It’s 2025. Do you know where your VPN is?
IT teams considering remote network access have traditionally leaned toward virtual private networks (VPNs). But after a year that saw a number of attacks on the privacy architecture, some organizations are rethinking things, including moving to software-defined perimeters (SDPs).
Jim Coyle, US public sector CTO at Lookout, told IT Brew that the situation is complicated.
“There’s still a need, even in large corporate environments, for VPNs,” Coyle said. “It’s a very specific use case; if you have explicit trust, then a VPN can be utilized, meaning you know the user, you know the environment, you know the hardware that they’re on, and you run all of it.”
That doesn’t necessarily mean that VPNs are secure, however. DH2i co-founder and CEO Don Boxley Jr. told IT Brew in November that he has concerns over how the attack surface has evolved due to the pervasiveness of VPNs, and urged a rethinking on how organizations approach virtual network security.
“The real issue for those large organizations is where they’ve got thousands of people accessing critical systems via VPNs,” Boxley said.
Read the rest here.—EH
|