infrastructure","2026-03-18 08:00","March 18, 2026",{"slug":44,"title":45,"description":46,"createdAt":47,"date":48},"zenarmor-named-finalist-2026-sc-awards-best-sase-solution","Zenarmor Named as Finalist in the 2026 SC Awards Program","Zenarmor Named as Finalist in the 2026 SC Awards Program for Best SASE Solution","2026-03-11 08:00","March 11, 2026",{"slug":50,"title":51,"description":51,"createdAt":52,"date":53},"zenarmor-wins-tmcnet-zero-trust-security-excellence-award","Zenarmor Wins TMCnet Zero Trust Security Excellence Award","2026-03-03 08:00","March 3, 2026",{"slug":55,"title":56,"description":57,"createdAt":58,"date":59},"EMA-names-Zenarmor-a-Vendor-to-Watch","Analyst Recognition","Enterprise Management Associates (EMA) Names Zenarmor a Vendor to Watch","2026-02-26 08:00","February 26, 2026",{"slug":61,"title":62,"description":63,"createdAt":64,"date":65},"zenarmor-launches-industry-first-architecture-driven-sase-channel-partner-program","Press Release","Zenarmor Launches Industry-First Architecture-Driven SASE Channel Partner Program","2026-02-24 08:00","February 24, 2026",{"slug":67,"title":68,"description":69,"createdAt":70,"date":71},"privacy-update","Privacy Update","We've updated our list of third-party service providers in accordance with our Privacy Policy and Data Processing Addendum (DPA).","2026-01-22 15:00","January 22, 2026",{"slug":73,"title":6,"description":7,"createdAt":74,"date":75},"maintenance-announcement","2025-06-25 00:20","June 25, 2025",{"slug":77,"title":78,"description":79,"createdAt":80,"date":81},"zenarmor-network-security-stack-now-natively-supports-macos","Zenarmor’s Network Security stack now natively supports macOS","We’re excited to announce that Zenarmor is now deployable to macOS devices! With this latest expansion, Zenarmor continues providing seamless network security for distributed workforces, ensuring that organizations can protect their users no matter where or what device they use.","2025-02-15 18:00","February 15, 2025",{"slug":83,"title":84,"description":85,"createdAt":86,"date":87},"zenarmor-achieves-soc2-certification","Zenarmor Achieves SOC 2 Certification: A Milestone in Data Security","We are pleased to announce that Zenarmor has achieved SOC 2 Compliance Certification, a globally recognized standard for ensuring data security, availability, and confidentiality. This certification reflects our commitment to maintaining the highest standards for protecting your information.","2025-01-29 18:00","January 29, 2025",{"slug":89,"title":90,"description":91,"createdAt":92,"date":93},"european-office-in-frankfurt","Zenarmor Expands Global Presence with New Office in Frankfurt","Founded in 2017, Zenarmor has rapidly grown to serve over 20,000 active edge deployments in 158 countries across 7 continents, protecting networks ranging from homelab networks to large enterprises.","2024-10-30 5:00","October 30, 2024",{"slug":95,"title":6,"description":96,"createdAt":97,"date":98},"scheduled-maintenance-for-zenconsole","We want to inform you about an upcoming scheduled maintenance for Zenconsole.","2024-10-18 12:20","Oct 18, 2024",{"slug":100,"title":101,"description":102,"createdAt":103,"date":104},"your-voice-matters-what-you-wanted-and-what-is-in-the-works","Your Voice Matters: What you wanted and what's in the works","Our customers are some of the best in the field, and they demand the best from us. This is precisely why our customers love Zenarmor’s home subscription. It’s widely regarded as the top solution on the market that delivers enterprise-grade protection, even for home and home lab environments. However, this also presents us with a unique challenge: how do we continue offering enterprise-level protection at a home-lab price point while ensuring that the home lab tier is used solely for personal, non-commercial purposes?","2024-10-16 5:00","October 16, 2024",{"slug":106,"title":107,"description":108,"createdAt":109,"date":110},"important-changes-in-legal-documents","Important annoucement: Changes in Terms of Service, Terms of Use, and Privacy Policy","We've made some updates to our Privacy Policy, Website Terms of Use, Terms of Service, and more, designed to clarify our practices.","2024-05-23 12:20","May 23, 2024",{"slug":112,"title":113,"description":114,"createdAt":115,"date":116},"zenarmor-1-17-highlights-from-tls-inspection-to-sso","Zenarmor 1.17 Highlights: From TLS Inspection to SSO","The latest update from Zenarmor is here, and it’s packed with powerful features and enhancements that promise to strengthen network security. Release 1.17 introduces critical capabilities such as Full TLS Inspection, enhanced Elasticsearch 8 support, and expanded platform compatibility with ARM 64-bit on FreeBSD 13.x, alongside the Single Sign-On (SSO) feature for Microsoft accounts to Zenconsole.","2024-04-25 5:00","April 25, 2024",{"slug":118,"title":119,"description":120,"createdAt":121,"date":122},"the-ideal-duo-opnsense-and-zenarmor-for-enterprises","The Ideal Duo: OPNsense and Zenarmor for Enterprises","In a recent webinar collaboration between OPNsense and Zenarmor, Ad Schellevis, the CIO of OPNsense, and Lyal Saayman, the product manager at Zenarmor, took center stage as presenters. Schellevis, one of the founders of the OPNsense project, and Saayman, representing Zenarmor, emphasized the collaborative nature of the webinar, aiming to provide insights into how their companies work together.","2024-03-28 18:00","March 28, 2024",{"slug":124,"title":125,"description":126,"createdAt":127,"date":128},"zenarmor-and-threat-intelligence-unite-for-unmatched-security","Convergence with Purpose: Zenarmor and Threat Intelligence Unite for Unmatched Security","In this article, we'll