Establishing and controlling remote access to corporate networks

M.Comm.The problem of establishing and controlling remote access to corporate networks has become one of the most difficult issues facing network administrators and information security professionals (Tipton & Krause (b), 2001:99). As the connection devices become more powerful and less expensive, more and more personally owned devices make their way to the connected edge of the network. The rise of the Internet as an accepted vehicle for business use has dramatically increased the points of entry to the corporate network. As employees and third parties gain mobility through the use of laptops, smart phones and Personal Digital Assistants (PDAs), the threat to organisational security grows (Cartwright, 2001). There are three main reasons why remote access connections are often insecure: Lack of awareness regarding security risks associated with remote access; Protecting a remote access connection is a complex task which is unlikely to be done well unless a methodical approach is taken; and Remote locations are not under the direct control of the organisation and are inherently insecure (Information Security Forum (a), 1999). The purpose of this short dissertation is to: Provide an overview of remote access, including concepts and definitions; Identify the risks associated with remote access to corporate networks; Identify possible controls to mitigate these risks; and highlight possible future trends regarding remote access