VPN Security Assessment

If your organisation has remote users connecting to your network via VPN, you run the risk of hackers using it as an entry point to your internal network. GNS helps you avoid malicious infiltration and ensures true end-to-end security with the Virtual Private Network Security Assessment. We review the policy and procedures used to support and administer the VPN and assess the current configuration of the VPN and associated systems.

During the review, our network security consultants’ work with system and network administrators to obtain necessary information to evaluate existing policy and procedure documentation, assess actual procedures in use for VPN support and administration, review the technical architecture of the VPN deployment, and identify issues in any of these areas.

GNS also performs a technical assessment of the VPN configuration, which may include external and internal network scans, authentication and authorisation testing, and system vulnerability testing. The report deliverables include an executive summary overview, a detailed technical report, and detailed testing results.

There are many reasons to do a VPN security assessment, including:

• To secure your remote access to prevent hackers from using your VPN as a tunnel to your internal network

• To verify that you have end-to-end security and not just an encrypted tunnel

• To verify the security of both your SSL based VPN and your IPSec based VPN

GNS VPN Security Assessment methodology consists of the following steps:

• We conduct an external and Internal VPN vulnerability scan.
• We conduct a VPN policy and procedure review.
• We conduct a VPN architecture review.

We conduct an interview with the VPN administrator.