Turn off your VPN for enhanced security

This article advises organizations to reassess VPN usage, emphasizing that VPNs can expand the attack surface and become major entry points—highlighted during Log4j-era exploits—and recommends disabling unnecessary VPNs. For unavoidable VPN use, it outlines strict controls aligned with Zero Trust, including source-IP allowlists, geographic restrictions, granular VPN ACLs, and MFA-protected web access with dynamic ACLs to limit exposure.