3 ms·
I always thought BeyondCorp was intended to replace the VPN infrastructure with (effectively) a TLS reverse proxy gated by rules, SSO, device posture inspection
by TheNewsIsHere 3y ago
I always thought BeyondCorp was intended to replace the VPN infrastructure with (effectively) a TLS reverse proxy gated by rules, SSO, device posture inspection, etc.
That’s how I always interpreted the marketing and technical documentation anyway.
I would be surprised if they’re not already running PAWs for things like administrative access to production GCP primitives and similar, even if they’re also running PAM, hardware authentication, and so on. I know Microsoft does for admin privileges to the Azure fabric.
- AndrewKemendo 3y agoI'm simply responding to Google's own language: "We are removing the requirement for a privileged intranet and moving our corporate applications to the Internet." That's from the original ZT paper and is making a HUGE claim that all access in computing is more secure if you use ZT over physically (not just logically) separated networks.
- anon84873628 3y agoI think "corporate applications" are different from "production infrastructure" and "developer tooling"
- TheNewsIsHere 3y agoI see what you’re saying. I agree.