Skip to content

Commit fd9bb19

Browse files
piotr-borpiotr-bor
committed
Update blog content: NIS2 MFA article (edits v.2)
1 parent 385251b commit fd9bb19

2 files changed

Lines changed: 133 additions & 38 deletions

File tree

‎src/components/MfaDiagram.astro‎

Lines changed: 121 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,121 @@
1+
---
2+
// src/components/MfaDiagram.astro
3+
---
4+
<div class="diagram-container">
5+
<div class="column">
6+
<h3>Before: Password-Only Access</h3>
7+
<div class="step">
8+
<div class="icon"><i class="fa-solid fa-user"></i></div>
9+
<div class="label">User</div>
10+
</div>
11+
<div class="arrow"><i class="fa-solid fa-arrow-down"></i></div>
12+
<div class="step">
13+
<div class="icon"><i class="fa-solid fa-key"></i></div>
14+
<div class="label">Password</div>
15+
</div>
16+
<div class="arrow"><i class="fa-solid fa-arrow-down"></i></div>
17+
<div class="step">
18+
<div class="icon icon-insecure"><i class="fa-solid fa-shield-halved"></i></div>
19+
<div class="label">Vulnerable Point</div>
20+
</div>
21+
<div class="arrow"><i class="fa-solid fa-arrow-down"></i></div>
22+
<div class="step">
23+
<div class="icon"><i class="fa-solid fa-server"></i></div>
24+
<div class="label">Corporate Network</div>
25+
</div>
26+
</div>
27+
<div class="column">
28+
<h3>After: MFA-Secured Access</h3>
29+
<div class="step">
30+
<div class="icon"><i class="fa-solid fa-user"></i></div>
31+
<div class="label">User</div>
32+
</div>
33+
<div class="arrow"><i class="fa-solid fa-arrow-down"></i></div>
34+
<div class="step">
35+
<div class="icon"><i class="fa-solid fa-key"></i></div>
36+
<div class="label">Password</div>
37+
</div>
38+
<div class="arrow"><i class="fa-solid fa-arrow-down"></i></div>
39+
<div class="step">
40+
<div class="icon"><i class="fa-solid fa-mobile-screen-button"></i></div>
41+
<div class="label">MFA Verification</div>
42+
</div>
43+
<div class="arrow"><i class="fa-solid fa-arrow-down"></i></div>
44+
<div class="step">
45+
<div class="icon icon-secure"><i class="fa-solid fa-shield"></i></div>
46+
<div class="label">Security Layer</div>
47+
</div>
48+
<div class="arrow"><i class="fa-solid fa-arrow-down"></i></div>
49+
<div class="step">
50+
<div class="icon"><i class="fa-solid fa-server"></i></div>
51+
<div class="label">Corporate Network</div>
52+
</div>
53+
</div>
54+
</div>
55+
56+
<style>
57+
/* Te style są automatycznie izolowane przez Astro! */
58+
.diagram-container {
59+
display: flex;
60+
gap: 2em;
61+
width: 100%;
62+
max-width: 800px;
63+
margin-top: 2rem;
64+
margin-bottom: 2rem;
65+
}
66+
67+
.column {
68+
flex: 1;
69+
display: flex;
70+
flex-direction: column;
71+
align-items: center;
72+
background-color: #ffffff;
73+
padding: 1.5em;
74+
border-radius: 12px;
75+
box-shadow: 0 4px 15px rgba(0, 0, 0, 0.08);
76+
border: 1px solid #e0e0e0;
77+
}
78+
79+
.column h3 {
80+
margin-top: 0;
81+
margin-bottom: 1.5em;
82+
color: #333;
83+
text-align: center;
84+
}
85+
86+
.step {
87+
text-align: center;
88+
}
89+
90+
.icon {
91+
font-size: 3em;
92+
margin-bottom: 0.25em;
93+
}
94+
95+
.arrow {
96+
font-size: 1.5em;
97+
color: #adb5bd;
98+
margin: 0.5em 0;
99+
}
100+
101+
.label {
102+
font-size: 0.9em;
103+
color: #6c757d;
104+
margin-top: 0.25em;
105+
}
106+
107+
.icon-insecure {
108+
color: #e74c3c; /* Red */
109+
}
110+
111+
.icon-secure {
112+
color: #2ecc71; /* Green */
113+
}
114+
115+
/* Responsive design for smaller screens */
116+
@media (max-width: 768px) {
117+
.diagram-container {
118+
flex-direction: column;
119+
}
120+
}
121+
</style>

‎src/content/blog/mfa-wireguard-nis2-compliance.mdx‎

Lines changed: 12 additions & 38 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,6 @@ author: "Piotr Borkowicz"
66
image: "/images/blog/mfa-nis2-hero.jpg"
77
---
88

9-
import MfaDiagram from '../../components/MfaDiagram.astro';
109

1110
![A central server connected securely to several computer terminals, representing a secure VPN network with MFA for NIS2 compliance.](/images/blog/mfa-nis2-hero.jpg)
1211

