Our company is doing research on implementing a VPN so employees can work remotely. Does the initial implementation...
By submitting your email address, you agree to receive emails regarding relevant topic offers from TechTarget and its partners. You can withdraw your consent at any time. Contact TechTarget at 275 Grove Street, Newton, MA.
tend to be expensive, and what are some implementation pitfalls that we ought to avoid?
Fortunately, a VPN deployment is usually inexpensive. In fact, if you don't expect more than a few dozen VPN users, you probably already have the technology you need built into your firewall. Consult the manufacturer's documentation for details. If, however, you expect a high load of VPN activity, you'll probably want to purchase a dedicated VPN appliance that uses hardware encryption technology for efficient processing.
When I think about past VPN deployments, these are the two requirements that come to mind to ensure a successful implementation:
- Define your authentication requirements for the VPN up front. What type of authentication will you require? The username and password setup is easy and familiar to users, but may not be enough to provide the desired level of network security. Many organizations choose to use an additional technology, such as keyfob authenticators, to increase the degree of trust in VPN user identities.
- Create a written user access policy. What services will VPN users be able to access? Will they be granted the same access to resources as users physically located in the office, or will their access be curtailed in some way? Sit down and document these policies before deploying your VPN or you'll be sure to have problems down the road.
A little planning goes a long way toward a successful VPN deployment. Clear up the policy issues from the beginning and you'll have an easier time rolling your VPN into production.
Dig Deeper on SSL and TLS VPN Security
Related Q&A from Mike Chapple
The FTC was granted authority in enterprise cybersecurity regulations. Expert Mike Chapple explains what this means for organizations.continue reading
PCI DSS is pretty specific about security, but does it do enough for mobile payment security? Expert Mike Chapple explains why he says yes.continue reading
The U.S. government has been criticized for its lack of updated privacy regulations. Expert Mike Chapple advises enterprises that want to bolster ...continue reading
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.