Couldn't agree more. A firewall is not zero trust, its better security. We should get to the point where we have no inbound ports and utilise SDP while making it super easy for Critical Infrastrucuture application/system providers to embed it into their solution so that their customers have less risk and ideally do not need to implement the recommendations as its by design.
------------------------------
Philip Griffiths
Head of Business Development
NetFoundry
------------------------------
Original Message:
Sent: Feb 20, 2023 07:05:39 AM
From: Nya Murray
Subject: VNC (Virtual Network Computing instances )- The current threat landscape
https://securityintelligence.com/articles/growing-threat-to-critical-infrastructure/
This is why I think it is essential to say that without network layer authentication prior to access, it is not Zero Trust.
------------------------------
Nya Murray
Director
Trac-Car
------------------------------