@@ -33,7 +32,6 @@ Many organizations use VPNs (Virtual Private Networks) to allow employees remote
3332

3433
As part of the NIS2 Directive, companies relying on VPN infrastructure to manage access to their network will be required to adopt MFA for VPN authentication. This ensures that even if VPN credentials are compromised, unauthorized access will still be difficult to achieve without additional factors, such as a biometric scan or a one-time passcode (OTP).
3534

36-
<MfaDiagram />
3735

3836
## WireGuard: The Modern VPN That Needs MFA Support
3937

@@ -114,10 +112,13 @@ With the NIS2 Directive pushing for stronger cybersecurity measures, adopting MF
114112
Solutions like Defguard make it easier than ever to integrate MFA into VPNs, while also offering identity management, SSO, and hardware key management. These added functionalities ensure organizations maintain the security, speed, and simplicity of their VPN while building a comprehensive, regulatory-compliant cybersecurity strategy. As cybersecurity continues to evolve, MFA and broader identity management capabilities will remain cornerstones of defense strategies, ensuring that even if credentials are compromised, access to critical systems remains secure.
115113

116114
---
117-
115+
Piotr Borkowicz
116+
Technical Content Marketing Manager, Defguard
117+
piotr@defguard.net
118+
defguard.net
118119

119120
<script type="application/ld+json" is:inline>
120-
{
121+
{`{
121122
"@context": "https://schema.org",
122123
"@type": "TechArticle",
123124
"mainEntityOfPage": {
@@ -126,49 +127,22 @@ Solutions like Defguard make it easier than ever to integrate MFA into VPNs, whi
126127
},
127128
"headline": "Adopting Multi-Factor Authentication (MFA) for WireGuard: A Path to Compliance with the NIS2 Directive",
128129
"description": "The NIS2 Directive mandates MFA for VPNs. Learn how to implement Multi-Factor Authentication on WireGuard with Defguard to ensure compliance and top-tier security.",
129-
"image": "[PLACEHOLDER_URL_DO_GŁÓWNEJ_GRAFIKI_HERO]",
130-
"author": {
131-
"@type": "Person",
132-
"name": "Piotr Borkowicz"
133-
},
130+
"image": "https://defguard.net/images/blog/Defguard-nis2-mfa/mfa-nis2-hero.jpg",
131+
"author": { "@type": "Person", "name": "Piotr Borkowicz" },
134132
"publisher": {
135133
"@type": "Organization",
136134
"name": "Defguard",
137-
"logo": {
138-
"@type": "ImageObject",
139-
"url": "[PLACEHOLDER_URL_DO_LOGO_TWOJEJ_FIRMY]"
140-
}
135+
"logo": { "@type": "ImageObject", "url": "https://defguard.net/svg/logo-full.svg" }
141136
},
142137
"datePublished": "2025-10-07",
143138
"dateModified": "2025-10-07",
144139
"mainEntity": {
145140
"@type": "FAQPage",
146141
"mainEntity": [
147-
{
148-
"@type": "Question",
149-
"name": "Is WireGuard alone sufficient for NIS2 compliance?",
150-
"acceptedAnswer": {
151-
"@type": "Answer",
152-
"text": "No. The base WireGuard protocol does not include a native MFA mechanism, which is a key technical requirement for access control under the NIS2 Directive."
153-
}
154-
},
155-
{
156-
"@type": "Question",
157-
"name": "What MFA methods does Defguard support for WireGuard?",
158-
"acceptedAnswer": {
159-
"@type": "Answer",
160-
"text": "Defguard supports a wide range of methods, including Time-based One-Time Passwords (TOTP), push notifications, biometrics, and FIDO2 hardware keys like YubiKey."
161-
}
162-
},
163-
{
164-
"@type": "Question",
165-
"name": "How is Defguard different from other MFA solutions?",
166-
"acceptedAnswer": {
167-
"@type": "Answer",
168-
"text": "Defguard is an integrated, open-source platform that combines MFA with Identity Management (IdP), SSO, and WireGuard configuration management in a single tool."
169-
}
170-
}
142+
{ "@type": "Question", "name": "Is WireGuard alone sufficient for NIS2 compliance?", "acceptedAnswer": { "@type": "Answer", "text": "No. The base WireGuard protocol does not include a native MFA mechanism, which is a key technical requirement for access control under the NIS2 Directive." } },
143+
{ "@type": "Question", "name": "What MFA methods does Defguard support for WireGuard?", "acceptedAnswer": { "@type": "Answer", "text": "Defguard supports a wide range of methods, including Time-based One-Time Passwords (TOTP), push notifications, biometrics, and FIDO2 hardware keys like YubiKey." } },
144+
{ "@type": "Question", "name": "How is Defguard different from other MFA solutions?", "acceptedAnswer": { "@type": "Answer", "text": "Defguard is an integrated, open-source platform that combines MFA with Identity Management (IdP), SSO, and WireGuard configuration management in a single tool." } }
171145
]
172146
}
173-
}
147+
}`}
174148
</script>

0 commit comments

Comments
 (0)