When a user tries to connect

[rakhirhif8963]

Multifactor authentication is increasingly used to control connections. In its modern form, it is usually built as a cloud service, which allows, on its basis, to provide access not only to the corporate ICT environment, but also to external cloud resources used by the company through integration with the Active Directory service.

, for example, to Office 365 or to a remote access gateway to penetrate the corporate perimeter, due to a special protocol, his connection request is sent to the identification and authentication service, if necessary, the request can be redirected to the corporate Active Directory, after which additional verification factors can be used (a one-time code received via SMS or PUSH technology, biometrics, a test call by phone - there are many options). It is important to note that modern identification and authentication tools, such as Cisco Duo , check the authenticity of connections not once, at the moment of connection, but continuously, monitoring the azerbaijan mobile database of devices and users for anomalies and thereby complicating the possibility of their substitution by intruders.

It is important to note the emergence of a new information security task - identification and authentication of IT and information security service employees by the users themselves. If previously company employees communicated with specialists of these services either in person or via trusted corporate communication channels, then in remote work, when specialists also contact users from their personal devices, additional verification of these devices by the users themselves is required. For this, the same multi-factor authentication or simple and pre-defined password phrases are used, which are selected, for example, using ordinary cards with one-time codes printed on a printer (an inexpensive but effective means of protection).