# Agilicus vs Claroty xDome Secure Access

- Link: https://www.agilicus.com/compare/clarity-xdome/
- Published: 2024-07-22T00:18:34+00:00
- Author: aman bhogal

# Identity Aware Proxy vs Dual Tunnel Architecture

Claroty xDome_®_ Secure Access ensures anybody accessing their client is authenticated,
Agilicus authenticates at the resource level, eliminating the need for clients and
encrypted tunnels.

Discover why an identity aware proxy beats a dual tunnel architecture for modern
security.

[TRY NOW](https://www.agilicus.com/l/no-cost-trial/)

[BOOK A MEETING](https://www.agilicus.com/book-calendar-meeting/)

## The Fundamental Difference

The choice between Agilicus AnyX and Claroty xDome Secure Access (formerly SRA) 
is a choice between a complete Zero Trust platform and a secure access client to
create legacy tunnels to shared resources. 

Where Claroty relies on a dual tunnel to create a connection between the user > 
secure access client > shared resource, AnyX is a proxy based platform, giving direct
access to resources.

![icon-authentication](https://www.agilicus.com/www/d82985c0-authentication.svg)

### Agilicus AnyX

Complete Zero Trust platform utilizes an identity aware proxy, connecting the user
to the shared resource through an outbound-only connection providing the user with
seamless access to the resource without being visible to the public internet.

![icon-server](https://www.agilicus.com/www/fc8d0a94-icon-server.svg.svg)

### Claroty xDome

Claroty xDome provides the user with a Zero Trust tunnel to the client, and a secondary
tunnel is created from the client to the shared resource. The tunnel based platform
requires specific port configurations to allow for traffic.

#### Security Model Comparison

**Agilicus **

Identity Aware Proxy

→

User accesses the shared resource via a proxy

**Claroty xDome**

Dual Tunnel

→

User access the shared resources via tunnel to client, and tunnel from client to
resource

Agilicus AnyX operates at the application layer (layer 7 on the OSI scale) through
an identity aware proxy creating the connection from the user to the end user. Claroty
xDome utilizes a dual-tunnel architecture creating a tunnel between the user and
the client, and a second tunnel from the cloud to the resource, allowing it to act
similar to a virtual jump server.

## Why Modern Teams Choose Agilicus

Compare capabilities side-by-side.

Feature

**Agilicus AnyX**

**Claroty xDome**

#### **VPN Tunnels**

No
Resources are not exposed to the IP layer, isolating resources, and eliminating
lateral traversal.

Required
Data in transit travels through dual tunnels (user>client>resource) to 
create a connection between user and resource

#### **Session Logs**

Granular audit logs for each user and resource. 
Know who accessed what, when, and
what they did while they were there.

Audit logs are available at site-level and the secure access client. 
Granular audit
trails at application levels are not available

#### **Architectural Approach**

Layer 7
Operates at layer 7 – Application layer

Layer 3

Operates at Layer 3 – Network layer

#### **Network Model**

Proxy based
Direct connection of user to resourceOperates with outbound-only connection,
eliminating the need for publicly accessible IP address

Tunnel based
A tunnel connection is established between the user and the secure 
access client. A secondary tunnel is created between the client and the resource.

#### **Authentication Layer**

Authentication Per Device/Resource

Authentication is done at the client level.

#### **Zero-Trust Access**

Agilicus is a complete Zero Trust Access platform providing identity aware access
at the resource level

Claroty xDome Secure Access provides Zero Trust Access to the secure access client
at the network layer

![icon-world](https://www.agilicus.com/www/9b679333-icon-world.svg.svg)

#### **Clientless Universal Access**

Access all resources from any device with a web browser.

 * Equal security across all devices accessing resources
 * Enable BYOD while maintaining security
 * Easy Access to  all authorized resources in one tile-based web launcher

![icon-padlock](https://www.agilicus.com/www/c1324345-icon-padlock.svg.svg)

#### **Granular Authorization**

Granular authorization and permission levels on a per resource level.

 * Enforce read vs write permission levels per user
 * Enable specific users to perform specific tasks on a resource
 * Native resource request workflow for task based permissions

![icon-global-network](https://www.agilicus.com/www/965b276e-icon-global-network.
svg.svg)

#### **Per-Resource Authentication**

User authentication at a per resource level to enable granular authorization.

 * Enables granular audit logs for what user on what device
 * Eliminate shared passwords and team level access
 * Provision / Decommission resources on a per user basis

## **Ready to move beyond the VPN?**

Experience the security of an Identity-Aware Proxy, Zero Trust, Zero Compromises.
No Clients to manage, no lateral movement to fear.

[CONTACT ME](https://www.agilicus.com/contact-us/)

[BOOK A MEETING](https://www.agilicus.com/book-calendar-meeting/)