Norway recommends replacing SSL VPN to prevent breaches

The Norwegian NCSC warns that repeated, active exploitation of SSLVPN/WebVPN vulnerabilities (including zero-days used against Cisco ASA, FortiGate, and others) has enabled threat actors and ransomware groups to breach critical networks; it recommends migrating to IPsec with IKEv2 by 2025 (earlier for critical infrastructure), disabling SSLVPN, using certificate-based auth, and applying interim logging and geofencing mitigations.