I get the question surprisingly often: \u2018If we go for Zero Trust, can we get rid of the firewalls?\u2019 Short answer: No.<\/p>\n
Zero Trust is not a new religion that makes everything before it obsolete. It is an extension of the security we have always done. Defense in depth, least privilege, separation of duties, logging. None of that is new and none of it goes away. What Zero Trust does is to remove the one assumption that has been hurting us for years: that anything inside the network can be trusted.<\/p>\n
The firewall is still there. It just isn\u00b4t the only one making the decision anymore. The identity, the device and the context gets a say as well. Your patching, backups and incident response are still needed, probably more than ever.<\/p>\n
The danger of treating it as a competitor is that it becomes a political fight. The network group defends their turf, the identity team builds their own thing and the money is spent twice without the two talking to each other. I have seen that movie before and it doesn\u00b4t end well.<\/p>\n
Start with what you have, add verification on top and let the old and the new strengthen each other. That\u00b4s Zero Trust.<\/p>\n","protected":false},"excerpt":{"rendered":"
I get the question surprisingly often: \u2018If we go for Zero Trust, can we get rid of the firewalls?\u2019 Short answer: No. Zero Trust is not a new religion that makes everything before it obsolete. It is an extension of the security we have always done. Defense in depth, least privilege, separation of duties, logging. […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[4],"tags":[27,26,23],"class_list":["post-1032","post","type-post","status-publish","format-standard","hentry","category-security-architecture","tag-defense-in-depth","tag-security-architecture","tag-zero-trust"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1032","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1032"}],"version-history":[{"count":1,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1032\/revisions"}],"predecessor-version":[{"id":1034,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1032\/revisions\/1034"}],"wp:attachment":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1032"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1032"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1032"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}