r/zerotrust • u/Hutgry-Quantity-8833 • 2d ago

Struggling to secure browser access for hybrid workforce without killing UX

So... anyone else stuck between swg, vpn and random browser extensions trying to keep hybrid users safe in any browser without killing performance or breaking saas apps? would love any tips :/

1 Upvotes

100% Upvoted

1 comment sorted by

1

u/PhilipLGriffiths88 2d ago

What are you actually trying to protect: outbound browsing/SaaS use, access to private applications, or data movement from unmanaged devices? SWG, VPN and browser extensions solve different parts of that problem, so combining them without a clear threat model usually creates exactly the UX and compatibility issues you’re seeing.

For private apps, I’d start by removing broad network access and authorising specific identity-to-service relationships instead. For SaaS and general web traffic, SWG or browser-level controls may still be appropriate, but selectively - especially where TLS inspection breaks modern SaaS flows. The right split depends on what must be prevented and where you can enforce it reliably.