look at how CTI enhances Zenarmor's risk detection and prevention abilities and how it supports businesses in adopting a unified, comprehensive cybersecurity strategy that is in line with their beliefs and business objectives.","2024-01-15 5:00","January 15, 2024",{"slug":130,"title":131,"description":132,"createdAt":133,"date":134},"not-just-an-update-zenarmor-1-16","Not Just an Update, Zenarmor 1.16: A Major Leap Forward in Enterprise and MSSP Network Management","We have reached the end of another successful year at Zenarmor, with the third and final major release of Zenarmor for 2023 ready for you to download. Like with all the previous major releases this year, Zenarmor 1.16 includes new, fresh capabilities and tools that will ultimately help you create a formidable defense against bad actors and improve your overall network security posture, regardless of where you choose to deploy Zenarmor, on-prem or in the cloud.","2023-12-19 5:00","December 19, 2023",{"slug":136,"title":137,"description":138,"createdAt":139,"date":140},"getting-ready-for-zenarmor-1-16","Getting Ready for Zenarmor 1.16","Zenarmor 1.16 will be available soon, introducing significant key capabilities like Device Identification, Device Access Control, and Community ID flow hashing, enhancing network security.","2023-12-14 5:00","December 14, 2023",{"slug":142,"title":143,"description":144,"createdAt":145,"date":146},"zenarmor-102-securing-your-network","Zenarmor 102: Securing Your Network","The recent webinar \"Zenarmor 102 Technical Demo and Configuration Tips\" was a pivotal event that offers participants a deep dive into the technical intricacies of Zenarmor.","2023-12-06 18:00","December 6, 2023",{"slug":148,"title":149,"description":150,"createdAt":151,"date":152},"upgrade-your-cloud-experience-with-premium-management","Upgrade Your Cloud Experience with Premium Management","Are you getting the most out of your cloud security solution? If you are using the free edition of Zenarmor, you might be missing out on some powerful features that can take your cloud experience to the next level. Zenarmor is an appliance-free, all-software, lightweight, next-generation firewall that provides comprehensive security for your network.","2023-11-02 6:00","November 2, 2023",{"slug":154,"title":155,"description":156,"createdAt":157,"date":158},"zenarmor-101-components-and-benefits","Zenarmor 101: Components and Benefits","In a world increasingly dominated by digital interactions, cybersecurity is paramount. Among the many tools available to safeguard your network, Zenarmor stands out as a powerful add-on to OPNsense, an open-source firewall and routing platform. A recent webinar shed light on this dynamic duo, showcasing how Zenarmor enhances OPNsense and fortifies network security. Here's a recap of the crucial takeaways and why this webinar matters.","2023-10-23 18:00","October 23, 2023",{"slug":160,"title":161,"description":162,"createdAt":163,"date":164},"end-of-life-eol-notice-for-zenarmor-support","End-of-Life (EOL) Notice for Zenarmor Support","We wish to bring to your attention important end-of-life information concerning Zenarmor support for FreeBSD 11, OPNsense 20.1, Debian 9, and Ubuntu 18.04","2023-10-11 18:00","October 11, 2023",{"slug":166,"title":167,"description":168,"createdAt":169,"date":170},"introducing-zenarmor-1-15-new-zenconsole-dashboard-features-and-improvements-for-a-better-enterprise-and-mssp-user-experience","Introducing Zenarmor 1.15: New full-featured role-based multi-tenancy support and UI enhancements for an improved enterprise and MSSP user experience","Zenarmor 1.15 has just been released, offering some important new and improved capabilities with a focus on providing a better-performing dashboard experience overall while introducing useful features that enterprises and MSSPs can leverage to more efficiently manage administrative users and their roles across multi-tenant and large enterprise Zenarmor NGFW deployments.","2023-09-20 5:00","September 20, 2023",{"slug":172,"title":173,"description":174,"createdAt":175,"date":176},"introducing-zenarmor-1-14-opnsense-interface-improvements-through-zenconsole-integration","Introducing Zenarmor 1.14: OPNsense interface improvements through Zenconsole integration","Zenarmor 1.14 has just arrived offering some modern visual and functional GUI improvements made to the built-in OPNsense dashboard. At first glance, you will notice a familiar design language and layout that has been carried through from Zenconsole, including all the functionality that we have all come to know and love.\n\u003Cbr>\u003Cbr>\nIn this article, we will be discussing why this change was necessary and we will also take a quick look at what the new interface has to offer, we do however encourage you to download Zenamor 1.14 and experience it for yourself.\n","2023-08-31 5:00","August 31, 2023",{"slug":178,"title":179,"description":180,"createdAt":181,"date":182},"best-practices-for-upgrading-zenarmor-to-v1-14","Best Practices for Upgrading Zenarmor to v1.14","Even though it has been rigorously tested by the Zenarmor team and upgrading to Zenarmor is a simple procedure that allows you to upgrade your system without incident, it is best to be prepared for Murphy. It is crucial to proceed with caution to avoid disruptions and data loss.\n\u003Cbr>\nIn this post, we will give you a hand in upgrading your Zenarmor NGFW smoothly. If you follow the advice below, the process can be relatively straightforward and have minimal impact on your business.