CISA and NSA Release Guidance on Selecting and Hardening VPNs

guest · Sep 28, 2021

CISA and NSA Release Guidance on Selecting and Hardening VPNs
September 28, 2021
https://us-cert.cisa.gov/ncas/curre...release-guidance-selecting-and-hardening-vpns

The National Security Agency (NSA) and CISA have released the cybersecurity information sheet Selecting and Hardening Standards-based Remote Access VPN Solutions to address the potential security risks associated with using Virtual Private Networks (VPNs). Remote-access VPN servers allow off-site users to tunnel into protected networks, making these entry points vulnerable to exploitation by malicious cyber actors.
Click to expand...

Exploitation of these devices can enable:

Credential harvesting

Remote code execution on the VPN device

Cryptographic weakening of encrypted traffic sessions

Hijacking of encrypted traffic sessions

Arbitrary reads of sensitive data (e.g., configurations, credentials, keys) from the device

The information sheet helps organizations select standards-based (rather than proprietary) VPN solutions and provides hardening guidance to prevent compromise and respond to attacks.
Click to expand...

CISA encourages organizations to review and adopt recommendations in the information sheet to reduce risk.
Click to expand...

Log in or Sign up

CISA and NSA Release Guidance on Selecting and Hardening VPNs

guest Guest

Log in or Sign up

CISA and NSA Release Guidance on Selecting and Hardening VPNs

guest Guest

Useful Searches