Stories
Slash Boxes
Comments

SoylentNews is people

posted by Fnord666 on Wednesday December 18 2019, @07:54PM   Printer-friendly
from the what's-old-is-new-again dept.

VPNs are a way of stitching together separate networks, often physically separate ones, such that they resemble a single logical network. They are (mis-)used heavily these days on the mistaken premise that the network inside any given firewall is somehow secure and the network outside that firewall is somehow less secure. The idea of not trusting the network at all, the foundation of several of the services developed in the 1980s under MIT's Project Athena, such as Kerberos, is returning. Zero Trust is the new name for the networking concept in which no part of the network is considered secure, whether inside or outside a firewall. The pendulum is swinging back and multiple articles this year cover the fact that Zero Trust Networking is trending.

VPNs are part of a security strategy based on the notion of a network perimeter; trusted employees are on the inside and untrusted employees are on the outside. But that model no longer works in a modern business environment where mobile employees access the network from a variety of inside or outside locations, and where corporate assets reside not behind the walls of an enterprise data center, but in multi-cloud environments.

Gartner predicts that by 2023, 60% of enterprises will phase out most of their VPNs in favor of zero trust network access, which can take the form of a gateway or broker that authenticates both device and user before allowing role-based, context-aware access.

Is this a case of what's old is new again or merely a case of being so obvious that no one bothered to mention it and thus it got forgotten because it largely went unsaid? VPNs have a place, but the way in which they are often used amounts to just more snake oil. Many have long pointed out that if a product or service cannot exist online without a firewall then it should never have been connected to the network in the first place.

See also
SC Magazine: Kill the VPN. Move to Zero Trust
Zscaler blog: Zero trust is shaking up VPN strategies
Business Wire: New Research Reveals Widespread Movement to Replace VPNs With Zero Trust Network Access
Techzine: 'Companies want to replace VPN with Zero Trust Network Access'


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 0) by Anonymous Coward on Wednesday December 18 2019, @10:28PM (3 children)

    by Anonymous Coward on Wednesday December 18 2019, @10:28PM (#933952)

    Many have long pointed out that if a product or service cannot exist online without a firewall then it should never have been connected to the network in the first place.

    Many also believe in getting shit done, at the lowest cost possible consistent with a given risk profile. Fun idea but totally falls apart when the networks need to start being used to do things.

  • (Score: 4, Funny) by meustrus on Wednesday December 18 2019, @10:50PM

    by meustrus (4961) on Wednesday December 18 2019, @10:50PM (#933962)

    That's why you need Framework™ to do security for you! Just give us a ton of money and you can get shit done just as fast as before without even thinking about security!

    --
    If there isn't at least one reference or primary source, it's not +1 Informative. Maybe the underused +1 Interesting?
  • (Score: 2) by canopic jug on Thursday December 19 2019, @06:00AM (1 child)

    by canopic jug (3949) Subscriber Badge on Thursday December 19 2019, @06:00AM (#934111) Journal

    ... consistent with a given risk profile ...

    I've seen the type. Your risk profile is all about getting paid and moving on before everything you uploaded or even touched goes up in flames, tips over, and sinks into the swamp. Many have cleaned up after sabateurs like you. You are a drain on society.

    --
    Money is not free speech. Elections should not be auctions.
    • (Score: 0) by Anonymous Coward on Thursday December 19 2019, @01:44PM

      by Anonymous Coward on Thursday December 19 2019, @01:44PM (#934189)

      Just build another one!