\n","2023-08-03 5:00","August 3, 2023",{"slug":184,"title":185,"description":186,"createdAt":187,"date":188},"what-is-in-a-name-from-sunny-valley-networks-to-zenarmor-our-journey-of-rebranding","What’s in a Name? From Sunny Valley Networks to Zenarmor: Our Journey of Rebranding","As companies evolve and grow, it's natural to reassess your brand identity to better reflect your values and mission. That's why we're excited to announce that we're rebranding Sunny Valley Networks to Zenarmor. This change comes after careful consideration and reflection on our company's journey and what we want to represent moving forward.","2023-06-06 7:00","June 6, 2023",{"slug":190,"title":191,"description":192,"createdAt":193,"date":194},"introducing-zenarmor-1-13-an-mssp-and-enterprise-decision-makers-guide-to-how-these-new-and-improved-capabilities-can-enhance-overall-cyber-security","Introducing Zenarmor 1.13: An MSSP and Enterprise decision-makers Guide to how these new and improved capabilities can enhance overall cyber security","The greatly anticipated release of Zenarmor 1.13 has just arrived and offers important new and improved capabilities that both technical and business decision-makers will find helpful when implementing security solutions to strengthen their overall enterprise cyber security posture. Let's deep dive into the details of Zenarmor 1.13 and how these new improvements will benefit your business!","2023-05-4 5:00","May 4, 2023",{"slug":196,"title":197,"description":198,"createdAt":199,"date":200},"zenconsole-is-moving-to-its-new-domain","Zenconsole is Moving to its New Domain - dash.zenarmor.com","We’re excited to let out customers know that Zenconsole has moved to its new domain with new improvements to provide advanced cybersecurity","2023-04-13 18:00","April 13, 2023",{"slug":202,"title":203,"description":204,"createdAt":205,"date":206},"zenarmor-adds-brightcloud-database-to-its-threat-intelligence-platform-to-further-increase-threat-protection-coverage","Zenarmor Adds BrightCloud™ Database to its Threat Intelligence Platform to further increase Threat Protection Coverage","On top of Zenarmor's already existing AI-based Threat Intelligence that covers more than 300M+ sites instantly, BrightCloud® will add the threat intelligence for an additional number of 1+ Billion domains, evaluate 43+ Billion URLs and recognize and block malicious URLs and IPs, bringing advanced cyber protection for Business Edition users.","2023-03-30 18:00","March 30, 2023",{"slug":208,"title":209,"description":210,"createdAt":211,"date":212},"zenarmor-is-excited-to-set-forth-our-partnership-with-picopc-to-bring-cybersecurity-solutions-and-contribute-towards-more-robust-data-security-and-protection","Zenarmor is excited to set forth our partnership with PICOPC to bring Cybersecurity Solutions and contribute towards more robust Data Security & Protection","PICOPC & Zenarmor Partnership Announcement","2023-03-22 12:20","March 22, 2023",{"slug":214,"title":215,"description":216,"createdAt":217,"date":218},"changes-to-our-legal-documents","Changes To Our Legal Documents","We, at Zenarmor have made changes to our Privacy Policy, Terms of Use, and Terms of Conditions and wanted to share the update with you.","2023-03-14 12:20","March 9, 2023",{"slug":220,"title":221,"description":222,"createdAt":223,"date":224},"zenarmor-founder-and-ceo-murat-balaban-will-set-the-stage-for-telecom-council-roundtable","Zenarmor Founder & CEO Murat Balaban will set the stage for Telecom Council Roundtable with his opening presentation on the future of SASE","Telecom Council Roundtable will welcome major players from the technology community including Verizon, Ericsson, Orange Telecom, and Deutsche Telekom. Presentation on the future of SASE and the opportunities for innovation will be presented by Zenarmor’s Founder & CEO Murat Balaban.","2023-02-08 00:20","January 10, 2023",{"slug":226,"title":227,"description":228,"createdAt":229,"date":230},"why-does-an-open-source-firewall-provide-the-best-next-generation-firewall","Zenarmor CEO Murat Balaban joins Cloudfence CTO Julio Camargo","Zenarmor CEO Murat Balaban joins Cloudfence CTO Julio Camargo to deep dive into the subject 'Why does an open source firewall provide the best Next Generation Firewall?' in Cyber & Cloud Expo Portugal.","2022-11-16 1:30","November 16, 2022",{"slug":232,"title":233,"description":234,"createdAt":235,"date":236},"zenarmor-1-12-release-for-mssps-and-enterprises","Introducing Zenarmor 1.12: Important New Capabilities for MSSPs and Enterprises","The latest release of Zenarmor is here, delivering a whole new level of network security for your business. Without further ado, let us introduce…","2022-10-28 5:00","October 28, 2022",{"slug":238,"title":239,"description":240,"createdAt":241,"date":242},"introducing-our-latest-release-zenarmor-1-11","Your network security has just become stronger than ever with Zenarmor's new 1.11 release","Based on customer input, we’re very pleased to announce the release of Zenarmor 1.11. Let’s take a quick look at the new features included in Zenarmor 1.11.","2022-03-31 13:45","March 31, 2022",{"slug":244,"title":245,"description":246,"createdAt":247,"date":248},"landitec-is-now-the-official-distributor-of-zenarmor-ngfw-plug-in","Landitec is now the official distributor of Zenarmor’ NGFW Plug-In","The German network equipment distributor Landitec® officially announces its partnership with the Californian network security solution provider Zenarmor, extending the range of high-quality open source firewall services for customers.","2022-01-20 00:20","January 20, 2022",{"slug":250,"title":251,"description":252,"createdAt":253,"date":254},"apache-log4j-status-update","Apache log4j Status Update","Latest information about the Apache Log4j RCE and if and how it affects Zenarmor","2021-12-19 13:45","December 19, 