How would we notice that a former employee's device is still connecting?

Mostly through accounts, partly through the network. On the identity side: disable the person's accounts on the last day, revoke VPN certificates and application sessions, remove their devices from device management, change shared passwords they knew, and check for mail forwarding rules and personal devices registered for MFA. Then watch the sign-in logs for that account and alert on any use. On the network side, a device that still has access, such as a personal phone with the office Wi-Fi password or a home PC with a saved VPN profile, shows up when it connects: the NetSenX network map lists devices seen on monitored segments with first and last seen, on every plan, so a device you thought was gone appears again, and the VPN view lists tunnels and gateway sessions. Change the Wi-Fi password, or better, use per-user Wi-Fi credentials, so that a leaver's devices cannot rejoin. NetSenX watches devices, not people, and does not track a former employee.

← All 45 questions on Zero trust, identity and segmentationAll topics