Knowledge / network acsc-glossary

Virtual private network (VPN)

A tunnel plus some discipline. Encryption is common. A full-trust badge on the far side is optional and usually a mistake.

NEVER TRUST / ALWAYS VERIFYIdentityDeviceNetworkApplicationDataEach layer asks again. A VPN badge is not a day pass.

A VPN keeps traffic private using a tunnelling protocol and the security procedures around it. Many VPNs encrypt. Not all of them authenticate the device, check posture, or split-tunnel your DNS into a swamp.

Treat remote access as a privileged path: MFA, least privilege, logging, and no standing admin on the other end. Split tunnelling that dumps business traffic onto cafe Wi-Fi is a design choice. Document it.

A consumer 'privacy VPN' is not corporate remote access. Do not run them on the same laptop without a story.

Fact source: ASD's ACSC glossary.