Secure twice, open once
The increasing popularity of VPN technology has recently exposed a number of serious vulnerabilities in the software used to connect thousands of remote offices and workers to their corporate networks.
While the recent security alerts may have corporate IT managers taking a hard look at their VPN hardware and software, one prominent corporate security expert says that it is policies, not patches, that are needed to shore up VPN.
"It's an education problem," says Russ Cooper, surgeon general of TruSecure. "You have VPNs establishing bridges that result in a totally untrustworthy network being connected to an otherwise well-managed corporate network."
What is needed, according to Cooper, are improved corporate IT policies that crack down on sloppy practices, like allowing employees to alter the configuration of company-supplied hardware in order to facilitate file sharing and Web browsing at home.
[ Read more ]