[josnyder]

I'm saddened that the answer isn't "Just use BeyondCorp".

Layer 7 solutions provide so much more capacity for granular AuthZ, and thereby eliminate the "soft underbelly" of corporate networks.

[kerng]

Ah, "beyond corp" the Google marketing term that many industry misunderstood and then exposed their entire internal infra...

[theginger]

It would dilute the messages in the guidance, it was also be quite patronising for anyone who has just been through a lengthy decision making process and concluded they still need a VPN, to be told they shouldn't be using a VPN.

[silverfox17]

You're expecting the NSA to recommend BeyondCorp?

[tptacek]

CISA actively advocates for Zero Trust, which is the generic name for this stuff.

[beermonster]

And NCSC

[nvr219]

Why wouldn't they?