We hope that this VPN FAQ provided by our VPN consulting team will help you answer most basic questions. Whatever solution you eventually choose and given the complexity of the issues involved we strongly recommend that you work with a VPN consulting firm or VPN specialist, and humbly invite you to contact our VPN consulting team for specific VPN questions or for a FREE ON-SITE EVALUATION.
Business Issues
Why should I use VPN?
Nowadays most corporate offices operate through a computer network. Most offices also use the Internet, whether for research, e-mail or other communications. Although network firewalls prevent most attacks from outsiders seeking to breach into the network using the Internet, they also prevent remote users to access essential data. That's where VPN comes in. By ensuring that only properly configured and authenticated users can access network data, and that this data is secure because encrypted, companies can implement mobile network access and telecommuting from any Internet-enabled location.
Back to FAQ
What is the best VPN solution?
As bland as it may sound, the best solution is the one that fits your bill, there is no VPN "killer app" that can provide all the benefits without any of the drawbacks. Back to FAQ What are the pros and cons of VPN? Potential Pros: VPNs enable secure broadband connections (through cable modems, DSL, etc.). VPNs make it easy to manage T1 lines, phone and data lines and remote access terminals. VPNs can create significant communication savings in particular when lots of remote users dial-in from outside the local calling area. IP-based VPN can keep IT management costs down. Dynamic configuration ensures adaptability to changing network configuration and needs. Potential Cons: VPNs may provide less bandwidth than by using direct lines. VPNs is more prone to Internet connectivity problems. To ensure maximum availability it may be wise to secure on-call specialized support services, typical ISP support may not prove efficient enough. VPN being mostly Internet-based, it is dependent on connections to be up. If your ISP is down, so is your VPN. Emergency dial-in access may be used as a limited, temporary back-up.
Back to FAQ
How do I choose a VPN solution?
You first need to ask yourself a few simple questions: "what is my current network setup?" "how many users should connect at any time?", "where will they connect from?", "how sensitive is the data accessed from outside?" etc. Once you know your needs in terms of security, performance and versatility, depending on how your prioritize those elements the type of solution will impose itself. "Plug-and-Work" corporate VPNs: if you would like to connect some remote offices to your headquarters you will probably start by examining hardware-based solutions. Secure, easy to setup, use and manage, encrypting routers also relieve the server from any intensive work. If your focus is both on performance and usability, this type of VPN is a good candidate, especially for small to medium-sized firms with a limited IT budget. Flexible Telecommuting: if you are looking into VPN for a mobile sales force working on laptops from many locations, you will require a solution that can flow within an heterogeneous setup. This will also be the case for business partnership-type of situations. Software-based VPN solutions allow great flexibility in terms of implementation and usage. But because of this adaptability they can be harder to setup and manage, so outsourcing VPN support can be a good idea in order to avoid overloading your IT staff and ensure continuous connectivity When the 'P' is what matters in 'VPN': For insurance companies, financial and legal institutions network data is very sensitive, even secret. For those firms absolute privacy is critical for online business. And most sales organizations wouldn't want their commission rates or internal studies to fall in the wrong hands. When privacy is at stake, you may opt for a firewall-based solution. This will ensure tighter and more restrictive security as well as additional alarm and logging capabilities. If security is the biggest concern, that should be your pick. For performance and bandwidth-eating activities choose a solution that incorporates additional encryption hardware to speed up processing.
Back to FAQ
What VPN features should I look for?
Once you know what type of VPN you should implement you will still have a wide range of solutions to choose amongst. Besides parameters specific to your setup and overall budget, you will choose a VPN product for its features. Here are some of the most important ones you should always be looking into before making up your mind: Authetication methods: Some vendors provide 'data authentication', others provide 'user authentication'. When referring to 'authentication', make sure your vendor means BOTH; Transmission Modes : Believe it or not, some VPN solutions provide no encryption whatsoever. Make sure yours supports ETM (Encrypted Tunnel Mode), anything short of it is compromising your network security unnecessarily; Traffic control: prioritizing the available bandwidth between users and applications is a must for a "democratic" VPN and will avoid unnecessary network jams/hangs; Selective encryption: encrypting only a subset of traffic can bring a lot of relief to your CPU, secure only sensitive information and free up lot of resouces for other tasks; Topology: some VPNs offer more than the standard couple of Ethernet interfaces (10/100Mbs) and can count on NT or Unix for LAN management, but make sure your CPU can handle it as well; Advanced logging: look for centralized logging capabilities such as SNMP management. The more you know about your VPN the better you will manage it and the faster you will react to sensitive situations; VPN management: too often overlooked, management modules and stations can reveal themselves unfriendly or expensive overtime. This one aspect of VPN can actually boost or defeat your VPN deployment strategy; Enterprise management: a VPN is only secure as the rest of your network is, be sure that your VPN fits in your overall security policies; CA/Key support: Certificate Authorities support is a strong point for any VPN solution and PKI compliance is a must for Extranet VPNs. Depending on your requirements this may greatly narrow down your range of choice.
ActivSupport delivers consulting and outsourcing services across Microsoft, Linux, and Macintosh networks to small businesses and enterprises alike all over the U.S. For a free consultation, call ActivSupport at 1-877-ACTIVNET (1-877-228-4863) or use our online contact form.
