Customers are in no way implicitly dependable. Whenever a user tries to entry a source, they must be authenticated and licensed, irrespective of whether they're by now on the corporation network. Authenticated consumers are granted least-privilege entry only, and their permissions are revoked once their process is finished. See https://networkbookmarks.com/story17105360/the-smart-trick-of-network-security-that-no-one-is-discussing