2021",{"slug":256,"title":257,"description":258,"createdAt":259,"date":260},"zenarmor-better-cloud-management","Zenarmor 1.10 A Much Better Cloud Portal!","After a four-month marathon, we’re super excited to announce the public availability of Zenarmor 1.10 release. Managing your Zenarmor instances becomes a lot easier thanks to the new capabilities introduced with the Cloud Management Portal.","2021-10-16 13:32","Oct 16, 2021",{"slug":262,"title":263,"description":264,"createdAt":265,"date":266},"sensei-is-now-zenarmor","Sensei is now Zenarmor","As of today we're thrilled to announce that we'll be rebranding Sensei as Zenarmor. We’ll be getting a new logo with a new brand name, but our beloved next generation firewall plug-in will remain the same.","2021-09-02 23:45","September 14, 2021",{"slug":268,"title":269,"description":270,"createdAt":271,"date":272},"regulatory-authority-of-the-republic-of-lithuania-recommends-zenarmor","Zenarmor is recommended by the Regulatory Authority of the Republic of Lithuania","Regulatory Authority of the Republic of Lithuania (RRT) recommends Zenarmor as the go-to network protection solution for all nationwide academic institutions like schools, colleges, universities and libraries.","2020-12-15 12:00","December 15, 2020",{"slug":274,"title":275,"description":275,"createdAt":276,"date":277},"status-on-the-netmap-improvement-efforts-for-opnsense-20-7","Status on the netmap improvement efforts for OPNsense 20.7","2020-07-25 01:23","July 25, 2020",{"slug":279,"title":280,"description":280,"createdAt":281,"date":282},"spiceworld-selects-zenarmor-amongst-top-10-hot-startups","SpiceWorld selects Zenarmor amongst top 10 hot startups","2020-01-30 12:00","October 15, 2018",{"slug":284,"title":285,"description":286,"createdAt":287,"date":288},"zenarmor-premium-features-guide-released","Zenarmor Premium Features Guide released","Zenarmor Premium Features extend the capabilities of OPNsense to include advanced security and threat protection with near-real-time threat feeds","2020-01-04 07:20","January 4, 2020",{"slug":290,"title":291,"description":292,"createdAt":293,"date":294},"zenarmor-home-subscription-now-available-for-opnsense","Zenarmor HOME Subscription Now Available for OPNSense","Zenarmor Home brings advanced security to OPNsense Home users. You can easily subscribe to the Home Edition via the Zenarmor User Interface.","2019-11-29 06:58","November 29, 2019",{"id":296,"title":297,"author":298,"authorImage":299,"authorTitle":300,"authorUrl":300,"badgeLabel":300,"badgeVariant":300,"body":301,"createdAt":778,"date":779,"description":780,"extension":781,"img":782,"imgAltText":783,"meta":784,"navigation":785,"path":786,"readingTime":300,"seo":787,"sitemap":300,"slug":788,"stem":789,"updatedAt":300,"__hash__":790},"customerSuccessStories\u002Fcustomer-success-stories\u002Fclosing-the-wetransfer-gap-how-de-hooge-waerder-built-sovereign-sse.md","Closing the WeTransfer Gap: How De Hooge Waerder Built Sovereign SSE","Zenarmor Marketing Team","\u002Fimages\u002Fblog\u002Fzenarmor-icon-pp.png",null,{"type":302,"value":303,"toc":761},"minimark",[304,333,337,342,348,354,360,366,370,381,384,387,390,393,419,423,426,429,433,436,462,471,475,478,516,519,523,526,529,543,546,549,562,566,569,572,592,595,599,602,605,608,628,631,635,643,646,659,663,666,715,719,722,725,729,732,735,738,741,745,748,751,754],[305,306,307,315,321,327],"ul",{},[308,309,310,314],"li",{},[311,312,313],"strong",{},"235"," users protected",[308,316,317,320],{},[311,318,319],{},"0"," unauthorised WeTransfer uploads*",[308,322,323,326],{},[311,324,325],{},"85%"," below quoted ZTNA price",[308,328,329,332],{},[311,330,331],{},"7 years"," customer relationship",[334,335,336],"p",{},"*Customer-reported after deployment",[338,339,341],"h2",{"id":340},"at-a-glance","At a Glance",[334,343,344,347],{},[311,345,346],{},"Company:"," De Hooge Waerder, a Dutch full-service accountancy and advisory firm founded in 1980.",[334,349,350,353],{},[311,351,352],{},"Challenge:"," Prevent confidential client files from being uploaded to WeTransfer and other unauthorised cloud services, with consistent enforcement across Windows and iOS.",[334,355,356,359],{},[311,357,358],{},"Solution:"," Zenarmor Security Service Edge (SSE) on OPNsense, including cross-platform endpoint enforcement, action-level cloud controls, CASB, TLS inspection, and centralized management through Zenconsole.",[334,361,362,365],{},[311,363,364],{},"Outcome:"," 235 users protected, zero unauthorized WeTransfer uploads reported after deployment, no user-facing outage, five sites managed centrally, and an annual SSE list price approximately 85% below an enterprise vendor’s quote for  ZTNA alone.",[338,367,369],{"id":368},"the-challenge-stop-confidential-client-data-from-leaving-through-the-front-door","The Challenge: Stop Confidential Client Data From Leaving Through the Front Door",[334,371,372,373,380],{},"Founded in 1980, ",[374,375,379],"a",{"href":376,"rel":377},"https:\u002F\u002Fdehoogewaerder.nl\u002F",[378],"nofollow","De Hooge Waerder"," is a Dutch full-service accountancy and advisory firm with approximately 200 professionals across five offices, more than 3,000 clients, and annual revenue exceeding €23 million. Its services span accountancy, tax, audit, legal, payroll, and corporate finance. Ranked among the top 40 Dutch accountancy firms, De Hooge Waerder is also a member of Nexia, a global network of independent accounting and advisory firms spanning more than 100 countries.",[334,382,383],{},"That scale creates a demanding information-security environment: highly confidential client data, a growing workforce, multiple offices, cloud applications, and employees who need to work productively from different