September 2021 Summaries

Network architectures are evolving to handle modern complexity, but they often hinder IT and security teams. Traditional network architectures were designed with a "trust" assumption, which is no longer valid due to trends like virtualization, software-as-a-service, and remote access. Instead, organizations should adopt a zero-trust network architecture that protects each resource individually, regardless of user identity, device, or connection method. This approach requires considering factors such as business stage, user base, and regulations when designing a network architecture. With the rise of virtualization, software-as-a-service, and remote access, traditional network architectures are under pressure to adapt to these changes. A modern network architecture should prioritize simplicity, performance, and security, using solutions like Twingate that simplify and secure network architectures.

TwinGate is a platform that aims to make Zero Trust security easy for companies of all sizes. The company has introduced several new product developments to simplify the migration to a Zero Trust security model, including service accounts that provide secure access for services and automated processes. These features are designed to address common pain points in Zero Trust deployments, such as managing access controls and scaling infrastructure. TwinGate's Terraform Provider and Admin API also enable customers to automate their Twingate deployments using Infrastructure-as-Code. The company has received positive feedback from its customer community, which has been instrumental in shaping the roadmap for Twingate. With its focus on automation, simplicity, and human-centric security, TwinGate is poised to become a leading solution for Zero Trust infrastructure automation.

Remote Desktop Protocol (RDP) and Virtual Private Networks (VPN) are two outdated security technologies that continue to be commonly used despite their security flaws. RDP allows users to access and control office desktop computers over the internet, while VPN provides secure remote access to shared network resources. However, both technologies have inherent security weaknesses, such as being vulnerable to cybercriminals' attacks and requiring extensive networking expertise for deployment. In contrast, modern access control approaches like Zero Trust Network Access (ZTNA) and Software Defined Perimeters (SDP) offer improved security, flexibility, and scalability, making them a better option for companies looking to enhance their remote access solutions. Twingate's zero-trust solution is an example of such an approach, allowing users to connect securely while minimizing the attack surface.

A VPN Passthrough is a feature that allows a router to support legacy VPN protocols, enabling the establishment of secure connections over routers that require NAT. IPsec Passthrough and PPTP Passthrough are two types of passthroughs that allow routers to pass through legacy VPN protocols, including IPsec and PPTP, respectively. These features are necessary for organizations using older protocols, such as IPsec or PPTP, and can help solve one of the shortcomings of these protocols. However, they also have disadvantages, such as increased computational time and potential security risks if not implemented correctly. Modern routers often come with passthrough functionality enabled by default, making it easier to implement VPN Passthroughs. Nevertheless, VPN technology is becoming outdated, and more secure, Zero Trust-based technologies are replacing VPNs, offering alternative solutions for organizations seeking robust networking security.

Remote Desktop Protocol (RDP) is a way to access and control a computer over a network, allowing users to operate their office desktop computer from anywhere in the world. RDP was introduced by Microsoft in 1998 as part of Windows NT Server 4.0 Terminal Server Edition, with its original purpose being to enable companies to deploy "thin client" architectures. Over time, it has become a way for traveling employees to access their work computers and has been widely adopted due to its convenience. However, RDP also introduces new challenges and risks, including sensitivity to bandwidth and latency, security vulnerabilities, exposed ports, and weak passwords. These issues can be mitigated by implementing measures such as hiding RDP ports, using access control, enforcing strong passwords, and replacing RDP with a modern remote access solution like Twingate's zero trust network access (ZTNA) solution.

Access control is a critical aspect of modern IT teams, and this guide provides essential information on the concepts, technologies, and best practices for implementing effective access control strategies. The guide covers various aspects of access control, including mandatory access control (MAC), discretionary access control (DAC), role-based access control (RBAC), privileged access management (PAM), virtual private networking (VPN), remote desktop protocol (RDP), software-defined perimeter (SDP), and zero-trust network access (ZTNA). It also discusses the importance of authentication, authorization, administration, audit, and accountability within an access control system. The guide highlights the advantages and disadvantages of each approach, as well as their use cases and limitations. Additionally, it provides information on how to implement ACLs, allowlisting, and other security measures to protect against cyber threats. Overall, this guide is a comprehensive resource for IT teams looking to develop effective access control strategies in today's complex network environment.