Pillar
Network Security
Network security is what you still believe about a packet after it has left the process: egress that is not ‘allow 443,’ TLS you intended to terminate, a WAF rule that did not break the app, a path that does not assume the office is trusted.
ZTNA tools
Open one app, not a subnet
Open the listDNS security
Resolve only what you meant
Open the listQuestions about Network Security
Why isn’t the WAF under application security?
A WAF sits on the path. It can help. It cannot encode your HTML. AppSec lists stay on what the application guarantees. Network lists will stay on what the path can still enforce when the application is wrong.
What will the first network lists cover?
Egress that names destinations, TLS inspection you can explain to a cryptography review, path design that does not trust the office VLAN, and WAF rules you can test without a vendor console.
Is zero trust a product we will list?
Zero trust is a path design, not a logo. If a product only replaces the VPN and cannot say who is on the path, it will have a hard time on that list.
