Implementing Zero-Trust in a K-12 Learning Environment

In K-12 educational networks, the concept of inside/outside perimeter doesn’t apply when students, the largest number of internal users, actively try to defeat network and application defenses. For the Palo Alto Unified School District, the Zero Trust journey started with automated identity management and authenticated 802.1x WiFi access for everyone: students, staff, parents and contractors. “We trust you to use our WiFi,” was the branding slogan used to connect with users and create buy-in. Users are granted access to resources based on who they are, not from where they’re connecting. The journey has continued with MFA for all 2,200 staff members, wired 802.1x authentication and, most recently, firewall rules based on users and groups.