What it means
VPN designs differ in authentication, encryption, routing, device trust, split tunneling, and the resources they expose. A successful connection should not automatically grant broad internal access.
Why it matters
VPNs protect data in transit and extend access, but they also move the security boundary to remote devices and identities.
Practical focus
- Use strong identity and device checks
- Limit accessible networks and services
- Monitor connection, location, and authentication anomalies
- Keep gateways and clients patched
Common mistakes
- Treating VPN access as equivalent to being trusted
- Leaving unused accounts and profiles active
- Ignoring local device compromise
Certification relevance
This subject appears in or supports the following certification bodies of knowledge: