5 ms·
> Every time I hear about ZTA they start with this straw man of restricted internal networks. There where never a time when admins relied only on restricted phy
by tallanvor 5y ago
> Every time I hear about ZTA they start with this straw man of restricted internal networks. There where never a time when admins relied only on restricted physical network access or VPN.
This absolutely used to be the primary method of security, and still is in many places, unfortunately. Even at the enterprise level, most companies only started making serious changes maybe 10 years ago, and are still far from completing the journey, and getting a device connected to a wired port will still get you too much access in most enterprises.
- k__ 5y agoYes, I don't know where GP worked, but I've seen dozens of companies relying on VPNs alone.
- mox1 5y agoI'm a pen tester for a mid-ish sized company. I recently got approval to remove "port security" (802.11x) on a single port within the building. It is amazing the amount of access I now have (using a non-company managed laptop, plugged into this port). Once a bad guy has equivalent access, they are very deep into our network (and have bypassed multiple layers of controls). I don't think my company is unique in any way. I would expect this level of access at most companies to be game-over / large problem.