Wondering what everyone's thoughts are on best security practices for remote access when deciding to choose ZTNA or VDI or VPN.

Our medical facility is currently looking into providing our employees with remote access to internal applications, such as EMR and SAP. This would be via their devices (unmanaged).

We've been eyeing ZTNA and SASE solutions, specifically Palo Alto Prisma, Zscaler to Fortinet

Or

Does the organization still rely on solutions like Citrix XenApp/VDI for such requirements? If yes, why ZTNA solutions exist?

We don’t prefer Traditional SSL VPN clients to internal resources, especially when using personal devices.

Business objectives

1. Access to our internal medical applications for our employees.
2. Vendors should be able to remotely access our internal servers (using RDP) for support.

Any recommendations would be greatly appreciated. Thanks in advance!