On-Premises Apps and Remote Workers: How to Secure a Hybrid IT Environment

Krystal Wang, September 20, 2018

While many organizations are moving to the cloud, the reality is this: most use a hybrid environment, and many of their on-premises components aren’t going anywhere soon. Examples of such hybrid components include virtual private networks (VPNs) and/or virtual desktop infrastructures (VDIs), which enable remote access to company resources. Protecting access to these technologies is critical, as VPNs and VDIs are attractive targets for cyber attackers, and the gateway to your internal networks and protected assets.

Okta Multi-Factor Authentication for VPNs and VDIs

One of the simplest and most cost effective measures of preventing identity-related cyber attacks is to enable multi-factor authentication (MFA). MFA is particularly important for protected resources and on-premises infrastructures because a breach here allows attackers access to your internal networks and sensitive data.

Hybrid organizations require this enhanced security, but also need easy implementation and a seamless experience for end users. With pre-integrated apps for MFA for VPNs and MFA for VDIs, Okta solves both of these issues.

The Okta Integration Network (OIN) makes these options readily discoverable, and includes pre-integrated apps to top vendors like Palo Alto Networks and VMware. All apps include easy-to-follow, step-by-step instructions for your specific product integration. That means your IT team requires no prior VPN or VDI product knowledge for a successful rollout of your MFA integration! Using the Cisco AnyConnect VPN client? No experience needed to seamlessly set up your MFA in front of it. And coupled with Okta Adaptive MFA and features like end-user inline enrollment, enabling MFA for your infrastructure components improves security without frustrating users.

Using a custom app or vendor without a pre-built connector to Okta? No problem—use the Okta generic RADIUS app to enable these apps with MFA.

MFA Everywhere

Attackers will continually seek to leverage credentials and privileged information. An effective system must strive to continually secure access and enforce authentication policies to as many apps and resources as possible. MFA everywhere is a realistic goal, but shouldn’t burden the end user or disrupt productivity.

Placing Okta Adaptive MFA in front of more apps means not only stronger, enhanced security, but simultaneously improving both the admin and end-user experience. In addition, Adaptive MFA helps to secure discrete systems and can help your organization strategically move towards a new industry standard, the zero trust security model.

This is why Okta is committed to supporting integrations across leading vendors in a variety of infrastructure categories. Organizations can add MFA and share identity data throughout their entire ecosystem.

To consider all the deployments we support, check out the Okta Adaptive MFA page. Have a MFA project to tackle in your organization? Get started with a free Okta trial.

Twitter image