{"id":50142,"date":"2023-01-17T22:51:00","date_gmt":"2023-01-17T22:51:00","guid":{"rendered":"https:\/\/www.csoonline.com\/article\/3685573\/remoteit-takes-steps-toward-zero-trust-with-single-line-of-code-provisioning.html#tk.rss_security"},"modified":"2023-01-17T22:51:00","modified_gmt":"2023-01-17T22:51:00","slug":"remote-it-takes-steps-toward-zero-trust-with-single-line-of-code-provisioning","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/remote-it-takes-steps-toward-zero-trust-with-single-line-of-code-provisioning\/","title":{"rendered":"Remote.it takes steps toward zero trust with ‘single line of code’ provisioning"},"content":{"rendered":"
<\/div>\n

Network management company Remote.it today announced new features for its core SaaS<\/a>-based service, including support for the Okta user identification platform and Docker containers, and what it\u2019s describing as \u201cprogrammatic deployment” of zero trust<\/a> networks.<\/p>\n

Essentially, the company said, the idea is to provide automated provisioning and deployment of network access to managed assetts \u2014 using a small, 80KB daemon designed to run on almost any hardware to hook into the TCP\/IP stack and create a connection with Remote.it\u2019s systems. The company\u2019s own cloud then automatically configures the connection, without any requirement of input from IT staff.<\/p>\n

\u201cLet\u2019s say [an asset] is making a connection to something in Finland,\u201d said CEO Ryo Koyama. \u201cThe [agent] makes a request, our systems validate and authenticate, and we send down information to both points that has routing information and encryption keys.\u201d<\/p>\n

Beyond a simple reduction in workload, according to Koyama, the system comes with powerful security advantages \u2014 particularly with the use of a new tagging feature, which lets IT teams create tags for specific categories of users and assets with particularized access to other \u201ctags.\u201d This is more potent than simply using a VPN to protect organizational resources.<\/p>\n

\u201cUsually, [with a remote asset], people have to worry about protecting the sub-node address space,\u201d he said. \u201cIn our case, it\u2019s all bound to localhost, and what that means is that even if the local area subnet is breached, no one can see any services running.\u201d<\/p>\n

Experts described this as a useful approach to network provisioning and security, but took issue with the idea that the company\u2019s product represents a turnkey \u201czero trust\u201d capacity. According to IDC research director Christopher Rodriguez, zero trust requires a wider set of competencies.<\/p>\n