Traditional web access certification system"Inter-firm network borders"But mixed office is the norm: employees spend part of their time in offices, some part of their time away from work, home or on business trips. The boundaries of the network are becoming blurred and access to them has become more common."Intranet access"Extended"Remote access"This is a discussion of how the web access certification system can be expanded to hybrid offices and remote access.
New challenges to access arising from mixed offices
Mixed office means that users are no longer unique in terms of access location and mode of access: they may be connected to the office by wire and wireless, or at home, in hotels, and via the Internet in cafés."Trust by physical location"The access mode is no longer applicable, as remote access is not even within the network boundary."Where does the human being access?"Changed"Who is the person, the equipment credible and the need for a visit"The uniform determination also incorporates remote access into a unified access strategy.
Uniform authentication of remote access: from VPN to uniform access
The most common way to access remote office is VPN. In a mixed office setting, the access system connects to the VPN system and achieves uniform identification: when employees have remote access, they use an account number system that is consistent with the enterprise’s internal identity management to complete their authentication and enjoy a unified identity management. More further, the concept of access can be extended to remote access, which also requires validation and credible evaluation of equipment, not because it is controlled through VPN.
Combining with zero trust: from one-time access to continuous validation
Mixed Office"Access"from"One-time check on access"Expand to"Continuous validation during access"This is a highly compatible concept with the zero trust."Never trust, never continue to verify.", based on the location of the network, but rather on identity, equipment, and behaviour. The web access certification system can evolve in this direction: combined with a zero-trust structure, continuous monitoring of users and equipment after access, dynamically adjusting access rights when an anomaly (e.g. infected equipment, account entry, access abnormality) is detected, rather than once and for all."Access"Here."Continuous trust"The evolution of the mixed office era.
Mobile Office and Multi-end Access Policy
In a mixed office environment, staff use a variety of devices such as notebooks, cell phones, tablets, etc. to access the same multi-end scenarios. The access strategy covers these multiple scenes: different authorization by type and purpose of equipment, office notebook access to core resources, mobile device access to mobile office applications, personal equipment only access to restricted resources."The inner network is tight and the remote is loose."The mouth.
Landing proposal: identity first, then gradual expansion
The network access certification system is expanded to a mixed office, and the site does not have to be established. It recommends steps. First, the identification of remote and in-house access is harmonized, allowing VPN and intranet access to the same account number system; second, the remote access equipment is integrated into equipment management and is assessed with confidence for basic equipment; third, the continuous validation and zero trust capability is introduced gradually to achieve dynamic access control.
Network access certification system expanded to hybrid office and remote access, with core"Harmonization of remote and intranet authentication, continuous validation with zero trust, multi-end differential authorization, step by step identification"The boundaries of the network are changing. And the concept of access is changing.——From"Secure the inside of the net."Here."Manage all access, wherever it is.". The integration of remote access into a unified access system allows businesses to remain secure in the mixed-office age.