Infrastructure Needed for VPN

00:00

welcome back toe and use a repeat and security course. In this lesson, I will be talking about the infrastructure that is needed for BP and so on. User side.

00:10

You don't need anything than your device. It can be a PC like Home PC. Or

00:16

although it's for a rarely used, it can be your business PC or it become your mobile phone,

00:23

and then you will need to have something installed on it, which can be an agent or an application or both.

00:29

Um, maybe some kind of like I mentioned, if you're looking to corporate

00:34

Network and you're not using the physical smartcard with pain but yours and virtual, then you'll have to have your virtual smartcard, the software installed on your device. But it goes toe agent and or application thing. So all these things you need and that's it, that's pretty much it.

00:57

So, um, on the heart on the side of a hump company, if we're talking about harbor implementation, you need BP in the wire routers. Do you need VPN aware firewall? So these things have to be able to let the VP and traffic

01:14

in and out of the company

01:17

and then you need BP in appliances. And of course, you need client creepy in on PC is like a mention. So this is it,

01:25

um, nothing special. So you need only these things. European appliances, they said. These air

01:33

piece of networking hardware that can be set up to allow weeping connection. So if you are establishing a site to site the connection in using your having harder implementation, have chosen, it is your preferred way to set up your VPN.

01:49

Then you will have to harbor appliances for each re P in connection. It is not usual toe have. What's a central building one applies that can maintain multiple VPN connections in multiple locations, although

02:07

there are those. But people usually choose tohave

02:09

one for each connection. Unless you have hundreds and hundreds of them, then you have in those cases you usually. What you have is you have a server on the central sides of in in central corporate headquarters. You have a server

02:29

with software implementation,

02:30

and then you have

02:32

what is essentially appliance in on every other. Those location because on those locations you have to have something that anyway and sometimes it's too expensive to put Carter in terms of server now on every of these locations. For example, if you if your bank

02:53

and you have lots of small branch offices,

02:54

it's sometimes it's cheaper, and it's more effective to just have a VPN appliance in those those more branches because you don't have server there. Anyway, people are connecting through BP and maybe using very based applications to do their banking. Some of the banks do that today, so

03:12

it's ah, it's all based up like a core banking applications and everything they need to do. The banking retail banking

03:19

is done them through Web based applications, so you don't need the server there. Everything is anyway on the server and the headquarters.

03:29

And then, um,

03:30

you just need the appliance there.

03:32

And but on the headquarter side, it's maybe too expensive to buy 200 or 500 appliances. Maybe it's cheaper to have just a huge server bank and and virtual server machines running the VP instructor.

03:52

Um,

03:53

so also, if you're doing software implementation again, you need to have a VPN ever routers and VPN of our firewalls. Although when it comes the firewalls, there are we peons that can bypass Firoz, which are not BP in there, so there are ways to do it.

04:11

Andi. There are solutions in terms of subsidy, even in terms of harbored that can bypass the things. And again, these people are connecting remotely matter to your server from home or while they are in the field.

04:26

You also need some kind of client, the interest structure on their side.

04:30

And then in those cases you would probably have to have different versions off the What's a separate servers for those two things? So one server is to maintain connections between the headquarters and

04:46

what's a different geographical locations in which you have offices,

04:51

and the other is there to remote the for remote connection off

04:57

employees because these to work in a different way, and sometimes it's even a different softer. The same thing is, with them

05:05

remote connection if you're using harbor implementation, so if you have a harder VPN appliance, that is one is therefore to connect to a different location and the other is their toe receive connections from remote users. So there are two different things, and it's usually never

05:26

one server or one harbor or one software even running

05:30

those two separate things.

05:33

Um, so this is about infrastructure you need I won't go into details how to size it. This is a little bit more complicated. Matter which is outside the parameters of this course suspect. Let me just ask you a question on duh.

05:51

What is the main difference when you set up a VPN in the company on the heart in the harbor, implementation on self current limitations. So visit the weepy an appliance. Is it VPN aware router? Or is it a VPN client? Once licensing is during difference

06:11

and the correct answer is between appliance. So it is mentioned if you're using a hardware implementation than you have a VPN appliance if he was in suffer a plantation you're using softer on the server.

06:24

So in this lesson, you have learned how

06:27

what kind of infrastructure is needed to implement with bean, your company