devices and locations.",[334,385,386],{},"At De Hooge Waerder, a potentially damaging security event could begin with a completely ordinary action: an employee uploading a confidential client file to WeTransfer because it was the fastest way to send it. For a firm entrusted with financial, tax, legal, payroll, and corporate-finance information, that moment of convenience could become a data-protection incident.",[334,388,389],{},"The firm needed to prevent unauthorized uploads without stopping legitimate work, and it needed the same policy to follow users across Windows and iOS. The core requirement was precise: keep the service usable, stop the risky action, and create evidence that the control was working.",[334,391,392],{},"Microsoft Conditional Access helped govern access in the firm’s Microsoft environment, but it did not deliver the consistent, action-level enforcement De Hooge Waerder needed across its mixed device estate. In particular, the team could not apply the WeTransfer upload restriction uniformly to iOS users.",[305,394,395,401,407,413],{},[308,396,397,400],{},[311,398,399],{},"A uniform policy response:"," A user should not be able to upload a confidential client file to WeTransfer from a device outside the effective policy scope.",[308,402,403,406],{},[311,404,405],{},"Protection beyond the gateway:"," Gateway-only inspection could not protect traffic that never passed through the office gateway.",[308,408,409,412],{},[311,410,411],{},"Windows and iOS coverage:"," Windows controls did not solve the iOS gap.",[308,414,415,418],{},[311,416,417],{},"Demonstrable enforcement:"," A written policy was not enough; the firm needed enforceable, auditable proof.",[338,420,422],{"id":421},"a-six-figure-alternative-and-a-better-path-to-proof","A Six-Figure Alternative and a Better Path to Proof",[334,424,425],{},"The IT team evaluated several options. One enterprise vendor quoted approximately €200,000 per year for ZTNA alone. That price was difficult to justify for a mid-sized professional-services firm with broader cloud and endpoint security needs.",[334,427,428],{},"Zenarmor changed the buying motion. The team first discovered the platform through the OPNsense community and could validate it before making a large commitment. At an annual list price of €29,000 for the 235-user SSE deployment, Zenarmor was approximately 85% below the enterprise ZTNA quote, a difference of approximately €171,000 per year between the quoted prices. Long-standing customer upgrade discounts made De Hooge Waerder’s actual cost lower still.",[338,430,432],{"id":431},"why-de-hooge-waerder-selected-zenarmor-sse","Why De Hooge Waerder Selected Zenarmor SSE",[334,434,435],{},"The decision was not driven by a long checklist. Four capabilities mapped directly to problems the team had already experienced:",[305,437,438,444,450,456],{},[308,439,440,443],{},[311,441,442],{},"Cross-platform policy enforcement:"," The same cloud-access rule could protect Windows and iOS users, closing the gap the existing approach left open.",[308,445,446,449],{},[311,447,448],{},"Action-level cloud control:"," De Hooge Waerder could target the risky action, uploading to WeTransfer, rather than bluntly blocking every use of the service.",[308,451,452,455],{},[311,453,454],{},"Proof before commitment:"," The free evaluation let the team test the control in its own environment before expanding the commercial relationship.",[308,457,458,461],{},[311,459,460],{},"Architecture without lock-in:"," Zenarmor ran with the firm’s OPNsense deployment and carried forward when the virtualisation layer moved from Hyper-V to Proxmox, without a hardware repurchase.",[463,464,465,468],"blockquote",{},[334,466,467],{},"“User error remains our biggest security risk. We needed a practical way to prevent confidential information from leaving the organisation while meeting strict Dutch compliance requirements. Zenarmor running on OPNsense gave us a solution that was effective, simple to manage, and dramatically more affordable than the alternatives.”",[334,469,470],{},"— Eelco Akker, ICT Consultant, De Hooge Waerder",[338,472,474],{"id":473},"seven-years-of-earned-expansion","Seven Years of Earned Expansion",[334,476,477],{},"De Hooge Waerder did not make a single leap from firewall protection to SSE. It expanded step by step as its environment and risk profile changed. Each investment followed proven value, and the platform evolved without forcing the firm to rebuild what already worked.",[305,479,480,486,492,498,504,510],{},[308,481,482,485],{},[311,483,484],{},"2019:"," Started with the free version on virtualised OPNsense instances running on Hyper-V. The environment was still largely RDS-based, and Zenarmor added protection against malware, phishing, and malicious sites.",[308,487,488,491],{},[311,489,490],{},"2020:"," Expanded to Sensei Premium across the firm’s high-availability OPNsense instances, adding the advanced filtering the IT team needed.",[308,493,494,497],{},[311,495,496],{},"2021 – 22:"," Moved on-premises servers to Microsoft Cloud, migrated OPNsense from Hyper-V to Proxmox, and progressed through Sensei Business to Zenarmor NGFW Business following the product rebrand.",[308,499,500,503],{},[311,501,502],{},"2023:"," Moved users from RDS to Intune-managed laptops and evaluated Zenarmor SSE. Endpoint enforcement became essential as users and traffic moved beyond the gateway.",[308,505,506,509],{},[311,507,508],{},"2024 – 25:"," Centralised administration in Zenconsole, giving the IT team one place to manage distributed instances and policy as the organisation continued to grow.",[308,511,512,515],{},[311,513,514],{},"2026 – 27:"," Evaluating ZTNA and broader SASE