Categories:

Secure Data Transfer With Virtual Private Networks

Secure Data Transfer With Virtual Private Networks

Ad

To safely transfer data via an unsecured Internet connection, companies make use of Virtual Private Network (VPN) solutions. A VPN represents the coming together of two separate networks to form a self-contained logical network. This technology enables subsidiaries to be connected to the company headquarters, or employees to set up a home office. But it also gives members of staff who work out in the field the opportunity to establish a secure connection with the company in order to exchange data.

A VPN is a purely software-based solution: no special network hardware is required to create one. To use a public network such as the Internet to establish a VPN connection between the computer at a home office and the company network, for example, the VPN client software replicates the configuration of the company network virtually on the home office computer. The client software connects via the Internet to the VPN dial-in node, and after successful authentication, enables communication between the devices using a secured VPN protocol such as IPsec, TLS/SSL or PPTP. The home office workstation thus becomes a component of the private company network. A secure connection established between the VPN dial-in node and the remote device via a public network, such as the Internet, is referred to as a VPN tunnel.

Simple diagram of a VPN tunnel

A VPN tunnel is not just used to connect individual computers to a network (site-to-end) but can, for example, be used to connect the local networks of several subsidiaries together (site-to-site). It is also possible to use VPN to establish a secure connection to a server without having access to the entire company network (end-to-end).

The VPN client software Hamachi works using similar principles, and has already been discussed in this article. Connections initiated via Hamachi are not established directly between clients right from the start - they are first conducted via a so-called mediation server that is responsible for authenticating the client. This fact, coupled with the fact that the Hamachi source text cannot be viewed publicly, may pose a security risk when transferring sensitive data.

Users who have a laptop as well as a desktop computer and wish to be able to access the data on their home PC from elsewhere, and who do not wish to use Hamachi for the reasons named above, can quickly and easily establish an end-to-end VPN connection using Windows Vista and the standard tools it provides. The prerequisite for convenient operation and rapid data transfer is a suitably fast Internet connection: ideally, you want at least a fast DSL connection with an appropriate upstream speed.


Talkback
sonkut 03/04/2008 05:46
Hide
-0+
sonkut

Indeedy VPN's are a wonderfull thing, but with ISP's like Tiscali and PIPEX using trafic shaping to block anything they dont like in prime time vpn access isn't always a sure thing. I know for cirtain Tiscali Blocks alot of it's VPN protocol trafic due to the fact that people like me and other gamers use vpn's to dodge the effects of trafic shaping. I had to resort to this measure with pipex as they blocked access to eve online.

This mostly applies to residents of the uk, i have no idea what other isp's cause these problems outside the uk.

leexgx 03/04/2008 08:42
Hide
-0+
leexgx

blocking access to eve-online you should take them to tradeing standards as thay should not be doing that

who in there right mind whould uses Tiscali now any way i am very disappointed pipex whent down hill as thay was an good broadband provider

dobby 09/04/2008 11:38
Hide
-0+
dobby

'BE' braodband, i reccon is the best (price/performace) broadband in the UK. 8Mbit means 8Mbit not 4, and they have good Upload as well as down. there website is shit theough.
TalkTalk is the worst. then AOL, then virgin, then BT, all shit

adermin 12/04/2008 12:44
Hide
-0+
adermin

One problem, not with the configuration, but will the administrator, myself as amdin i would not allow users to freely create VPN connections into my company network, without authorisation and further security.

Note You are going to post a comment as anonymous.



Google Ads