The standard advice is to replace your VPN with ZTNA. As a description of where the industry is going, that’s correct. As a project plan, it’s close to useless — because “replace the remote access system every employee depends on, all at once, with a product we haven’t operated before” is not a proposal that survives a change advisory board, and it isn’t how any of the successful transitions we’ve seen actually went.