Sign in through the hospital’s identity provider
Visiting clinicians and vendors authenticate through the hospital’s identity provider, using supported SAML or OIDC authentication.
How it works in Healthcare
Evaluate each request against policy
SwiftZAccess checks every request against the policy set for that application, considering factors such as user group, reported operating system and browser, source IP, country and time of day.
Record decisions and revoke when needed
Allow and deny decisions are recorded with the reason, and logs can be streamed to the hospital’s SIEM as supported by the deployment. Revoked users are denied on subsequent requests.
Why it matters
Benefits for healthcare providers
Provide application-specific access
Give visiting clinicians and vendors access to the web applications they need, rather than broad network connectivity.
Support unmanaged devices
Allow external users to work through their browsers without installing an endpoint agent for SwiftZAccess.
Apply contextual access policies
Restrict access using configured identity, device-context, location and time conditions.
Revoke access promptly
End access when a user’s privileges or vendor engagement expires.
Use Cases
Three access risks. One protected environment.
01
Visiting Consultants Across Hospitals
Scenario
A visiting consultant needs access to a hospital’s web-based clinical or scheduling application while working from another clinic.
COSGrid Solution
SwiftZAccess authenticates the consultant through the hospital’s identity provider and applies the relevant application and contextual policies. The consultant can access the authorised application without receiving a general hospital network account.
Outcome
Consultants can access the applications required for their work without being granted unnecessary network access.
02
Insurance and Billing Partners
Scenario
An outsourced billing team needs to process claims through the hospital’s web portal from its own office.
COSGrid Solution
SwiftZAccess provides browser-based access to the approved portal, with access governed by the hospital’s identity and application policies.
Outcome
External billing teams can work with the required hospital application without being placed on the hospital network.
03
Revoking Access When a Vendor Contract Ends
Scenario
A medical-software vendor completes a support engagement, but its personnel still have valid credentials.
COSGrid Solution
The hospital revokes the user’s access through its configured access-management process. SwiftZAccess denies subsequent requests, including requests made during an existing session.
Outcome
Application access can be withdrawn without waiting for the vendor’s next login.
Keep Exploring
Go Deeper
See how agentless access works
Let third-party vendors and auditors reach approved banking applications from any browser, with no client install, using SwiftZAccess.
Read the full solution →Banking and Finance
See how COSGrid provides solutions for Banking and Finance
Let’s see how COSGrid secures connectivity and detects advanced threats across branches, while keeping data and audit trails under the bank’s control.
Explore the Industry →The Next Solution
See how Compliant Device Access works
Check every laptop, workstation, and branch device against the bank’s security policy before it connects, using ZT-NAC.
Read the full solution →How it works in Healthcare
Register approved devices
IT registers the devices that are allowed to join the hospital network. Unregistered devices are denied by default.
Check device posture
When a device connects, ZT-NAC checks it against the hospital’s configured requirements, which can include patch level, antivirus status and disk encryption.
Admit, deny or quarantine
The agent and host-firewall enforcement admit approved devices, deny unregistered ones and quarantine devices that fail posture checks.
Why it matters
Benefits for healthcare providers
Deny unregistered devices by default
Prevent unknown laptops from gaining network access before they are approved.
Check device posture
Evaluate configured security requirements such as patch status, antivirus and disk encryption.
Restrict non-compliant devices
Quarantine devices that fail the configured checks until the identified issues are addressed.
Extend consistent policy across locations
Apply the same agent-based admission approach across supported campuses and clinics.
Use Cases
Three access risks. One protected environment.
01
Staff Laptops That Fall Out of Compliance
Scenario
A hospital laptop returns to the network with missing updates or disk encryption disabled.
COSGrid Solution
ZT-NAC checks the laptop against the hospital’s configured posture requirements when it connects. A device that fails can be quarantined through its host firewall until the issue is resolved.
Outcome
Devices that do not meet the hospital’s configured security standard can be restricted from the network hosting patient-facing systems.
