Network Security What Is a VPN

A VPN (Virtual Private Network) creates an encrypted tunnel through a public network. Data traveling through the tunnel is wrapped in encryption so that anyone who intercepts it sees only ciphertext. VPNs let remote employees securely access company networks, protect users on public Wi-Fi, and connect multiple office locations as if they were on the same local network.

The Tunnel Analogy

Imagine driving a valuable cargo shipment through a city on open roads. Anyone watching from the sidewalk can see what you are carrying. Now imagine driving through a sealed underground tunnel. Observers on the surface know the truck entered the tunnel and exited at the other end, but they cannot see the cargo or the route taken inside.

WITHOUT VPN:
[Your Device] ──── Your traffic visible ──── [Internet] ──── [Server]
                   ISP can see it
                   Network operators can see it
                   Attackers on same Wi-Fi can see it

WITH VPN:
[Your Device] ══ ENCRYPTED TUNNEL ══ [VPN Server] ──── [Server]
                 Nobody can see        VPN exits here
                 inside the tunnel     with a new IP

How a VPN Works Step by Step

Step 1: Your device connects to a VPN server and authenticates
Step 2: VPN software creates an encrypted tunnel between your device and the VPN server
Step 3: All your network traffic gets encrypted and sent into the tunnel
Step 4: VPN server decrypts the traffic and forwards it to the destination
Step 5: Responses come back to the VPN server, get encrypted, and flow back to you

What websites see:       VPN server's IP address (not yours)
What your ISP sees:      Encrypted tunnel to VPN server (not your actual requests)
What attackers on Wi-Fi: Encrypted data (completely unreadable)

Types of VPN

Remote Access VPN

An individual user connects from a remote location to the company network. Most employees working from home use remote access VPNs. The VPN client software on the laptop creates a tunnel to the company's VPN server, giving the user access to internal resources as if they were physically in the office.

[Home Laptop]
    │
    ║ Encrypted Tunnel (VPN)
    ║
[Company VPN Server]
    │
[Internal Network: Servers, Files, Apps]

Site-to-Site VPN

Two entire office networks connect to each other through a VPN tunnel. No individual user installs a VPN client — the routers at each location handle the tunnel automatically. All traffic between the two offices travels encrypted through the internet.

[New York Office]                        [London Office]
┌────────────┐                          ┌────────────┐
│ LAN        │                          │ LAN        │
│ 10.1.0.0/24│──[VPN Router]══tunnel══[VPN Router]──│ 10.2.0.0/24│
└────────────┘                          └────────────┘
         Through the public internet — all encrypted

SSL VPN (Clientless VPN)

An SSL VPN works through a standard web browser with no client software to install. Users log into a web portal and access specific internal applications through the browser. This is convenient for contractors or partners who need access to specific tools without full network access.

VPN and Privacy

A VPN changes your visible IP address to the VPN server's IP. Websites see the VPN server's location, not yours. This provides privacy from websites tracking your real location and from your ISP monitoring which websites you visit.

Without VPN:
Your Real IP: 115.99.100.200 (visible to every website and your ISP)

With VPN connected in Frankfurt:
Visible IP: 212.100.50.30 (Frankfurt VPN server's IP)
Your ISP sees only: encrypted tunnel to VPN, not your browsing

What a VPN Does NOT Do

Common Myth                          | Reality
-------------------------------------|-------------------------------------------
"VPN makes me completely anonymous"  | VPN provider can still see your traffic
"VPN protects me from all malware"   | VPN only encrypts transit, not endpoints
"VPN stops phishing"                 | A fake website looks the same through VPN
"VPN hides identity from gov orders" | VPN provider can be ordered to disclose logs
"Free VPN is just as good"           | Free VPNs often sell your data to advertisers

Corporate VPN vs Consumer VPN

Feature              | Corporate VPN               | Consumer VPN
---------------------|-----------------------------|--------------------------
Purpose              | Access company resources    | Privacy / geo-bypass
Who manages it       | Company IT team             | VPN service provider
Authentication       | MFA + company credentials   | Email + password
Traffic routing      | Traffic → company network   | Traffic → VPN server
Logging              | Full audit logs for security | Varies by provider policy
Split tunneling      | Often configured by IT       | User-configurable

Split Tunneling

Split tunneling lets the user decide which traffic goes through the VPN and which goes directly to the internet. A company might route all internal system traffic through the VPN but let video streaming go directly to avoid overloading the VPN server.

WITH Split Tunneling:
Company email → goes through VPN tunnel (encrypted, company monitored)
Netflix stream → goes directly to internet (not through VPN)

When to Use a VPN

Situation                           | Use VPN?
------------------------------------|----------
Working from home accessing company  | Always
Public Wi-Fi (coffee shop, airport)  | Always
Traveling internationally for work   | Always
Regular home internet browsing       | Personal preference
Accessing streaming with geo-blocks  | Optional
Sensitive research or journalism     | Strongly recommended

VPNs are a fundamental tool in any remote work or multi-site network security strategy. However, they are transitioning from being the primary access control mechanism to one piece of a broader Zero Trust architecture — where the VPN provides the encrypted transport but identity verification and least-privilege access control determine exactly what the user can reach.