cm0002Dec 2

Zero Trust Architecture

https://mander.xyz/post/42892354

Show threadUnRelatedBurner
Wouldn’t it be enough to just create a seperate subnet?
Dec 2 at 3:21pmWeb
Show threadScrubblesDec 2
Yeah that’s where it turned from story to joke for me
Show threadscytaleDec 2
They’re specifically talking about Zero Trust though and treating it like a corporate device as the joke. This means authenticate at every layer, RBAC, and endpoint security compliance before allowing access to a service. Putting the device into an isolated guest VLAN works too of course.
Show threadcurbstickleDec 2

Thats all I do.

Separate SSID, goes right into its own little hellscape with no access to anything but the internet.

And a small 8 port switch for a hardwired guest option. But thats not lit until its needed.

Show threadScooptaDec 2
Yeah, he did that…and then kept going for some reason. A separate subnet in a separate firewall zone that doesn’t forward anywhere but the internet should be sufficiently safe
Show threadExLisperDec 2
Not for the kid.
Show threadScooptaDec 2
Was he worried about the kid or his network lol?
Show threadfelbaneDec 2
por_que_no_los_dos.meme
Show threadarinDec 2
Neither