Have you found a solution to fully manage all the devices on your network?

It's impossible to know all your network devices unless you're directing each one at a new buildout. We try our best when we have anything brought in that has a network connection. Back when I was managing stuff on-prem, I knew exactly what the expected target IP address would be so we could track things a bit closer. But you're never going to know all of them. When there's the user element bringing whatever they want into the office—like Alexas, which has happened—you never know what's going to happen.

We often talk about end-users and access, etc., but we don't talk about all the devices on a network that are just as vulnerable and can't be managed. And the ones you can manage are connected to some manufacturing device, whether it's a Rockwell or some ICI system that’s run by a Windows 7 or Windows XP machine that you can't patch or put AV on. What do we do in that case?

Solutions like Armis can tell you what a device was doing and if it was out of its normal behavior. And if it was out of its normal behavior, it will tell you about it and suggest you might want to go fix it. When I worked at the vaping company, we had every best in class security tool you could think of and we were still getting nailed. We were sending information out to these foreign countries that weren't friendly and couldn’t figure out why. It wasn't until I got a proof of concept (POC) with Armis, just to see. Within 10 minutes of hooking it up, they say, "By the way, your cameras are sending stuff to Russia. You might want to check that out." And we had no idea. We had a 20-person security operation center (SOC) and nobody could find this stuff. So, the posturing of these devices is important: knowing what you have and knowing what everything is doing. But companies like Tanium and Armis still don't address the zero-trust issue.