Wyden Urges Federal Agencies to Replace Legacy VPNs With Zero Trust
Summary
Sen. Ron Wyden urged U.S. agencies to remove public-facing legacy VPNs and remote-access systems, proposing a two-year deadline for civilian agencies and new zero-trust standards and funding guidance. He cited attacks involving products from several vendors.
Key points
- Wyden urged CISA to set a two-year deadline for civilian agencies to remove public-facing remote-access systems.
- He called on the NSA to order a similar purge across military, intelligence and other national security networks.
- Wyden asked NIST to develop implementation standards and OMB to provide funding guidance for the move to zero-trust architecture.
- He cited attacks involving Cisco, Fortinet, Ivanti and Check Point products, and said foreign adversaries had gained administrative access and stolen sensitive data.
Article Details
- Event Type
- Sen. Ron Wyden urged U.S. agencies to phase out insecure, internet-facing VPNs and legacy remote-access systems and adopt zero-trust architecture.
- Impact
- Wyden said attackers exploiting legacy VPNs had gained administrative access to target networks and stolen sensitive data from U.S. government agencies and companies. He urged CISA to set a two-year removal deadline and called on NIST and OMB to support the transition with standards and funding guidance.
People
Vendors
Check PointHe called for a move to zero-trust architecture across federal networks to reduce exposure from products such as Cisco, Fortinet, Ivanti, and Check Point.CiscoHe called for a move to zero-trust architecture across federal networks to reduce exposure from products such as Cisco, Fortinet, Ivanti, and Check Point.FortinetHe called for a move to zero-trust architecture across federal networks to reduce exposure from products such as Cisco, Fortinet, Ivanti, and Check Point.IvantiHe called for a move to zero-trust architecture across federal networks to reduce exposure from products such as Cisco, Fortinet, Ivanti, and Check Point.