Zero-trust network access contains attackers from certain areas of a network, but segmentation prevents them from moving through the network once inside.
“Zero trust is hard, and it's not something that any one vendor is going to be able to necessarily push the industry to completion with," John Roese said.
The new capability enables features like patch and update readiness, URL category filtering, antivirus and malware scanning, and user identification and control.