With Coronavirus spread across the world, many of the organization's IT team spent a lot of time and effort to build the remote access infrastructure. It helps to extend your staffs working from office to home without disturbing your business operations. However, it also means expose your attack surface for bad actor which can leverage your staff PC or personal device to attack your internal critical applications.
Image Source: Future-Proof Your Digital Business With Zero Trust Security, Forrester Research, Inc., October 4, 2019
The moment an employee establishes an SSL VPN session to the organisation internal network, any malicious malware/software on their private devices or network is on your organisation network.