Over the next 12 to 18 months, Federal Civilian Executive Branch (FCEB) agencies have been directed by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) to improve asset lifecycle management for edge network devices and eliminate those that are no longer receiving security updates from original equipment manufacturers (OEMs).
Since state-sponsored threat actors use these devices as a preferred entry method to breach target networks, the agency stated that the action is intended to reduce technological debt and reduce the chance of compromise.
Load balancers, firewalls, routers, switches, wireless access points, network security appliances, Internet of Things (IoT) edge devices, software-defined networks, and other real or virtual networking components that route network traffic and grant privileged access are all included under the general term “edge devices.
Unsupported edge devices—hardware and software that no longer receive vendor firmware upgrades or other security patches read more about CISA Orders Removal of Unsupported Edge Devices to Reduce Federal Network Risk.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.