L46
VPNs, tunneling and remote-access policy
Cram this first — memory hook
Tunnel wraps; encryption protects; policy limits.
Exam trap
Generic Routing Encapsulation alone is not encrypted. A tunnel diagram is not proof of confidentiality.
The slide facts
Remote access needs a server/gateway, policy and management plan. tunnels without encryption; the slides distinguish Internet Protocol Security /Transport Layer Security protection and browser-based access.
If you have time — extra
A Virtual Private Network () provides a logical private connection over another network; the remote-access security examples here use protected tunnels over the internet. A tunnel encloses one form of traffic inside another, but encapsulation alone is not encryption. Generic Routing Encapsulation () is the important course example of a tunnel without built-in confidentiality. Point-to-Point Protocol () establishes point-to-point links and is not itself a universal encryption mechanism. Internet Protocol Security () and Transport Layer Security () supply security in suitable designs. A Remote Access Server () or gateway authenticates and applies policy; the management plan handles updates, certificates, monitoring and account reviews. A browser/clientless portal may expose selected applications rather than grant an entire network tunnel. A does not make an infected laptop safe or automatically authorize all internal resources.
Walkthrough
Verify user/device identity, establish the supported protected session, apply routing and access policy, log activity, and restrict the connection to required resources.