Zero trust runs deeper than that. The main point is that you do not trust a corporate provided device any more than a user's BYOD device. Essentially, you pull workstations out of the core network your servers are on, and only allow access to that core with jump boxes or virtual desktops to limit access and data exfiltration. Forester had a nice write up on Zero Trust Networks back in 2013.
Slashdot Mirror
Zero trust runs deeper than that. The main point is that you do not trust a corporate provided device any more than a user's BYOD device. Essentially, you pull workstations out of the core network your servers are on, and only allow access to that core with jump boxes or virtual desktops to limit access and data exfiltration. Forester had a nice write up on Zero Trust Networks back in 2013.