Reply to thread

Message

<blockquote data-quote="danb" data-source="post: 1059587" data-attributes="member: 62850">Hehehe, Andy, that is the EXACT verbiage that drives me absolutely insane <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite110" alt=";)" title="Wink&nbsp; &nbsp; ;)" loading="lazy" data-shortname=";)" />.WDAC + ISG is quite similar to CyberLock when it is OFF or on AutoPilot, and none of these configurations can possibly be part of a zero trust model, unless the model includes another blocking mechanism / layer that does not auto allow new, non-whitelisted items.&nbsp; ISG, WLC and VoodooAi are all highly effective, but they are not perfect.ISG or WLC / VoodooAi are likely sufficient when the user is not engaging in risky activities, like browsing the web or checking email.&nbsp; But when the user is engaging in risky activities, auto allowing anything new is dangerous.</blockquote>

[QUOTE="danb, post: 1059587, member: 62850"] Hehehe, Andy, that is the EXACT verbiage that drives me absolutely insane ;). WDAC + ISG is quite similar to CyberLock when it is OFF or on AutoPilot, and none of these configurations can possibly be part of a zero trust model, unless the model includes another blocking mechanism / layer that does not auto allow new, non-whitelisted items. ISG, WLC and VoodooAi are all highly effective, but they are not perfect. ISG or WLC / VoodooAi are likely sufficient when the user is not engaging in risky activities, like browsing the web or checking email. But when the user is engaging in risky activities, auto allowing anything new is dangerous. [/QUOTE]

Verification