Remote users - don't let them become your VPN's security weak link
 
|
|||
 | |||
|
Sign up to receive this and other networking newsletters in your inbox.
Your Internet virtual private network secures data via tunneling and encryption -- but remember to plug potential leaks outside the tunnel.
In particular, make it your business to insure the security of your remote users' PCs, especially if they are connected to your VPN via a connection such as digital subscriber line (DSL) or cable modem.
Once those remote users log in to the VPN, chances are they will stay logged in all day or all week. That gives intruders from the Internet plenty of time to try hacking in with Back Orifice or some other software that takes control of the remote PC.
If that commandeered PC is logged in to your corporate network when someone takes it over, the hacker has access to everything the authorized user does.
Two suggestions:
- Set up your VPN so remote users have to respond to authentication challenges every hour or so. That assures you still have an authorized user tapping away at that keyboard.
- Limit remote user access to corporate resources. Set up authorization profiles so remote users get access to just the resources they need and nothing more. That way, if an intruder does slip in, he won't be able to do as much damage.
Tim Greene is a senior editor at Network World, covering virtual private networking gear, remote access, core switching and local phone companies. You can reach him at tgreene@nww.com.
VPNs are easy - once you get the clients installed
Network World, 05/31/99
Protocols serve up VPN security
Network World, 05/31/99
Review: VPNs
Network World, 05/10/99
Review: VPN/firewalls
Network World, 04/19/99
Archive of Network World on Virtual Private Network newsletters