capabilities to extend least-privilege access and unified policy as the environment scales toward 500 users.",[334,517,518],{},"The result is a customer journey built on proof, not a rip-and-replace event.",[338,520,522],{"id":521},"implementation-the-customer-helped-shape-the-control","Implementation: The Customer Helped Shape the Control",[334,524,525],{},"The 2023 move from Zenarmor NGFW Business to SSE was the most significant step in the relationship. De Hooge Waerder tested the platform intensively, and Zenarmor extended the evaluation period so the IT team could validate the design thoroughly before committing to production.",[334,527,528],{},"During that process, the team identified two missing capabilities that mattered to its environment:",[305,530,531,537],{},[308,532,533,536],{},[311,534,535],{},"WeTransfer upload control:"," The ability to block upload actions to WeTransfer specifically.",[308,538,539,542],{},[311,540,541],{},"Whitelist-only TLS inspection:"," A mode that allowed the team to focus decryption where it was required.",[334,544,545],{},"Zenarmor implemented both requests and included them in the production release. The customer was not asked to redesign its requirement around the product; the product was strengthened around a real customer control gap.",[334,547,548],{},"The production rollout protected 235 users without a user-facing outage or loss of productivity. Previous tier transitions had also been described by the customer as hassle-free, giving the team confidence that the architecture could grow with the organisation.",[463,550,551,560],{},[334,552,553,554,559],{},"“Many organisations struggle to introduce modern security capabilities without disrupting existing network deployments. ",[374,555,558],{"href":556,"rel":557},"https:\u002F\u002Fwww.zenarmor.com\u002Finnovation",[378],"Zenarmor’s architecture"," allows security to be inserted directly into the traffic path with minimal disruption, enabling organisations to strengthen their security posture while maintaining performance and operational continuity.”",[334,561,470],{},[338,563,565],{"id":564},"sovereign-by-design-inspection-without-mandatory-cloud-backhaul","Sovereign by Design: Inspection Without Mandatory Cloud Backhaul",[334,567,568],{},"For a Dutch firm handling confidential client information, the location and path of inspection matter. Many enterprise SSE and SASE platforms depend on centralised, vendor-operated cloud points of presence. Depending on the vendor, service region, and tenant configuration, inspected traffic may traverse US-hosted or other externally controlled infrastructure, creating questions about data residency, foreign-jurisdiction exposure, latency, and operational control.",[334,570,571],{},"Zenarmor’s distributed model works differently. Policy enforcement runs on the customer’s endpoints and gateways, so protected traffic does not need to be backhauled through an external inspection PoP. Client traffic can remain within infrastructure controlled by De Hooge Waerder rather than being routed through a mandatory vendor inspection layer.",[305,573,574,580,586],{},[308,575,576,579],{},[311,577,578],{},"Inspection stays close to the traffic:"," Security policy is enforced on customer-controlled endpoints and gateways, without mandatory backhaul to a US-hosted cloud PoP.",[308,581,582,585],{},[311,583,584],{},"Operational control is preserved:"," The firm retains control over the enforcement points, policy, and audit data used to protect confidential client information.",[308,587,588,591],{},[311,589,590],{},"Data-residency objectives are supported:"," The architecture reduces unnecessary movement of inspected client traffic across third-party infrastructure and jurisdictions.",[334,593,594],{},"That distinction supports De Hooge Waerder’s data-residency and operational-control objectives while avoiding an unnecessary traffic detour. It also lets the firm modernise beyond the gateway without surrendering the OPNsense-based architecture it already trusts.",[338,596,598],{"id":597},"from-a-written-policy-to-a-demonstrable-control","From a Written Policy to a Demonstrable Control",[334,600,601],{},"AVG, the Dutch name for the GDPR and an information-security programme aligned with ISO\u002FIEC 27001 require more than a rule that tells employees not to use an unsanctioned service. The organisation needs proportionate technical measures, consistent enforcement, and evidence that those controls operate in practice.",[334,603,604],{},"For De Hooge Waerder, the deployment is directly relevant to ISO\u002FIEC 27001:2022 Annex A controls including A.8.20, Network Security; A.8.22, Segregation of Networks; and A.8.12, Data Leakage Prevention. Cross-platform enforcement, selective upload control, TLS inspection, centralised policy, and logging help the firm implement and demonstrate the technical controls behind those requirements.",[334,606,607],{},"NIS2 Article 21 requires entities in scope to take appropriate and proportionate technical, operational, and organisational measures to manage risks to network and information systems and minimise the impact of incidents. Its minimum measures cover risk analysis and information-system security; incident handling; business continuity and crisis management; supply-chain security; secure acquisition, development, and maintenance; vulnerability handling and disclosure; assessment of control effectiveness; cyber hygiene and training; cryptography and encryption; human-resources security, access control, and asset management; and multi-factor or continuous authentication and secure communications where appropriate.",[305,609,610,616,622],{},[308,611,612,615],{},[311,613,614],{},"Policy