02
Student and Trainee Laptops
Scenario
Medical and nursing students rotate through hospital departments and need network access during their placements.
COSGrid Solution
ZT-NAC admits devices that IT has registered and that run the required agent and pass configured posture checks. Unregistered devices are denied by default.
Outcome
Student and trainee access can follow the hospital’s device-admission requirements without relying on unmanaged devices being trusted automatically.
03
Consistent Admission Across Satellite Clinics
Scenario
A hospital group operates a main campus alongside diagnostic centres and smaller clinics, some with limited local IT support.
COSGrid Solution
ZT-NAC applies admission controls through the device agent and host firewall at supported locations.
Outcome
Central IT can apply a consistent device-admission approach across participating facilities without a separate switch or VLAN project at every site.
Keep Exploring
Go Deeper
See how agentless access works
Let third-party vendors and auditors reach approved banking applications from any browser, with no client install, using SwiftZAccess.
Read the full solution →Banking and Finance
See how COSGrid provides solutions for Banking and Finance
Let’s see how COSGrid secures connectivity and detects advanced threats across branches, while keeping data and audit trails under the bank’s control.
Explore the Industry →The Next Solution
See how Compliant Device Access works
Check every laptop, workstation, and branch device against the bank’s security policy before it connects, using ZT-NAC.
Read the full solution →How it works in Healthcare
Observe internal traffic
NetShield NDR analyses traffic inside the hospital network, including east-west communication between internal systems.
Spot unusual patterns
It examines flow information and TLS handshake metadata, without decrypting encrypted traffic, to identify patterns that may warrant investigation.
Investigate the findings
Security teams review each alert as a lead, not as proof of compromise. Where supported integrations are available, findings can be used alongside other security records.
Why it matters
Benefits for healthcare providers
Improve internal network visibility
Examine communication between devices and systems inside the hospital network.
Identify unusual connection patterns
Flag behaviour that differs from expected communication patterns for investigation.
Gain visibility into encrypted traffic metadata
Analyse supported flow and TLS handshake metadata without decrypting session content.
Investigate possible lateral movement
Help security teams identify suspicious communication between administrative systems and internal servers.
Use Cases
Three access risks. One protected environment.
01
Reconnaissance From an Administrative PC
Scenario
A billing or registration workstation is compromised through a phishing email and begins probing multiple internal hosts and ports.
COSGrid Solution
NetShield NDR is designed to flag this broad internal scanning pattern because it is unusual for an administrative workstation.
Outcome
The security team receives an investigation lead before the suspicious activity potentially reaches more sensitive systems.
02
Lateral Movement Between Hospital Servers
Scenario
A server that normally communicates with its own database begins opening remote-administration sessions to other servers in the hospital data centre.
COSGrid Solution
NetShield NDR is designed to flag changes in connection behaviour between servers using network-flow metadata.
Outcome
The security team can investigate unexpected internal communication that may indicate an attempt to move between systems.
03
Unusual Data Leaving a Records File Server
Scenario
A file server holding administrative or patient-related documents begins sending an unusually large volume of traffic to an unfamiliar external address.
COSGrid Solution
NetShield NDR is designed to flag the unusual flow for review. Where supported integrations are available, findings can be forwarded to the hospital’s existing security tools.
Outcome
The security team gets a lead to investigate possible data exfiltration while the activity is occurring. The finding is an indicator for investigation, not confirmation of data theft.
Keep Exploring
Go Deeper
See how agentless access works
Let third-party vendors and auditors reach approved banking applications from any browser, with no client install, using SwiftZAccess.
Read the full solution →Banking and Finance
See how COSGrid provides solutions for Banking and Finance
Let’s see how COSGrid secures connectivity and detects advanced threats across branches, while keeping data and audit trails under the bank’s control.
Explore the Industry →The Next Solution
See how Compliant Device Access works
Check every laptop, workstation, and branch device against the bank’s security policy before it connects, using ZT-NAC.
Read the full solution →
