3 ms·
true, VPNs can be a ZTA building block when coupled with identity-aware policy (Tailscale et al) I think when most think VPNs though they're talking enterprise
by tsujamin 5y ago
true, VPNs can be a ZTA building block when coupled with identity-aware policy (Tailscale et al)
I think when most think VPNs though they're talking enterprise ICT VPNs that historically don't play in that space :(
- yjftsjthsd-h 5y agoI suppose you could start at a really coarse level; it's pretty easy to have the VPN read the user's group from some central source and use that to decide what subnet(s) they get, and then you put ex. internal-use servers (say, file shares) on one subnet, customer application servers on another, and LOM consoles on a third.