News for hackers. Stuff that matters.

A comment on BeyondCorp: How Google Ditched VPNs for Remote Employee Access. Parent comment

Re:BeyondCorp: How Google Ditched VPNs for Remote Employee A... by pquerna on Monday January 22, 2018 @11:13AM (#16205473)
Partially agree, but the world is a big place. Lots of random internal resources do exist, even at big companies.

Internal resources are owned by many separate teams. They implement AuthN / AuthZ on their own. Resources might prompt for a username & password and then do an LDAP Bind with them, or they might have a local database, or they might use an SSO/SAML, or any other number of mechanisms.

Resource owners want to move fast, they want new internal apps. Central IT/Security wants to add WAFs, 2FA, centralized logging, and all kinds of other controls.

The BeyondCorp model moves these responsibility to an easier to deploy model. It's now centralized as a service, rather than each internal app needing to buy 5 security appliances that they are required to put in their rack.

[ Parent | on HN ]
Re:BeyondCorp: How Google Ditched VPNs for Remote Employee A... by dboreham on Tuesday January 23, 2018 @08:54AM (#16213522)
No disagreement on all that. More layers of security are generally better. The places I worked generally had a centralized SSO service and a strong security team that would hunt down and kill services deployed without authentication.
[ Parent | on HN ]