Hey everyone, I’ve been tasked with looking into ZTNA solutions for our small company. We’re about 50 people, mostly remote, using a mix of cloud apps (Google Workspace, Salesforce, a few custom tools) and one on-prem legacy database for reporting. Our current “security” is basically a company VPN that everyone hates. 😅
I’ve been reading up and Netskope’s ZTNA keeps coming up, but it seems huge and feature-rich. My background is more in SQL and building dashboards, so I’m trying to figure out if this is overkill for our size. Our IT team is basically 2 people.
Some specific things I’m wondering:
* Is the policy management something a junior analyst (with some networking curiosity) could help manage, or is it strictly for senior security engineers? I’ve seen snippets of policy configs online that look like YAML/JSON. For example, is defining access based on user group and app something like this?
```sql
-- Analogy in SQL terms I'd understand:
-- SELECT user, application FROM access_policies
-- WHERE department = 'sales' AND device_compliant = TRUE;
```
* How heavy is the initial integration and ongoing maintenance? We don’t have a massive SIEM or a dedicated SOC.
* Cost-wise, for a 50-person shop, are we looking at a sensible investment for the security gained, or would we be paying for a million features we’ll never use?
Just looking for some real-world experience from smaller teams. Did you find it streamlined your remote access, or did it add a lot of complexity? Thanks in advance for any insights.