Skip to content

Solution

Zero Trust for a flat network

Anything on your network can reach anything else, and you know it.

What is going on

VLANs are being used as a security boundary. Lateral movement is unconstrained, and the device classes that matter most — building systems, cameras, medical or industrial equipment — cannot run the endpoint agent that was supposed to solve this.

What this is designed to achieve

Enforced trust boundaries driven by identity rather than subnet, sequenced so each step is independently reversible.

It starts with

Device discovery and profiling, because a segmentation design written against an inaccurate inventory will fail at enforcement.

The phases it runs through

  1. Phase 1

    Discover

    What is actually on the network?

  2. Phase 2

    Design

    What should be allowed, and who decides?

  3. Phase 3

    Prove

    What would have happened if this were enforcing?

  4. Phase 4

    Enforce

    Can we turn this on without an outage?

  5. Phase 5

    Sustain

    Will this still be working in a year?

How the method works

← All solutions