Good VPN security policy

I've just been assigned the duties of performing risk assessment for my organization that will include me having to develop and write security policies. Currently, I'm researching security policy as it pertains to VPN.

This policy should address organizational site-to-site as well as organizational client-to-site connectivity. Is there any good VPN security policy reference material that could possibility help in facilitating my research?

Requires Free Membership to View

Login

By submitting you agree to receive email communications from
TechTarget and its partners. Privacy Policy Terms of Use.

First, I should note that risk assessment and policy development are two separate activities.

With regard to VPN security policies, below are a few links for you. Some are specific to VPNs and others are more general security policy references.

http://www.symantec.com/symadvantage/014/vpn.html
http://www.sans.org/resources/policies/
http://secinf.net/ipolicye.html
http://www.tisc2002.com/presos/S38/Piscitel.ppt

More News and Tutorials

Articles

Related glossary terms

Terms for Whatis.com - the technology online dictionary
- network encryption (network layer or network level encryption)
- Internet Key Exchange (IKE)

This was first published in July 2003

Join the conversationComment

Share

Comments

Results

Contribute to the conversation

All fields are required. Comments will appear at the bottom of the article.

Back to top

More from Related TechTarget Sites

Cloud Security
Consumerization
Financial Security
SMB Security
Security AU
Security IN
Computer Weekly

Cloud Security
- Can self-managed cloud security controls ease enterprise concerns?
  
  Expert Dave Shackleford details how enterprises can increasingly manage their own cloud security controls with private virtual cloud offerings.
- How to use PCI SSC supplement to achieve PCI compliance in the cloud
  
  Ed Moyle examines highlights of the recently released PCI SSC information supplement that offers new details on achieving PCI compliance in the cloud.
- Cloud API security risks: How to assess cloud service provider APIs
  
  The CSA says cloud API security is a top threat to cloud environments. Expert Dave Shackleford explains how to assess the security of providers' APIs.
Consumerization
- BlackBerry, VMware deliver dual persona features for mobile devices
  
  BlackBerry's Secure Work Space for iOS and Android will help heavily regulated companies or those searching for extra security to better support BYOD.
- How the consumerization of the enterprise has affected two firms
  
  The consumerization of the enterprise looks different in every company. Some firms are more open to new technologies and ways of working than others.
- Apple AirPrint and iOS printing alternatives: An IT overview
  
  Getting a document from a mobile device to paper is a hassle, but there are many options to help with iOS printing, including Apple AirPrint.
searchFinancialSecurity
- PayPal CISO: Laws must foster better cybersecurity information sharing
  
  PayPal's Michael Barrett says many firms fear misuse of shared cybersecurity data. He also discusses the evolution of PCI DSS and mobile payment security.
- Cybergang plans to use Trojan against U.S. banks
  
  A cybergang in Eastern Europe revealed plans to attack U.S. banks with a Gozi-like Trojan, according to RSA.
- Improved Shylock Trojan targets banking users
  
  The latest variant of the banking Trojan is causing numerous problems, Symantec said.
searchMidmarketSecurity
- Windows Phone 7 security: Assessing WP7 security features
  
  Windows Phone 7 security features are proving to be a mixed bag. Sam Cattle assesses the enterprise security pros and cons of the latest Windows mobile platform.
- Choosing the best security certifications for your career
  
  Whether starting your career or planning your next step as an IT security professional, this tip will guide you toward the best certifications for your interests and experience.
- Midmarket security tutorials
  
  SearchMidmarketSecurity.com’s tutorials offer IT professionals in-depth lessons and technical advice on the hottest topics in the midmarket IT security industry. Through our tutorials we seek to provide site members with the foundational knowledge needed to deal with the increasingly challenging job of keeping their organizations secure.
searchSecurityAU
- Website vulnerabilities down, but progress still needed, survey finds
  
  A survey released by WhiteHat Security finds that website vulnerabilities have decreased steadily in recent years, though problems persist.
- Cloud API security risks: How to assess cloud service provider APIs
  
  The CSA says cloud API security is a top threat to cloud environments. Expert Dave Shackleford explains how to assess the security of providers' APIs.
- How to configure a VLAN to achieve the benefits of VLAN security
  
  Expert Brad Casey explains how to configure a VLAN in order to achieve the benefits of VLAN security, including protection against insider attacks.
Information Security
- BYOD: Securing the risk to access the cost benefits
  
  Bring-your-own-device schemes offer businesses the opportunity to cut the costs and improve user experiences, but benefits can be dwarfed by the risks.
- Microsoft offers 'fix' for latest Internet Explorer zero day
  
  Microsoft released a temporary fix to mitigate attacks using the most recent Internet Explorer 8 zero day vulnerability.
- Mobile apps development: New threats or same security rules apply?
  
  Two security experts get up on their soap box about the steps software teams should take to secure applications throughout the apps' lifecycle.
Computer Weekly
- Dell sees profits plummet amid hardware freefall
  
  Dell saw profits plummet by 73% to $226m (£149m), as its first quarter results revealed its hardware division's profits to be in freefall
- Government spends £260m on e-prescribing
  
  Health secretary Jeremy Hunt commits £260m to e-prescriptions, as part of moves to make the NHS paperless by 2018
- Mahindra Satyam draws a line under turmoil
  
  Mahindra Satyam has drawn a line under the turmoil caused when a former Satyam director admitted to misreporting the company’s results

All Rights Reserved,Copyright 2000 - 2013, TechTarget