Skip to main content

Research highlights risks of legacy VPNs and NAC

Source Decision Insights Coverage Published July 1, 2025 Companies 2
Human View Machine View

2 companies named across 9 categories, one of 14 articles referencing Ivanti. Previous coverage: CISA advisories and KEV updates, plus CloudBees Unify and Azure Managed Redis - Week of May 26, 2025 (May 2025).

Companies mentioned

Best suited for

Persona
Security Architect
Decision stage
Which to buy
Adoption curve
Early Majority

Our classification, not the publisher's statement. Best suited for, not only for.

Recent research highlights the challenges organizations face with legacy VPNs and network access controls (network access control (NAC)) in a cloud-first and hybrid environment, emphasizing the need for modern, zero trust access solutions.

The alarming reality of legacy access

The findings reveal that over half of organizations have experienced at least one VPN-related security incident in the past year, often exacerbated by vulnerabilities like the Ivanti CVE-2025-0282, which allows remote code execution without authentication. VPNs, originally designed for a different Edge Resource Allocator (ERA), now grant extensive trust access that adversaries exploit, increasing data leaks and operational disruptions.

Additionally, Network Access Control (NAC) systems are also proving ineffective against modern threats, with more than half of respondents doubting their security capabilities. As hybrid workforces and cloud infrastructures become the norm, NACs struggle to adapt effectively.

The imperative shift to zero trust

Despite these challenges, organizations are responding by adopting Zero-Trust Network Access (ZTNA), with 26% already implementing it and 37% planning to do so within the next year. The increasing urgency is driven by a desire for stronger security, simpler infrastructure management, and improved application performance.

Demand for integrated approaches

Organizations are not only looking for ZTNA to replace Virtual Private Network (VPN) and NAC but also expecting it to provide real-time visibility and seamless policy enforcement across their environments. The integration of ZTNA into a broader Secure Service Edge (SSE) platform is crucial for effective data protection and threat prevention.

Rethinking access security

The report emphasizes that moving to ZTNA involves more than replacement; it requires a proactive approach to access security that reflects current hybrid and cloud-based operational realities. The transition focuses on enforcing least-privilege access and continuously verifying user and device context to ensure robust security across all applications.

This analysis serves as a guide for security professionals, providing insights and strategies to move beyond outdated systems and build more adaptable and secure access frameworks.

https://www.wayfair.com/home-improvement/pdp/vinnova-24-single-bathroom-vanity-set-w100069614.html?piid=736742425%2C736742431

Blog post, originally published by Francisca Segovia at netskope.com.

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/research-highlights-risks-of-legacy-vpns-and-nac/",
        "name": "Research highlights risks of legacy VPNs and NAC",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/research-highlights-risks-of-legacy-vpns-and-nac/#blogposting",
    "@type": "BlogPosting",
    "about": {
      "@id": "https://decisioninsights.ai/registry/netskope/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/netskope/",
      "name": "Netskope"
    },
    "articleSection": [
      "Cybersecurity",
      "Data Center",
      "Network Operator"
    ],
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Architect"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Majority"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-coverage/#person",
      "@type": "Person",
      "name": "Decision Insights Coverage",
      "url": "https://decisioninsights.ai/author/decision-insights-coverage/"
    },
    "dateModified": "2026-08-24T09:56:23-06:00",
    "datePublished": "2025-07-01T13:56:32-06:00",
    "description": "Research finds legacy VPNs and NAC lack security for hybrid work, leading to a shift towards Zero Trust solutions.",
    "headline": "Research highlights risks of legacy VPNs and NAC",
    "isBasedOn": {
      "@type": "CreativeWork",
      "author": {
        "@type": "Person",
        "name": "Francisca Segovia"
      },
      "sourceOrganization": {
        "@id": "https://decisioninsights.ai/registry/netskope/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/netskope/",
        "name": "Netskope"
      },
      "url": "https://www.netskope.com/blog/are-your-vpns-and-nacs-secretly-sabotaging-your-security"
    },
    "keywords": [
      "Edge",
      "Edge Resource Allocator",
      "Network Access Control",
      "Threats",
      "Virtual Private Network",
      "Zero Trust"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/research-highlights-risks-of-legacy-vpns-and-nac/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-24",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/ivanti/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/ivanti/",
        "name": "Ivanti"
      },
      {
        "@id": "https://decisioninsights.ai/registry/netskope/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/netskope/",
        "name": "Netskope"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-coverage/#person",
    "@type": "Person",
    "description": "Blog posts, podcasts, and video analysis from across the industry, condensed into short, sourced summaries. Produced under our Standards & Methodology.",
    "name": "Decision Insights Coverage",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-coverage/"
  }
]

Is this your company? Get structured data for your own pages