Norwegian National Cyber Security Centre Recommends Moving Away from SSLVPN and WebVPN
Norwegian National Cyber Security Centre Recommends Moving Away from SSLVPN and WebVPN
The Norwegian National Cyber Security Centre (NCSC) has issued a notice recommending the replacement of SSLVPN and WebVPN solutions.
IPsec with IKEv2 is the NCSC’s recommended alternative for secure remote access. This protocol encrypts and authenticates each packet of data, using keys that are refreshed periodically. Despite acknowledging that no protocol is entirely free of flaws, the NCSC believes that IPsec with IKEv2 significantly reduces the attack surface for secure remote access incidents, especially due to its reduced tolerance for configuration errors compared to SSLVPN.
What the heck is an SSL VPN?
The notice shared several recommendations to protect against the attacks such as blocking access to services from insecure infrastructure such as anonymization services (VPN providers and Tor exit nodes) and VPS providers. Cisco released important security updates to address these vulnerabilities.
Tor is "insecure infrastructure" wtf are they smoking?!? It doesn't get more secure than TAILS.