Quad's suppliers, which include providers of its printing presses, stitching and binding systems, use the SSL VPN to access their own applications. One supplier, for instance, accesses its maintenance apps directly through the SSL VPN, running a Windows server-based system that's part of Quad/Graphics' printing process.
"That locks them down and removes the virus risk," Drewek says.
The Also-Rans
Quad did consider IPsec-based alternatives before making the leap to SSL. For example, the company could have made its Cisco Systems-based IPsec VPN redundant, or used CSA (Cisco Secure Agent) software to verify that clients had the latest antivirus software and patches before they accessed the VPN. But because the printing company already had serious doubts about the security of IPsec, a redundant VPN didn't make sense. The hefty CSA client left too big a footprint on the company's customers and vendors, and it didn't support Mac OS, a popular operating system among Quad's graphics-oriented customers.
The NetScreen SA-3020 appliance, however, doesn't use clients. This means Quad/Graphics doesn't have to manage software on its own workstations or those of its suppliers and customers. The appliance also provides detailed logging of what users are doing when they come in through SSL.
To realize the benefits of cloud-native software, an application must actually be cloud-native—designed to run in the cloud, interacting with disaggregated cloud services, fully manageable as code—to deliver the expected benefits.
By combining resources and expertise, the AI-Enabled ICT Workforce Consortium will offer a blueprint for how industries can adapt to an AI-dominated future.
IT leaders should heed the guidance of cybersecurity insurance providers who think businesses should prioritize security education, incident preparedness, regular internal audits, and ongoing vulnerability scanning and patching.
