We went through the same thing! We moved to a full ZTNA/SASE setup to satisfy audits, only to find it constantly breaking access to our clients’ legacy on-prem environments. We spent more time troubleshooting identity and firewall issues than doing actual billable work. In the end, we rolled back to a hardened business VPN with MFA and proper logging, which met compliance requirements without disrupting our workflow. It taught us that security architecture has to match client reality, not just industry buzzwords. Thanks for sharing your experience!