VPN gateways and other internet-facing security infrastructure remain attractive targets because they can provide direct access to corporate networks. Attackers can exploit software vulnerabilities before patches are available or during the period when organisations are testing and deploying fixes.
Stolen credentials create a second route of attack. Where multi-factor authentication is not in place, compromised login details can allow criminals to access remote systems without exploiting a technical vulnerability.
Corero’s Zero Trust Admission Control, or ZTAC, is designed to reduce these risks by limiting which sources are allowed to reach critical network services in the first place.
The system can automatically block traffic from sources associated with malicious activity, including bots, Tor exit nodes, anonymising proxies and other untrusted infrastructure. This filtering takes place before the traffic reaches a VPN gateway or next-generation firewall.
The approach is intended to reduce the attack surface at the edge of the network. Cybercriminals frequently use concealed or temporary infrastructure to scan systems for vulnerabilities, test stolen credentials and launch attacks while making their origins harder to trace. Blocking these sources earlier can reduce the amount of hostile or unwanted traffic reaching remote-access systems.
Corero is applying a zero-trust principle to internet-facing infrastructure by challenging the assumption that every internet connection should automatically be allowed to reach a login page.
Corero Network Security plc (LON:CNS) is a global provider of automated business continuity and network security solutions.
