Zero Trust in 5 Minutes with Brian Deitch

VPNs will never be zero trust because they typically grant broad network access to users, and well, users on the network are a recipe for disaster. Discover why Zscaler's inside-out zero trust married to identity helps enforce true user-to-application zero trust without exposing an attack surface and keeping the users off the network.

[@barrythompson8813]

Appreciate the humour brought to a dry subject 🙂

[@JB-uk7mn]

☠️😂 Poor Bruce 😔

[@TravisAllabach-xc8tv]

So maybe rudimentary question - when you say VM is that essentially just a server running on the site that needs provisioned to run the Zscaler software?

[@user-ck5qu2yo9i]

Basically yes, it is a lightweight VM which runs a sort of communicator which talks to the ZTE (Zero trust Exchange). Only outbound which reduce security risk compared to VPN

[@Dimerzl]

@@user-ck5qu2yo9i isn't that just a massive single point of failure then?

[@djangosmissingfingers]

If the lightweight VM isn't listening for inbound connectivity, how is traffic going to get from the User -> Cloud -> VM / App?