Skip to main content

Research details risks of legacy VPNs and NAC

7th article in the last 90 days, one of 18 articles referencing Ivanti. Previous coverage: CISA adds six vulnerabilities to Known Exploited Vulnerabilities Catalog (Aug 2025).

Companies mentioned

Best suited for

Persona
Security Architect
Decision stage
How to start
Adoption curve
Early Majority

Our classification, not the publisher's statement. Best suited for, not only for.

Recent findings illustrate the difficulties organizations encounter with traditional VPNs and network access controls in a cloud-first hybrid environment, underscoring the necessity for zero trust access solutions.

The reality of legacy access

The research shows that more than half of organizations have experienced at least one security incident related to VPNs within the past year. Vulnerabilities, such as the Ivanti CVE-2025-0282, enable unauthorized remote code execution, leading to increased data leaks and operational issues due to the extensive trust granted by legacy VPNs.

Furthermore, many respondents express skepticism about the effectiveness of Network Access Control (NAC) systems against contemporary threats, highlighting their limitations as hybrid workforces and cloud environments become prominent.

The shift to zero trust

In response to these issues, organizations are increasingly adopting Zero-Trust Network Access (ZTNA), with 26% already implementing it and 37% planning to do so in the coming year. The urgency for this shift is largely motivated by the need for enhanced security and simpler infrastructure management.

Demand for integrated solutions

Organizations are seeking ZTNA not just as a substitute for VPNs and NAC but also as a tool for real-time visibility and effective policy enforcement. Integrating ZTNA into a broader Security Services Edge (SSE) platform is an important step for data protection and threat prevention.

Rethinking access security

The shift to ZTNA requires a comprehensive approach to access security, emphasizing least-privilege access and continual verification of users and devices. This strategy aims to ensure security across all applications while guiding security professionals on transitioning from legacy systems.

This summary reflects a timely, fact-based overview of the discussed research findings and their implications for organizations looking to upgrade their access security frameworks.

Blog post, originally published by Summary by StringerAI - Source: Netskope at decisioninsights.ai.

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/research-details-risks-of-legacy-vpns-and-nac/",
        "name": "Research details risks of legacy VPNs and NAC",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/research-details-risks-of-legacy-vpns-and-nac/#blogposting",
    "@type": "BlogPosting",
    "about": {
      "@id": "https://decisioninsights.ai/registry/ivanti/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/ivanti/",
      "name": "Ivanti"
    },
    "articleSection": [
      "Cybersecurity",
      "Network Operator"
    ],
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Architect"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Majority"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-coverage/#person",
      "@type": "Person",
      "name": "Decision Insights Coverage",
      "url": "https://decisioninsights.ai/author/decision-insights-coverage/"
    },
    "dateModified": "2026-08-23T14:22:20-06:00",
    "datePublished": "2025-08-20T15:13:26-06:00",
    "description": "Organizations face increased risks from legacy VPNs and NAC, prompting a transition to Zero-Trust Network Access solutions.",
    "headline": "Research details risks of legacy VPNs and NAC",
    "isBasedOn": {
      "@type": "CreativeWork",
      "author": {
        "@type": "Person",
        "name": "Summary by StringerAI - Source: Netskope"
      },
      "url": "https://decisioninsights.ai/perspectives/research-highlights-risks-of-legacy-vpns-and-nac/2025/07/"
    },
    "keywords": [
      "Network Access Control",
      "Threats",
      "Zero Trust"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/research-details-risks-of-legacy-vpns-and-nac/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-23",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/ivanti/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/ivanti/",
        "name": "Ivanti"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-coverage/#person",
    "@type": "Person",
    "description": "Blog posts, podcasts, and video analysis from across the industry, condensed into short, sourced summaries. Produced under our Standards & Methodology.",
    "name": "Decision Insights Coverage",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-coverage/"
  }
]

Is this your company? Get structured data for your own pages