1. Update List - Visual-Guard 2024.3
- MFA Validate Operation (for business actions)
A process in Visual Guard where Multi-Factor Authentication (MFA) is required to authorize specific business actions. This ensures that critical operations are executed only after verifying the user’s identity through multiple authentication methods, enhancing security for sensitive tasks within applications.
Purpose of MFA Validation:
- This process is designed to strengthen the security around critical business functions, especially those that involve sensitive or high-impact operations, by requiring users to authenticate using multiple methods. For example, it might involve entering a password and then confirming via a one-time code sent to a mobile device.
- Visual Guard’s MFA validation can be applied to specific actions, adding an additional layer of security when a user performs tasks like approving transactions, accessing confidential data, or executing administrative commands.
Benefits of using this feature:
- Enhanced Security: Protects sensitive business operations by requiring additional authentication layers, reducing unauthorized access risks.
- Compliance Support: Helps meet regulatory and compliance standards by safeguarding critical actions with strong identity verification.
- User Accountability: Creates a clear audit trail by linking actions to authenticated users, improving traceability for critical operations.
- Risk Mitigation: Minimizes the potential impact of compromised credentials by requiring multifactor checks before high-risk actions.
- Operational Flexibility: Allows for selective application of MFA to specific actions, balancing security needs with user convenience.
2. Performance improvement for private connections
The latest VisualGuard release significantly improves the performance of private connections to the VisualGuard repository.
What is a private connection?The VisualGuard Identity Server enables your application to securely connect to the Identity Server, which in turn accesses the database repository to retrieve user security data. This architecture enhances security by isolating your application from direct database access. We refer to this secure connection as a private connection.
You can configure a private connection between your application and the VisualGuard Identity Server using secure protocols such as HTTPS, HTTP, and gRPC. This optimization directly impacts the secure communication pipeline between your application and the VisualGuard Identity Server. By employing industry-standard protocols such as HTTPS, HTTP, and gRPC, you can establish a highly secure and efficient data transfer channel. This refined architecture safeguards sensitive user security data while accelerating response times and overall system performance.
Benefits of using a private connection:
- Enhanced Data Security: A private connection isolates data from public networks, reducing the risk of interception and unauthorized access, essential for handling sensitive information securely.
- Controlled Access: Only authorized systems and users within the private network can access the Visual Guard Identity Server, enhancing control over who can interact with identity management resources.
- Improved Performance: Private connections can offer lower latency and more stable bandwidth, resulting in faster, more reliable authentication processes, especially for high-transaction environments.
- Compliance Support: Many regulatory frameworks require secure, private data channels, so using a private connection can help meet compliance standards more easily.
- Reduced Exposure to Threats: By limiting access to private network users, the potential for attacks from external threats is significantly minimized.