follows the user:"," Enforcement is not limited to traffic that happens to cross the office perimeter.",[308,617,618,621],{},[311,619,620],{},"The risky action can be controlled:"," The firm can stop an upload while preserving legitimate access where policy allows it.",[308,623,624,627],{},[311,625,626],{},"The control creates an evidence trail:"," Centralised management and logging help the team show that policy is applied across the environment.",[334,629,630],{},"These capabilities support compliance and audit readiness; they do not, by themselves, guarantee ISO 27001 certification or compliance with AVG\u002FGDPR or NIS2. For organisations assessing NIS2 obligations, the same emphasis on risk-based controls, governance, and demonstrability is directly relevant.",[338,632,634],{"id":633},"the-partner-perspective","The Partner Perspective",[463,636,637,640],{},[334,638,639],{},"“Network segmentation protects the internal network. SSE focuses on the user, the cloud session and the data movement.”",[334,641,642],{},"— Secrotec",[334,644,645],{},"Secrotec, a Netherlands-based ISO 27001 Lead Auditor and Zenarmor partner, uses this distinction to explain why gateway controls alone cannot govern a remote employee’s direct upload to a cloud service. The partner’s practical guidance connects selective upload controls, audit evidence, and data-residency considerations for Dutch organisations.",[334,647,648,653,654],{},[374,649,652],{"href":650,"rel":651},"https:\u002F\u002Fwww.secrotec.nl\u002Fen\u002Fsse-casb-dlp-wetransfer-datalekpreventie\u002F",[378],"Read Secrotec’s WeTransfer, SSE, CASB and DLP guide"," | ",[374,655,658],{"href":656,"rel":657},"https:\u002F\u002Fwww.secrotec.nl\u002Fen\u002Fzenarmor-beyond-ngfw-sse-sase-ztna-casb-dlp-microsegmentation\u002F",[378],"Read the broader Zenarmor architecture guide",[338,660,662],{"id":661},"the-results","The Results",[334,664,665],{},"De Hooge Waerder established a cross-platform SSE control for the specific cloud-upload risk that began the project, while preserving the architecture and operating model the IT team already trusted. The deployment produced several important outcomes:",[305,667,668,674,680,686,692,697,703,709],{},[308,669,670,673],{},[311,671,672],{},"Zero unauthorised WeTransfer uploads reported after deployment:"," The upload gap that began the project was addressed across the device types in scope.",[308,675,676,679],{},[311,677,678],{},"Consistent enforcement across iOS and Windows:"," The same cloud-access policy applied across the mixed device estate.",[308,681,682,685],{},[311,683,684],{},"Continuity preserved for 235 users:"," The SSE rollout completed without a user-facing outage or loss of productivity.",[308,687,688,691],{},[311,689,690],{},"Five sites managed centrally:"," Zenconsole centralised policy and operational visibility for the distributed environment.",[308,693,694,696],{},[311,695,448],{}," The firm could preserve access to useful cloud services while controlling the actions that created data-loss risk.",[308,698,699,702],{},[311,700,701],{},"Architecture retained:"," The same OPNsense and virtualised foundation continued to serve the business; no new security appliance rollout was required.",[308,704,705,708],{},[311,706,707],{},"No re-procurement during platform changes:"," The virtualisation move and successive product-tier expansions did not require the firm to discard its security foundation.",[308,710,711,714],{},[311,712,713],{},"A vendor relationship that delivered:"," Two requested controls were converted into shipped product capabilities.",[338,716,718],{"id":717},"security-economics-without-security-compromise","Security Economics Without Security Compromise",[334,720,721],{},"At an annual list price of €29,000, Zenarmor SSE protected 235 De Hooge Waerder users with cross-platform enforcement, cloud-action control, TLS inspection, and centralised management. A leading enterprise vendor had quoted approximately €200,000 per year for ZTNA alone. Zenarmor’s SSE deployment was priced approximately 85% below that quote, a difference of €171,000 per year, while addressing a wider range of the firm’s immediate security needs.",[334,723,724],{},"The economic value extended beyond licence cost: lower operating complexity through centralised policy and visibility; reduced exposure from unauthorised cloud uploads across the mixed device estate; no re-procurement when the virtualisation platform changed or the product tier expanded; and room to scale without a hardware refresh or a second stack of point products.",[338,726,728],{"id":727},"looking-ahead-from-cloud-control-to-least-privilege-access","Looking Ahead: From Cloud Control to Least-Privilege Access",[334,730,731],{},"De Hooge Waerder is evaluating Zenarmor’s ZTNA and broader SASE capabilities for 2026–27 as the environment scales toward 500 users. The next step is not another migration; it is an extension of the architecture already in place.",[334,733,734],{},"Where SSE secures users’ access to the web, SaaS applications, and cloud services, ZTNA extends the model to private applications and resources. Identity- and context-aware, least-privilege policy verifies users and devices rather than granting broad trust simply because a connection originates inside the network. This creates a software-defined perimeter in which applications are exposed only to authorised users under the right conditions.",[334,736,737],{},"Full SASE brings SSE and ZTNA together with SD-WAN and unified policy management across sites, users, devices, internet access, and private access. Instead of managing network connectivity and security as separate stacks, the firm can apply one governance model