DEF CON 31 - Defeating VPN Always On - Maxime Clementz

VPN Always-On is a security control that can be deployed to mobile endpoints that remotely access corporate resources through VPN. It is designed to prevent data leaks and narrow attack surface of enrolled end-user equipment connected to untrusted networks. When it is enforced, the mobile device can only reach the VPN gateway and all connections are tunneled.

We will review the relevant Windows API, the practicalities of this feature, look at popular VPN software; we will then consider ridiculously complex …

access always on attack attack surface con connected control corporate data data leaks def def con def con 31 device end endpoints equipment leaks mobile mobile device mobile endpoints networks resources security untrusted vpn