We are mostly cloud-based but still have a legacy on-premises service that staff need to access for things such as terminal services, network drives, printers, and directory-integrated applications.…
Bonjour, en tant que DSI, je cherche une méthode concrète pour encadrer l'utilisation des outils d'intelligence artificielle en entreprise. Comment vérifier qu'aucune donnée confidentielle ou appartenant à l'entreprise…
Bonjour, en tant que DSI, je cherche une méthode concrète pour encadrer l'utilisation des outils d'intelligence artificielle en entreprise. Comment vérifier qu'aucune donnée confidentielle ou information interne n'est…
I'm building two groups of applications with AI-assisted coding: externally accessible apps that I may share with other people, and internal apps that should remain private. Single sign-on…
A senior engineer told me that bastion hosts have been insecure and outdated for the past decade. With zero-trust designs becoming more common, is the traditional bastion or…
I'm planning a Zero Trust security architecture for a relatively simple Microsoft 365 environment. We have a small number of internal users on managed devices, plus guest users…
We're planning to migrate remote access for about 500 employees and contractors. Our environment includes SaaS platforms, internal web applications, Windows and Linux administration, several legacy applications, and…
We have a small number of employees who work from home at least four days a week, and we currently use Azure VPN for remote access. I'm evaluating…
We removed the corporate VPN and moved employees to universal ZTNA. Managed laptops are straightforward: the client is deployed through device management, users authenticate with single sign-on, and…
We have a growing collection of internal web apps built quickly with AI-assisted coding tools, so we assume the application code may contain ordinary security mistakes and should…
We have a growing collection of internal web apps, developed quickly with AI coding tools, so we assume the application code may contain ordinary security mistakes and should…
I'm a developer at a medium-sized company and I'm trying to make an internal web application available to employees using mobile devices outside the office. The main options…
We manage more than 200 cPanel servers and currently use a bastion or jumpbox as the main access point. I'm looking for practical architecture ideas for auditing staff…
I manage roughly 200 Linux servers across on-premises bare metal, two AWS regions, and a smaller GCP environment. Historically, access controls have been handled with host-level iptables rules…
Our remote staff currently connect to a VPN concentrator at head office, where their traffic is inspected before being sent onward. That means someone in Lisbon accessing services…
I'm facing a challenge at work after our IT department got consolidated, leaving me to manage a bunch of IT headaches. Our organization bought a mobile application without…
I'm managing several Azure resources like databases across different resource groups and currently, we're limiting access with IP ingress rules. This method becomes tedious over time. I'm looking…