Dynamic variance mechanism for securing enterprise resources using a virtual private network

A computer-implemented method, comprising:

• authenticating a client device for a virtual private network (VPN) connection based on a first device identifier received from the client device and a second device identifier received from a remote management service;
• determining that a network event associated with the client device has been observed based on network data associated with the VPN connection;
• executing a machine learning routine to identify a pattern of access for the client device;
• determining a network access anomaly in response to a network interaction of the client device deviating from the pattern of access for the client device;
• and
• performing a remedial action based on an anomaly type associated with the network access anomaly.

A non-transitory computer-readable medium comprising program instructions stored thereon executable in a computing device that, when executed, direct the computing device to:

• authenticate a client device for a virtual private network (VPN) connection based on a first device identifier received from the client device and a second device identifier received from a remote management service;
• determine that a network event associated with the client device has been observed based on network data associated with the VPN connection;
• execute a machine learning routine to identify a pattern of access for the client device;
• determine a network access anomaly in response to a network interaction of the client device deviating from the pattern of access for the client device;
• and
• perform a remedial action based on an anomaly type associated with the network access anomaly.