Assessment of VPNs, remote desktop services and other remote access solutions, focusing on authentication, exposure, configuration and the controls governing what users can access after connecting.
Book a Free ConsultationRemote access services provide a route into internal systems and are often exposed directly to the Internet, making their security particularly important.
Krypsys assesses remote access solutions such as VPN gateways, remote desktop services, virtual desktop platforms and third-party remote support systems. Testing considers both the externally exposed service and the controls that govern who can connect, how they authenticate and what access becomes available after connection.
Testing can be carried out from an external perspective and, where required, with designated test accounts. This allows our consultants to assess not only the service configuration, but also how authentication, multi-factor authentication, access controls and network restrictions behave in use.
Particular attention is given to whether a normal remote user can reach systems or services outside their intended level of access, and whether the remote access solution introduces a route into more sensitive parts of the environment.
Where credentials are supplied, we can assess the access available to a standard remote user and determine whether network segmentation and downstream controls restrict them as intended.
The work is tailored to the technology in use and is not limited to configuration review. Controls can be actively tested to determine whether they can be bypassed or misused.
Any weaknesses identified are manually validated and documented with sufficient technical detail for remediation and subsequent retesting.
Book a free consultation. We'll discuss your environment and recommend the right engagement for your risk profile and compliance requirements.