cybersecurity map

Timing Isn't Everything But It Helps

Many lessons were learned in enterprise IT and security teams in 2020, right down to the final weeks of the year with the Solarwinds attack. We closed out a miserable year with a devastating reminder about the danger of third party access and supply chain attacks. Another painful lesson for IT teams was that current application access technologies, such as virtual private networks (VPN) or virtual desktop infrastructure (VDI), are too difficult to manage and scale. Even the most resource rich companies were forced to ration VPN access for employees, third parties, and partners. This is the opposite of digital transformation, and everything modern business is about. On top of those operational challenges was the fact that these solutions are not secure, and certainly not part of a zero-trust framework.

Meanwhile, in the C-Suite, secure application access went from off the radar completely to a business continuity issue on par with natural disasters and DDoS attacks. Modern business starts with the availability of enterprise assets. 2020 was the year that the C-Suite learned that legacy access solutions were a threat to business operations, digital transformation, and even margins. They are now asking IT leaders, why is something so fundamental to our business so out of touch with what we need?

Time for Change
IT leadership is about managing change and risk while charging full speed ahead. The old way of doing things does not last forever. Ask any developer. It turns out that the way we offer enterprise access is going through another step change in the never-ending march of progress that defines enterprise IT.

IT leaders have long had VPN/VDI on the list of eventual upgrades. Next year they said, other priorities took precedent, like managing an increasingly complex hybrid environment. Not this year. 2020 exposed the weakness of current approaches to the point the C-Suite noticed, and now something must be done. What lessons did we learn in 2020 that can lead us forward with a better, more secure, and user friendly approach to application access?

Lessons Learned
1. Business Starts with Access. Immediately following the work-from-home orders it became clear that access is where business begins. Legacy solutions could not scale quickly, as they relied on a mix of hardware, licenses, and agents on endpoints, requiring significant time and human resources, neither of which most companies had at that moment. When enterprise assets are unavailable to those who need them, business continuity and efficiency are disrupted. By turning to the cloud, businesses can enable access at scale, quickly and securely for employees and third-parties.

2. User experience matters. Users have complained for years that legacy access technologies were difficult to use, often leading them to avoid them altogether by logging into SaaS apps from personal devices outside the VPN/VDI. IT solutions should not be pushing users to make insecure choices for the sake of convenience. Again, by leveraging a modern cloud platform for application access, users are met with a familiar web interface to access all business applications.

3. Zero Means Zero. Zero Trust is a fantastic framework for organizational security. Most businesses say they are on their zero-trust journey. Leaving legacy access solutions behind for modern cloud-based application access solutions is one way to make a quantum leap forward. Legacy solutions offer too much implicit trust in the user, bringing them onto the network, to the doorstep of vulnerable applications. Furthermore, businesses have limited visibility and control over the user once they have gained access. With a cloud-based access solution, the cloud serves as a broker between the user and application. Users no longer gain access to the network, or the applications themselves. Furthermore, in this cloud-based model, every move by the user is checked, verified, and authorized. This is truly zero trust in action. Enterprise application access is now a C-Suite priority, and again, the cloud provides a way forward for enterprise IT teams. The cloud cannot solve all of your IT challenges, but it is certainly the future of enterprise application access solutions.

About the Author

Tamir Hardof, CMO, Axis Security

Featured

  • Just as Expected

    GSX produced a wonderful tradeshow earlier this week. Monday was surprisingly strong in the morning, and the afternoon wasn’t bad at all. That’s Monday’s results and asking attendees to travel on Sunday. Just a quick hint, no one wants to give up their weekend to travel and set up an exhibit booth. I’m just saying. Read Now

    • Industry Events
    • GSX
  • NOLA: The Crescent City

    Twenty years later we finds ourselves in New Orleans. Twenty years ago the aftermath of Hurricane Katrina forced exhibitors and attendees to look elsewhere for tradeshow floor space. Read Now

    • Industry Events
    • GSX
  • Nothing Artificial About this Intelligence

    I have been looking forward to this year’s GSX show in New Orleans, the Cresent City, or if you prefer The Big Easy. It seems like quite a while since we’ve been here. Twenty years ago, ASIS, as it was known then was literally washed out of the city by someone known as Katrina. It is a good thing to come back to NOLA. Read Now

  • From Monitors to Mission Control

    Security Operations Centers (SOC) were once defined by rows of static monitors, each displaying a single feed with operators quietly watching for issues. That model has become obsolete. Incidents evolve too quickly, data comes from multiple locations, and decisions must be made in seconds—not minutes. Read Now

  • New Gas Monkey Garage Venue Uses AI-Enhanced Video Technology

    Gas Monkey Garage, the automotive custom shop and entertainment brand founded by Richard Rawlings of Fast N’ Loud TV fame, has opened a vibrant new restaurant and bar in South Dakota, equipped with advanced, AI-enhanced video tech from IDIS Americas. Read Now

New Products

  • EasyGate SPT and SPD

    EasyGate SPT SPD

    Security solutions do not have to be ordinary, let alone unattractive. Having renewed their best-selling speed gates, Cominfo has once again demonstrated their Art of Security philosophy in practice — and confirmed their position as an industry-leading manufacturers of premium speed gates and turnstiles.

  • PE80 Series

    PE80 Series by SARGENT / ED4000/PED5000 Series by Corbin Russwin

    ASSA ABLOY, a global leader in access solutions, has announced the launch of two next generation exit devices from long-standing leaders in the premium exit device market: the PE80 Series by SARGENT and the PED4000/PED5000 Series by Corbin Russwin. These new exit devices boast industry-first features that are specifically designed to provide enhanced safety, security and convenience, setting new standards for exit solutions. The SARGENT PE80 and Corbin Russwin PED4000/PED5000 Series exit devices are engineered to meet the ever-evolving needs of modern buildings. Featuring the high strength, security and durability that ASSA ABLOY is known for, the new exit devices deliver several innovative, industry-first features in addition to elegant design finishes for every opening.

  • FEP GameChanger

    FEP GameChanger

    Paige Datacom Solutions Introduces Important and Innovative Cabling Products GameChanger Cable, a proven and patented solution that significantly exceeds the reach of traditional category cable will now have a FEP/FEP construction.