1

A company I’m applying to as web software tester is requiring me to be on-site so they could put me on their whitelist. However, I had a previous job which allowed me to work anywhere, using only Cisco VPN.

Is on-site whitelisting more secure than using off-site VPN? How so?

Improve this question

1 Answer 1

Reset to default
3

From a very basic perspective, yes, being onsite is safer.

The key reason being that there is a smaller attack surface.

If you are connecting in via a VPN, there are numerous additional items which could be attacked (yes, in a perfect world, you would have a secure VPN that couldn't be broken/hacked/misconfigured, but this world is definitely not perfect) so the number of potential exploits increases.

The difference may not be much in a well managed environment, but there are many organisations which still see the increase in risk as too far.

Improve this answer
1
  • To add to this: some companies simply have regulations in place or have setup their infrastructure in a way that do now allow for remote access to test and dev systems.
    – Tom K.
    Nov 30, 2018 at 10:55

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .