Frequently Asked Questions about ZerOS

What kinds of organizations and users can benefit from ZerOS software?

Ultimately, any organization interested in extending out remote access to enterprise networks and resources while protecting proprietary, sensitive information can benefit from ZerOS.

Does ZerOS provide secure access to classified systems?

Yes, ZerOS can help organizations implement and enforce Commercial for Classified Solutions (CSfC)-compliant protections for Mobile Access and Data-at-Rest.  ZerOS includes the option for a dedicated Networking Virtual Machine, that securely hosts the outer IPSec tunnel and isolates its operations from end users (simplifying the user experience and enforcing always-on protections).

How does ZerOS enable worker productivity?

ZerOS enables users to have remote access to their normal desktop from anywhere, with adequate protections, without relying on additional input or action from the end user.

Does ZerOS integrate into an organizations existing security infrastructure?

ZerOS complements an organization’s existing security posture. By working in tandem with existing security systems and protocol, ZerOS can better enforce device policies and behavior.

How does ZerOS fit into a zero-trust security framework?

ZerOS employs pre-boot and run-time system health checks and comply-to-connect enforcement, eliminating reliance on end users to ensure devices are secure prior to accessing enterprise networks and resources.  ZerOS’ proactive protection approach eliminates risks from an organization’s biggest vulnerability – end users.

Do you need to have a VPN to run ZerOS?

No. ZerOS performs pre-boot and run-time health checks and customizable security policies without requiring a VPN connection - leveraging an out-of-and management approach to communicate with security management infrastructure.  However, many of our customers require their endpoints to leverage VPN (often in addition to other network security software) to access enterprise networks - as such, ZerOS ensures VPNs are operational and cannot be disabled from end users.

Do you need to have a VDI to run ZerOS?

No. ZerOS works well in both a “data-full” (users store data locally) or in pure “zero client” (users access VDI resources) scenarios; as well as, hybrid approaches where some data is stored locally while most sensitive information is limited to VDI workspaces.  Many of our most security-conscious customers prefer VDI strategies to limit risk of data loss in hotels, residences, and other areas without advanced physical protections.  In those instances, ZerOS can lock-down traditional device resources to prevent users from storing data locally, downloading applications, and other high-risk behaviors.

Can ZerOS be applicable to BYOD (Bring Your Own Device) scenarios?

Yes, ZerOS can transform existing Windows 10 compatible devices into a zero-trust device that would meet your organizations security requirements.

Is ZerOS compatible with mobile phones and tablets?

No. ZerOS is focused on delivering full-featured work environments to remote workforces that need to consume information, generate content, access productivity tools, and leverage robust tools.  As such, ZerOS is not compatible with mobile phones or non-Windows tablets.   

ZerOS runs on almost any Windows 10-compatible device from trusted vendors such as Dell, Microsoft, and HP.  Below are the minimum specifications:

  • 8GB RAM
  • Windows 10 Enterprise OS
  • Intel i5 CPU or greater
  • TPM 2.0
  • UEFI boot enabled
What does it take to set up and maintain ZerOS?

ZerOS was built to minimize cost and complexity for customers.  Upon purchase, our ZerOS team will stand up all necessary management components and services (at no additional costs).  All ZerOS services are managed and maintained by our team as part of the license price and includes patches, updates, 24/7 security operations center, and more.  Customers are only responsible for the installation of the ZerOS endpoint software, which can be locally installed or remoted pushed through Microsoft SCCM.

How do you purchase ZerOS?

ZerOS is an annual subscription that is personalized to your enterprise’s needs. Reach out to our team today for a personalized quote.

Where is my organizations data stored?

ZerOS services and management data is stored in Azure GovCloud - each customer is assigned their own tenant to prevent co-mingling or spillage. Administrators will sign into their respective management environment using Azure Active Directory with Multi-Factor Authentication.

If I have an issue with ZerOS, who do I contact?

End users should follow their enterprise guidelines for help desk services or support.  IT Support Staff and Administrators can get access to training material, submit issues, request features, and more from our Service Now portal or by contacting ZerOS@bah.com.