Secure twice, open once
The increasing popularity of VPN technology has recently exposed a number of serious vulnerabilities in the software used to connect thousands of remote offices and workers to their corporate networks.
While the recent security alerts may have corporate IT managers taking a hard look at their VPN hardware and software, one prominent corporate security expert says that it is policies, not patches, that are needed to shore up VPN.
"It's an education problem," says Russ Cooper, surgeon general of TruSecure. "You have VPNs establishing bridges that result in a totally untrustworthy network being connected to an otherwise well-managed corporate network."
What is needed, according to Cooper, are improved corporate IT policies that crack down on sloppy practices, like allowing employees to alter the configuration of company-supplied hardware in order to facilitate file sharing and Web browsing at home.
[ Read more ]
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.