that follows the user across offices, remote locations, and future branches.",[334,739,740],{},"For De Hooge Waerder, the practical value would include more precise control over which employees can access specific client-data systems, stronger protection across its five-location network as it expands, and a single auditable policy framework for office staff, remote workers, and new locations. The existing OPNsense and Proxmox foundation, together with centralised management in Zenconsole, provides a path to these capabilities without a hardware refresh, a new vendor, or a disruptive rearchitecture.",[338,742,744],{"id":743},"a-blueprint-for-professional-services-firms","A Blueprint for Professional-Services Firms",[334,746,747],{},"De Hooge Waerder’s experience is relevant far beyond one Dutch accounting firm. Independent accounting, legal, tax, and advisory organisations face the same structural pressure: mobile workforces, mixed devices, cloud applications, sensitive client data, and budgets that cannot absorb every six-figure security proposal.",[334,749,750],{},"As a Nexia member serving a global professional-services network, De Hooge Waerder provides a strong peer example: start with a precise business risk, prove the control in the real environment, expand without discarding the existing architecture, and preserve control over where enforcement happens.",[334,752,753],{},"The strongest security transformation is not necessarily the one with the largest stack. It is the one that closes a real risk, fits the operating model, and keeps working as the organisation grows.",[334,755,756],{},[374,757,760],{"href":758,"rel":759},"https:\u002F\u002Fwww.zenarmor.com\u002Fdocs\u002Fguides\u002Fhow-to-prevent-data-leakage-with-casb",[378],"Explore Zenarmor CASB and cloud-access controls",{"title":762,"searchDepth":763,"depth":763,"links":764},"",2,[765,766,767,768,769,770,771,772,773,774,775,776,777],{"id":340,"depth":763,"text":341},{"id":368,"depth":763,"text":369},{"id":421,"depth":763,"text":422},{"id":431,"depth":763,"text":432},{"id":473,"depth":763,"text":474},{"id":521,"depth":763,"text":522},{"id":564,"depth":763,"text":565},{"id":597,"depth":763,"text":598},{"id":633,"depth":763,"text":634},{"id":661,"depth":763,"text":662},{"id":717,"depth":763,"text":718},{"id":727,"depth":763,"text":728},{"id":743,"depth":763,"text":744},"2026-09-29 12:00","September 29, 2026","With Zenarmor SSE, the Dutch accountancy and advisory firm established consistent cloud-access control across Windows and iOS, stopped unauthorized WeTransfer uploads, and protected 235 users without disrupting work. Its annual SSE list price was approximately 85% below an enterprise vendor’s quote for ZTNA alone.","md","\u002Fimages\u002Fblog\u002Fde-hooge-v1.png","Zenarmor customer success stories",{},true,"\u002Fcustomer-success-stories\u002Fclosing-the-wetransfer-gap-how-de-hooge-waerder-built-sovereign-sse",{"title":297,"description":780},"closing-the-wetransfer-gap-how-de-hooge-waerder-built-sovereign-sse","customer-success-stories\u002Fclosing-the-wetransfer-gap-how-de-hooge-waerder-built-sovereign-sse","SgqP0oOjiDBLXw5zi4tWL9PMqEohMOxDVEEcVB7pSbE",[792,793,802],{"path":786,"title":297,"description":780,"slug":788,"img":782,"imgAltText":783,"author":298,"authorTitle":300,"authorImage":299,"date":779,"createdAt":778,"updatedAt":300,"readingTime":300,"sitemap":300,"badgeLabel":300,"badgeVariant":300},{"path":794,"title":795,"description":796,"slug":797,"img":798,"imgAltText":799,"author":298,"authorTitle":300,"authorImage":299,"date":800,"createdAt":801,"updatedAt":300,"readingTime":300,"sitemap":300,"badgeLabel":300,"badgeVariant":300},"\u002Fcustomer-success-stories\u002Fhow-mission-leben-standardized-network-security-with-zenarmor","How Mission Leben Standardized Network Security Across 45 Distributed Sites Without Replacing Existing Infrastructure","Mission Leben gGmbH is a diaconal non-profit that supports thousands of people across the Rhine-Main region every day. With dozens of care homes, youth services, and social facilities to protect, its IT team needed consistent, unified security across every site without the administrative weight or cost of a traditional network security platform.","how-mission-leben-standardized-network-security-with-zenarmor","\u002Fimages\u002Fblog\u002Fmission-leben-customer-story.png","Mission Leben customer success story","June 9, 2026","2026-06-09 12:00",{"path":803,"title":804,"description":805,"slug":806,"img":807,"imgAltText":808,"author":298,"authorTitle":300,"authorImage":299,"date":809,"createdAt":810,"updatedAt":300,"readingTime":300,"sitemap":300,"badgeLabel":300,"badgeVariant":300},"\u002Fcustomer-success-stories\u002Fembedding-network-security-at-the-edge-how-wiline-scales-secure-connectivity-across-600-markets","How WiLine Turned Network Security into a Billable Service Across 600+ Markets","As one of the largest Fixed Wireless Internet Service Providers in the United States, WiLine delivers secure, SLA-guaranteed connectivity and managed network security services to businesses in more than 600 markets nationwide. As demand grew for integrated security at the edge, WiLine needed a way to extend network security services across its fast-growing distributed infrastructure without adding hardware, operational complexity, or deployment delays. To do this, WiLine turned to Zenarmor as a lightweight embedded network security layer purpose-built for service providers.","embedding-network-security-at-the-edge-how-wiline-scales-secure-connectivity-across-600-markets","\u002Fimages\u002Fblog\u002Fwiline-customer-success-story-v2.jpg","WiLine customer success story","May 25, 2026","2026-05-25 12:00",1792067481361]