Re:Die, VPN: We're all "telecommuters" now—and IT must...
by barista on Thursday October 13, 2011 @04:35PM
(#3108651)
> VPNs these days are one-click to establish
DirectAccess is a zero click connection where the company network and resources are available any time you want it. I tried it for a few months and it works like a magic.
For things like security and data protection, you always have bitlocker
I agree that it's becoming less necessary as more and more services use strong, end-to-end encryption. However, using a VPN reduces the attack surface area of a network. SSL guarantees that nobody can eavesdrop on the communication but it doesn't guarantee who you're communicating with. Restricting access to the VPN and internal networks means that any 0-day bugs have little impact on your security as less services need to be public-facing.
The biggest threat with telecommuters is that you leave security up to them and who knows what trojans/rootkits lurk undetected on their machine to your antivirus/antimalware software.