The solution for us is total endpoint control. Our application endpoints have their own DNS root. :+ )

I think you underestimate the complexity of securing data in a privileged network.

Even with BYOD, you still need a firewall... Source: Am Enterprise IT.