Federal agencies given 18 months to remove unsupported edge devices

CISA order signals ramping up of response to nation-state-initiated attacks.

Federal agencies have been given 18 months in which to remove firewalls, routers, VPNs, and any other edge devices that are no longer receiving vendor support.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a Binding Operational Directive, BOD 26-02, in an escalation of its response to the growing

The

Register for free to keep reading

To continue reading this article and unlock full access to GRIP, register now. You’ll enjoy free access to all content until our subscription service launches in early 2026.

  • Unlimited access to industry insights
  • Stay on top of key rules and regulatory changes with our Rules Navigator
  • Ad-free experience with no distractions
  • Regular podcasts from trusted external experts
  • Fresh compliance and regulatory content every day