Skip to main content

Connectivity Options - Private Connection

CCC.VPC.CP10

The service can be configured with a dedicated, private, high-speed connection between on-premises networks and the virtual network that does not traverse the public internet.

Related Threats

IDTitleDescription
CCC.VPC.TH09Compromise Propagates Over Hybrid ConnectionsPrivate connections, site-to-site VPNs, and transit hubs may be configured with routes and network rules that permit broad access between on-premises networks and the virtual network. A compromise of either side can be used to move laterally into the other, impacting the confidentiality, integrity, and availability of resources on both sides of the connection.
CCC.VPC.TH10Hybrid Connection Traffic is Unencrypted or Weakly EncryptedDedicated private connections may carry traffic without encryption, and VPN tunnels may be negotiated with deprecated protocol versions or weak key-exchange groups. Traffic traversing the connection can be read or modified by an entity with access to the transmission path, impacting the confidentiality and integrity of data.