Home > Ask the Security Experts > Network Security Questions & Answers > A short enterprise VPN deployment guide
Ask The Security Expert: Questions & Answers
EMAIL THIS

A short enterprise VPN deployment guide

Mike Chapple, featured expert EXPERT RESPONSE FROM: Mike Chapple, featured expert

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 22 June 2009
Our company is doing research on implementing a VPN so employees can work remotely. Does the initial implementation tend to be expensive, and what are some implementation pitfalls that we ought to avoid?


BROWSE BY TAG
Network Security,   Secure VPN Setup and Configuration,   Enterprise Network Security,   SSL and TLS VPN Security,   IPsec VPN Security,   VIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED CONTENT
Network Security
How to set up a split-tunnel VPN in Windows Vista
What is the difference between static and dynamic network validation?
Port scan attack prevention best practices
Securing the intranet with remote access VPN security
How to prevent network sniffing and eavesdropping
How to implement virtual firewalls in a complex network infrastructure
How to manage network bandwidth with distributed ISP bandwidth
How to edit group policy objects to give a user local admin rights
How to prevent operating system cloning with AES 256-bit encryption
How to securely connect a LAN POS to a remote point-of-sale device

SSL and TLS VPN Security
Expert calls SSL protocol vulnerability a non issue
How SSL-encrypted Web connections are intercepted
Best Remote Access Products
How to set up a split-tunnel VPN in Windows Vista
Securing the intranet with remote access VPN security
Creating an SSL connection between servers
Can S/MIME, XML and IPsec operate in one protocol layer?
Can secure USB devices prevent man-in-the middle attacks
How to secure SSL following new man-in-the-middle SSL attacks
SSLstrip hacking tool bypasses SSL to trick users, steal passwords

IPsec VPN Security
Best Remote Access Products
How to set up a split-tunnel VPN in Windows Vista
What is the difference between a VPN and remote control?
From the ground up: Creating secure WLANs
Can S/MIME, XML and IPsec operate in one protocol layer?
How to create a secure network through a shared Internet connection
What firewall controls should be placed on the VPN?
VoIP tools, attacks could increase threat
Best practices for processing financial data through remote servers
What ports should be opened and closed when IPsec filters are used?
IPsec VPN Security Research

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
Secure Shell  (SearchSecurity.com)
Secure Sockets Layer  (SearchSecurity.com)
server accelerator card  (SearchSecurity.com)
SSL VPN  (SearchSecurity.com)
Transport Layer Security  (SearchSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary


Fortunately, a VPN deployment is usually inexpensive. In fact, if you don't expect more than a few dozen VPN users, you probably already have the technology you need built into your firewall. Consult the manufacturer's documentation for details. If, however, you expect a high load of VPN activity, you'll probably want to purchase a dedicated VPN appliance that uses hardware encryption technology for efficient processing.

When I think about past VPN deployments, these are the two requirements that come to mind to ensure a successful implementation:

  • Define your authentication requirements for the VPN up front. What type of authentication will you require? The username and password setup is easy and familiar to users, but may not be enough to provide the desired level of network security. Many organizations choose to use an additional technology, such as keyfob authenticators, to increase the degree of trust in VPN user identities.
  • Create a written user access policy. What services will VPN users be able to access? Will they be granted the same access to resources as users physically located in the office, or will their access be curtailed in some way? Sit down and document these policies before deploying your VPN or you'll be sure to have problems down the road.

A little planning goes a long way toward a successful VPN deployment. Clear up the policy issues from the beginning and you'll have an easier time rolling your VPN into production.

For more information:




Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



Find Security Solutions for Your Business
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts