This paper discusses the need for and details of a Zero Trust approach to network security. It also itemizes the essential criteria and capabilities required of a Zero Trust solution, explains how the Palo Alto Networks Next-Generation Security Platform delivers on these requirements, and provides guidance on how to progressively migrate to a Zero Trust design.