Ultimately, any organization interested in extending out remote access to enterprise networks and resources while protecting proprietary, sensitive information can benefit from ZerOS.
Frequently Asked Questions about ZerOS
Yes, ZerOS can help organizations implement and enforce Commercial for Classified Solutions (CSfC)-compliant protections for Mobile Access and Data-at-Rest. ZerOS includes the option for a dedicated Networking Virtual Machine, that securely hosts the outer IPSec tunnel and isolates its operations from end users (simplifying the user experience and enforcing always-on protections).
ZerOS enables users to have remote access to their normal desktop from anywhere, with adequate protections, without relying on additional input or action from the end user.
ZerOS complements an organization’s existing security posture. By working in tandem with existing security systems and protocol, ZerOS can better enforce device policies and behavior.
ZerOS employs pre-boot and run-time system health checks and comply-to-connect enforcement, eliminating reliance on end users to ensure devices are secure prior to accessing enterprise networks and resources. ZerOS’ proactive protection approach eliminates risks from an organization’s biggest vulnerability – end users.
No. ZerOS performs pre-boot and run-time health checks and customizable security policies without requiring a VPN connection - leveraging an out-of-and management approach to communicate with security management infrastructure. However, many of our customers require their endpoints to leverage VPN (often in addition to other network security software) to access enterprise networks - as such, ZerOS ensures VPNs are operational and cannot be disabled from end users.
No. ZerOS works well in both a “data-full” (users store data locally) or in pure “zero client” (users access VDI resources) scenarios; as well as, hybrid approaches where some data is stored locally while most sensitive information is limited to VDI workspaces. Many of our most security-conscious customers prefer VDI strategies to limit risk of data loss in hotels, residences, and other areas without advanced physical protections. In those instances, ZerOS can lock-down traditional device resources to prevent users from storing data locally, downloading applications, and other high-risk behaviors.
Yes, ZerOS can transform existing Windows 10 compatible devices into a zero-trust device that would meet your organizations security requirements.
No. ZerOS is focused on delivering full-featured work environments to remote workforces that need to consume information, generate content, access productivity tools, and leverage robust tools. As such, ZerOS is not compatible with mobile phones or non-Windows tablets.
ZerOS runs on almost any Windows 10-compatible device from trusted vendors such as Dell, Microsoft, and HP. Below are the minimum specifications:
- 8GB RAM
- Windows 10 Enterprise OS
- Intel i5 CPU or greater
- TPM 2.0
- UEFI boot enabled
ZerOS was built to minimize cost and complexity for customers. Upon purchase, our ZerOS team will stand up all necessary management components and services (at no additional costs). All ZerOS services are managed and maintained by our team as part of the license price and includes patches, updates, 24/7 security operations center, and more. Customers are only responsible for the installation of the ZerOS endpoint software, which can be locally installed or remoted pushed through Microsoft SCCM.
ZerOS is an annual subscription that is personalized to your enterprise’s needs. Reach out to our team today for a personalized quote.
ZerOS services and management data is stored in Azure GovCloud - each customer is assigned their own tenant to prevent co-mingling or spillage. Administrators will sign into their respective management environment using Azure Active Directory with Multi-Factor Authentication.
End users should follow their enterprise guidelines for help desk services or support. IT Support Staff and Administrators can get access to training material, submit issues, request features, and more from our Service Now portal or by contacting ZerOS@bah.com.