Honestly one of the hardest things about zero trust is getting end users who aren’t used to it to stop trying to solve problems by turning on the VPN. (We are

Honestly one of the hardest things about zero trust is getting end users who aren’t used to it to stop trying to solve problems by turning on the VPN. (We are almost completely zero trust, but obviously there are still a few legacy systems you need to connect to a VPN to access) I don’t do deskside support, but I do have to help nontechnical people interact with apps and services occasionally, and often their first troubleshooting step is ‘make sure the VPN is on’, whereas mine tends to be ‘let’s eliminate a potential source of network craziness and make sure the VPN is definitely off’ So do tend to think that the important messaging for end users is that zero trust is about eliminating something - making things simpler. Maybe ‘networkless’ would be a better word…