DataTerminology.comNEW
Also known as: VPN
A VPN creates an encrypted tunnel over untrusted networks to privately connect users or sites to a target network.
DESCRIPTION
A virtual private network (VPN) establishes a cryptographically protected tunnel across public networks to connect users, devices, or sites to private resources. VPNs provide confidentiality, integrity, and authentication, commonly using IPsec at the network layer or TLS at the transport layer. They support remote access, site-to-site connectivity, and hybrid cloud scenarios. Split tunneling and full-tunnel configurations control what traffic enters the tunnel. Proper key management, cipher selection, and posture checks are vital for security. VPNs remain widely used, though Zero Trust Network Access increasingly replaces traditional remote access for application-centric access control.
ALTERNATIVE DEFINITIONS
NIST CSRC (CNSSI-4009-2015)
A protected information system link utilizing tunneling, security controls, and endpoint authentication to connect two or more nodes over a public network.
Highlights tunneling with endpoint authentication across public networks from a federal glossary.
Cisco
A virtual private network, or VPN, is an encrypted connection over the Internet from a device to a network.
Emphasizes device-to-network encrypted connectivity in vendor overview.
Cloudflare
A virtual private network (VPN) is a service that encrypts your Internet traffic and protects your online identity.
Focuses on privacy and identity protection benefits for end users.
Microsoft Learn
A VPN provides a secure tunnel for network traffic to traverse untrusted networks and reach private resources.
Stresses the secure tunnel concept in enterprise Windows networking context.
RELATED TERMS
IPsec Protocol Suite SSL-TLS VPN Split Tunneling Site-to-Site VPN Remote Access VPN IKEv2 Tunnel Mode Transport Mode NAT Traversal
COMPETING TERMS
KNOWLEDGE AREAS
Data Security Infrastructure Cloud
TARGET AUDIENCE
Security Architect Cybersecurity Engineer Cloud Architect IT Manager Chief Information Security Officer DevOps Engineer Solution Architect Application Administrator
EXTERNAL SOURCES
- Wikipedia - Virtual private network
- NIST - Guide to IPsec VPNs
- IETF - IPsec architecture standard
- Microsoft Azure - Azure VPN gateway overview
- Cisco - Enterprise VPN solutions overview
TOP QUESTIONS
Why is Virtual Private Network still relevant for enterprises?
VPNs remain essential for secure remote access and hybrid connectivity. They provide ubiquitous interoperability and strong encryption. Even with ZTNA, many workloads still need network-level tunneling.
Category: Relevancy
What is the biggest security risk with Virtual Private Network deployments?
Weak authentication and split tunneling misconfigurations can expose internal services. Stale certificates and outdated ciphers amplify risk. Always enforce MFA and modern suites.
Category: Risks
How does Virtual Private Network compare to Zero Trust Network Access?
VPN grants network-level access, while ZTNA grants app-level access based on identity and context. ZTNA reduces lateral movement. Many organizations run both during transition.
Category: Alternatives
What are common mistakes when configuring a Virtual Private Network?
Using obsolete protocols (e.g., PPTP), not enforcing MFA, and neglecting DNS leak protection are common errors. Overly broad routes increase exposure.
Category: Mistakes
Which protocols are typically used by a Virtual Private Network?
IPsec with IKEv2 and TLS-based VPNs are most common. OpenVPN and WireGuard are popular in open-source ecosystems. Protocol choice affects performance and firewall traversal.
Category: Example
How do I start implementing a Virtual Private Network in the cloud?
Begin with managed gateways (Azure VPN Gateway, AWS Site-to-Site VPN). Define address spaces, routing, and redundancy. Validate with test tunnels and monitoring.
Category: Requirements
When should I use split tunneling with a Virtual Private Network?
Use split tunneling to preserve bandwidth for internet-bound traffic that doesn’t need inspection. Only allow for low-risk destinations and enforce DNS security.
Category: Opinion
What performance factors affect Virtual Private Network throughput?
Cipher choice, CPU offload, MTU/MSS settings, and tunnel count matter. Hardware acceleration (AES-NI, NIC offload) and optimal routing boost throughput.
Category: Example
How is a Virtual Private Network monitored and maintained?
Track tunnel uptime, latency, packet loss, and rekey events. Log authentication outcomes and anomalies. Regularly rotate certificates and update cryptographic suites.
Category: Management