Dynamic virtual private network protocol configuration
Provided is a computer-implemented method, system, and computer program product for dynamically configuring a virtual private network (VPN) protocol of a VPN tunnel. A processor may analyze data activity associated with a first device, where the first device is connected to a second device using a VPN tunnel. The processor may compare the analyzed data activity to a set of policies for determining a VPN protocol to apply to the VPN tunnel. The processor may identify, based on the comparing, a first VPN protocol from a plurality of VPN protocols. The processor may apply the first VPN protocol to the VPN tunnel.
1. A computer-implemented method for dynamically configuring a virtual private network (VPN) protocol of a VPN tunnel, the method comprising:
analyzing data activity associated with a first device, wherein the first device is connected to a second device using a VPN tunnel;
comparing the analyzed data activity to a set of policies for determining a VPN protocol to apply to the VPN tunnel;
identifying, based on the comparing, a first VPN protocol from a plurality of VPN protocols;
applying the first VPN protocol to the VPN tunnel; and
continuously monitoring the data activity for a change indicative of a requirement to apply a different VPN protocol to the VPN tunnel.
2. The computer-implemented method of claim 1 , further comprising:
identifying a change in the data activity to a second data activity associated with the first device;
analyzing the second data activity;
comparing the analyzed second data activity to the set of policies for determining the VPN protocol to apply to the VPN tunnel;
identifying, based on the comparing, a second VPN protocol from the plurality of VPN protocols; and
applying the second VPN protocol to the VPN tunnel.
3. The computer-implemented method of claim 1 , wherein each policy of set of policies correlates to applying a specific VPN protocol based on a security level required for a given data activity.
4. The computer-implemented method of claim 1 , wherein analyzing the data activity comprises analyzing one or more data activity chosen from the group consisting of:
a type of data being transmitted using the VPN tunnel;
a type of activity being performed with the data;
a login credential associated with the first device;
data traffic and network bandwidth associated with the VPN tunnel; and
a location of data being transmitted using the VPN tunnel.
5. The computer-implemented method of claim 1 , wherein the set of policies are based upon applying historical VPN protocols to historical data activities related to the first device.
6. The computer-implemented method of claim 1 , wherein analyzing the data activity associated with the first device further comprises determining a posture of the first device.
7. The computer-implemented method of claim 6 , wherein the posture comprises one or more security attributes and a location of the first device.
8. The computer-implemented method of claim 7 , further comprising:
detecting a change in the posture of the first device; and
re-analyzing, based on detecting the change in posture, the configuration of the VPN protocol.
9. The computer-implemented method of claim 1 , wherein the plurality of VPN protocols comprises two or more VPN protocols from the group consisting of:
Internet Protocol Security (IPSec);
Layer 2 Tunneling Protocol (L2TP);
Point-to-Point Tunneling Protocol (PPTP);
Secure Sockets Layer (SSL);
Transport Layer Security (TLS);
Open VPN; and
Secure Shell (SSH).
10. The computer-implemented method of claim 1 , wherein analyzing the data activity associated with the first device is performed using machine learning.
11. A system comprising:
a processor; and
a computer-readable storage medium communicatively coupled to the processor and storing program instructions which, when executed by the processor, cause the processor to perform a method comprising:
analyzing data activity associated with a first device, wherein the first device is connected to a second device using a VPN tunnel;
comparing the analyzed data activity to a set of policies for determining a VPN protocol to apply to the VPN tunnel;
identifying, based on the comparing, a first VPN protocol from a plurality of VPN protocols;
applying the first VPN protocol to the VPN tunnel; and
continuously monitoring the data activity for a change indicative of a requirement to apply a different VPN protocol to the VPN tunnel.
12. The system of claim 11 , wherein the method performed by the processor further comprises:
identifying a change in the data activity to a second data activity associated with the first device;
analyzing the second data activity;
comparing the analyzed second data activity to the set of policies for determining the VPN protocol to apply to the VPN tunnel;
identifying, based on the comparing, a second VPN protocol from the plurality of VPN protocols; and
applying the second VPN protocol to the VPN tunnel.
13. The system of claim 11 , wherein each policy of set of policies correlates to applying a specific VPN protocol based on a security level required for a given data activity.
14. The system of claim 11 , wherein analyzing the data activity comprises analyzing one or more data activity chosen from the group consisting of:
a type of data being transmitted using the VPN tunnel;
a type of activity being performed with the data;
a login credential associated with the first device;
data traffic and network bandwidth associated with the VPN tunnel; and
a location of data being transmitted using the VPN tunnel.
15. The system of claim 11 , wherein the set of policies are based upon applying historical VPN protocols to historical data activities related to the first device.
16. A computer program product comprising a computer-readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to perform a method comprising:
analyzing data activity associated with a first device, wherein the first device is connected to a second device using a VPN tunnel;
comparing the analyzed data activity to a set of policies for determining a VPN protocol to apply to the VPN tunnel;
identifying, based on the comparing, a first VPN protocol from a plurality of VPN protocols;
applying the first VPN protocol to the VPN tunnel; and
continuously monitoring the data activity for a change indicative of a requirement to apply a different VPN protocol to the VPN tunnel.
17. The computer program product of claim 16 , wherein the method performed by the processor further comprises:
identifying a change in the data activity to a second data activity associated with the first device;
analyzing the second data activity;
comparing the analyzed second data activity to the set of policies for determining the VPN protocol to apply to the VPN tunnel;
identifying, based on the comparing, a second VPN protocol from the plurality of VPN protocols; and
applying the second VPN protocol to the VPN tunnel.
18. The computer program product of claim 16 , wherein each policy of set of policies correlates to applying a specific VPN protocol based on a security level required for a given data activity.
19. The computer program product of claim 16 , wherein analyzing the data activity comprises analyzing one or more data activity chosen from the group consisting of:
a type of data being transmitted using the VPN tunnel;
a type of activity being performed with the data;
a login credential associated with the first device;
data traffic and network bandwidth associated with the VPN tunnel; and
a location of data being transmitted using the VPN tunnel.
20. The computer program product of claim 16 , wherein the set of policies are based upon applying historical VPN protocols to historical data activities related to the first device.