Fortify Your Perimeter: MFA for VPN Connections

Don't let a compromised VPN account password be an attacker's entry point into your organization network. Join this session to understand the significant security enhancements Multi-Factor Authentication (MFA) enables for your remote access VPN connections. We'll quickly explore the risk and potential consequences of a non-MFA VPN account compromise, illustrating why relying on passwords alone is no longer tenable against modern phishing and brute-force attacks. We will also provide an overview of the implementation process for MFA on the Palo Alto platform. Beyond MFA implementation, we will also cover key strategies for MFA auditing and VPN logging/alerts in Google / on the Palo Alto platform, and reconfiguring VPN profiles to align access with the principle of least-privilege for staff, vendors, and network administrators.