# Replace your VPN

Give users secure, auditable network and application access.

Start path-
## Concepts

Concepts explain the basic ideas behind how Cloudflare Zero Trust works.

Start moduleContains 3 units

-
## Get started with Zero Trust

In this learning path, you will learn how to replace your existing VPN provider with Cloudflare's ZTNA solution. Your users will run the WARP endpoint client on their devices, and you will run either Cloudflare Tunnel or Cloudflare WARP Connector in your network or on your application servers. After deploying Zero Trust, users will be able to connect to private resources (not exposed to the Internet) via TCP/UDP/ICMP, and administrators will be able to control access to these resources based on user identity, device posture, and other factors.

Start module -
## Connect your private network

This module covers how to connect your private network services and applications to Cloudflare. In many ways, this connection will replace the concept of a traditional VPN concentrator or headend device.

Start module -
## Configure the device agent

The Cloudflare WARP client (known as the Cloudflare One Agent in mobile app stores) encrypts designated traffic from a user's device to Cloudflare's global network. In this learning path, we will first define all of your parameters and deployment rules, and then we will install and connect the client. If you prefer to start the client download now, refer to Download WARP.

Start module -
## Connect user devices

Now that your device enrollment policies and WARP profiles are configured, you can begin deploying the WARP client to user devices for testing.

Start moduleContains 3 units

-
## Build secure access policies

With Cloudflare Zero Trust, you can apply granular security policies to all traffic proxied from the user device to your private network. Policies can key off of domain name, user identity, device posture, SNI, IP address, port, protocol, and other attributes. Building simple, well-structured policies is an important factor in having a secure organization with a manageable workflow.

Start module -
## Troubleshooting

Start moduleContains 1 units