# What are the benefits of using an identity-aware proxy for remote access?

An identity-aware proxy provides a secure gateway that terminates remote sessions at the application layer rather than the network layer. Unlike a traditional virtual private network that often grants broad network access, an identity-aware proxy verifies the user identity and specific permissions before allowing access to a single application or resource. This prevents an infected remote device from moving laterally across the network and ensures that access is strictly controlled and fully audited. See how this [evolves industrial remote access](https://www.agilicus.com/from-tunnels-to-zero-trust-the-evolution-of-industrial-remote-access/).

For more information, see [Industrial Cyber Security Best Practices](https://www.agilicus.com/white-papers/industrial-cyber-security-best-practices/).