CISA Releases Guidance on Network Access, VPNs

CISA Releases Guidance on Network Access, VPNs

June 27, 2024 at 11:50AM

The Cybersecurity and Infrastructure Security Agency, in collaboration with the FBI and New Zealand organizations, released guidance on modern network access security, emphasizing modern firewall and network access management technologies. It focuses on three approaches: zero trust, secure service edge, and secure access service edge. Recommended practices include continuous monitoring, multi-factor authentication, and regular security audits.

Based on the meeting notes, the key takeaways are:

1. There is a growing need for organizations to adopt modern firewall and network access management technologies to gain visibility over the network, due to the increasing number of breaches and data incidents.

2. The Cybersecurity and Infrastructure Security Agency (CISA) has issued guidance on three specific approaches: zero-trust, secure service edge (SSE), and secure access service edge (SASE) to address network access security.

3. Implementing the zero-trust model can reduce the risk of data breaches by around 50%, according to CISA.

4. Secure Service Edge (SSE) combines features such as cloud access security brokers (CASBs), secure web gateways (SWGs), and zero-trust network access (ZTNA), resulting in a 40% reduction in security incidents and a 30% improvement in network performance.

5. Secure Access Service Edge (SASE) broadens SSE’s functionality to provide users with secure, optimized access to data and applications, leading to a 35% improvement in network agility and a 25% reduction in operational costs.

6. The recommended network best practices include continuous monitoring and assessment, multi-factor authentication (MFA), and regular security audits to identify and respond to threats in real time.

Let me know if you need any further information or details on any of the points mentioned.

Full Article