Detection from low-cost VPN providers

InsightIDR
7

There is no great solution here. Suppressing all these low-cost VPN alerts could be done at your peril for reasons mentioned. Almost all such alerts are harmless nuisances, however.

So we dutifully look at each one, responding in one of several ways.

  1. Ask the user to confirm activity (and reminding of company policy).
  2. Blacklist the IP address range (whack-a-mole).
  3. Ignore it.
1 Like