Virtual Private Network
A VPN connects participants logically over existing networks. Protected connections, permitted routes and rights in target applications need separate planning.
What does VPN mean?
A Virtual Private Network (VPN) builds a logical network on existing networks. NIST describes restricted virtual networks and protected connections, often using tunnels and encryption. Which connections are protected and which destinations are reachable depend on the method and its configuration.
Example: reaching an internal administration service
In a fictional design, an authorised person connects from outside through a VPN to an internal administration service. The team defines who may connect and which network areas should be reachable through it. The connection does not necessarily carry all data traffic.
The application still checks login and roles. An active VPN connection is not blanket permission for all internal projects. The participating devices and access credentials also need protection.
When revoking access, the team considers both VPN access and application permissions. A VPN does not guarantee anonymity and replaces neither secure configuration of the target systems nor their updates.
Sources
Related terms
- IP addressAn IP address provides addressing on a network. It differs from a domain name and alone says nothing about the application reachable at that address.
- Transport Layer SecurityTLS protects data in transit between its endpoints. Application permissions, stored data and further connections need their own measures.
- FirewallA firewall controls network traffic according to rules. An allowed connection replaces neither secure software nor permission checks within the application.
- Return-PathReturn-Path records the SMTP reverse path in a header. It explains the technical route for error reports, not a person’s identity.
- Envelope-FromEnvelope-From identifies the SMTP sender for transport and error feedback. It must be distinguished from the visible sender address.
- DMARC aggregate reportA DMARC aggregate report summarises a reporting mail system’s domain checks over a period. It helps examine sending sources and misconfigurations.
Articles on this topic
Cloud & Operations with ASES
Hosting, deployment, maintenance and support