In light of the big increase in cyber crime I would like to ask what steps are being taken to ensure BC on prem is secure for users accessing over the internet.
I can see there appears to be no security other than a password if the BC is set to use NAVUserPassword. There is no failed login attempt lock out or password expiry policy. The same appears to be for Windows. I noticed that a brute force attack seems to slow the login refresh as more attempts are tried. There might be some process that delays the next login attempt based on the number of failed attempts but this would be crude.
Therefore it looks to me that using AccessControl Service and linking this to AAD with MFA enabled is a possible route but I have not tried this to see how it works. There is an option to set the access to only allow known user ip addresses on the firewall but that is problematic given the remote working and non static ips in use.
Any guidance and comments on this would be appreciated.
