Lesson 12 — Virtual Private Networks (VPNs)

Lesson Overview

Imagine you’re working from home and need to securely access your company’s internal applications, file servers, and databases.

Connecting directly over the Internet would expose sensitive business data to potential attackers.

Instead, organizations use a Virtual Private Network (VPN) to create an encrypted tunnel between users and the corporate network.

VPNs allow employees, administrators, and cloud engineers to securely access enterprise resources from anywhere in the world.

Whether you’re connecting to AWS, Azure, Google Cloud, or your company’s internal network, VPN technology is one of the most important networking and cybersecurity concepts you’ll use throughout your career.

Learning Objectives

After completing this lesson, you will be able to:

Explain what a VPN is.
Understand why organizations use VPNs.
Differentiate between Remote Access VPNs and Site-to-Site VPNs.
Learn how VPN encryption works.
Understand VPN protocols.
Explore VPNs in cloud and enterprise environments.
Apply VPN security best practices.

What is a VPN?

A Virtual Private Network (VPN) creates a secure, encrypted connection between two endpoints over an untrusted network such as the Internet.

Instead of sending data in plain text, a VPN encrypts traffic before transmission.

Example:

Laptop

↓

Encrypted VPN Tunnel

↓

Corporate Network

Anyone intercepting the traffic sees encrypted data rather than readable information.

Why VPNs Matter

Without a VPN:

Remote users expose sensitive traffic.
Credentials may be intercepted.
Internal applications cannot be accessed securely.
Public Wi-Fi becomes a security risk.

With a VPN:

Data is encrypted.
Users authenticate securely.
Internal resources remain protected.
Remote work becomes safe and reliable.

How a VPN Works

Suppose an employee connects from home.

Employee Laptop

↓

Internet

↓

VPN Gateway

↓

Corporate Firewall

↓

Internal Network

↓

Applications

The VPN encrypts all communication before it leaves the user’s device.

Once it reaches the VPN Gateway, the traffic is decrypted and forwarded to internal resources.

VPN Tunnel

The encrypted connection between two devices is called a VPN Tunnel.

Laptop

═══════════════════════
Encrypted Tunnel
═══════════════════════

VPN Gateway

The tunnel protects data while it travels across the Internet.

Encryption

VPNs rely on strong encryption algorithms to protect data.

Common encryption algorithms include:

AES-128
AES-256
ChaCha20

Encryption provides:

Confidentiality
Integrity
Protection against interception

VPN Authentication

Before users can access enterprise resources, they must authenticate.

Common authentication methods include:

Username and Password
Multi-Factor Authentication (MFA)
Certificates
Smart Cards
Identity Providers (IdPs)

Authentication ensures only authorized users establish VPN connections.

Types of VPNs

Organizations commonly use two primary VPN types.

Remote Access VPN

A Remote Access VPN securely connects an individual user to the corporate network.

Example:

Employee

↓

Laptop

↓

Internet

↓

VPN Gateway

↓

Corporate Network

Common use cases:

Work From Home
Remote Administration
Business Travel
Vendor Access

Site-to-Site VPN

A Site-to-Site VPN securely connects two entire networks.

Example:

Head Office

↓

VPN Tunnel

↓

Branch Office

Users at both locations communicate securely without manually starting a VPN connection.

Cloud VPN

Cloud providers offer managed VPN services.

Example:

Corporate Data Center

↓

Site-to-Site VPN

↓

AWS VPC

This securely extends enterprise networks into the cloud.

Common VPN Protocols

Several protocols are used to establish VPN connections.

Protocol	Description
IPsec	Industry-standard VPN protocol for secure communication
SSL/TLS VPN	Browser-based secure remote access
OpenVPN	Open-source VPN solution
WireGuard	Modern, lightweight, high-performance VPN
L2TP/IPsec	Layer 2 Tunneling with IPsec encryption
IKEv2/IPsec	Secure and stable VPN protocol, commonly used on mobile devices

Each protocol provides different features depending on the organization’s requirements.

VPN vs HTTPS

Although both use encryption, they serve different purposes.

VPN	HTTPS
Protects all network traffic	Protects web traffic only
Connects users to private networks	Connects browsers to web servers
Used for remote access	Used for secure websites
Creates encrypted tunnel	Encrypts browser sessions

Many organizations use both together.

VPN in Enterprise Networks

Organizations use VPNs to securely connect:

Remote Employees
Branch Offices
Data Centers
Vendors
Business Partners
Disaster Recovery Sites

VPNs reduce the need for expensive private leased lines.

VPN in Cloud Computing

Cloud providers offer managed VPN services.

AWS

AWS Site-to-Site VPN
AWS Client VPN
AWS Transit Gateway VPN

Microsoft Azure

Azure VPN Gateway
Point-to-Site VPN
Site-to-Site VPN

Google Cloud

Cloud VPN
High Availability VPN

Cloud Engineers frequently deploy VPNs to connect on-premises environments with cloud infrastructure.

VPN in Cybersecurity

Cybersecurity teams use VPNs to:

Secure remote access.
Protect administrative connections.
Encrypt sensitive communications.
Secure cloud connectivity.
Support Zero Trust architectures.
Reduce exposure on public networks.

VPNs are a critical component of enterprise security.

Common VPN Ports

Some commonly used ports include:

Port	Protocol
UDP 500	IKE (IPsec)
UDP 4500	NAT Traversal (NAT-T)
TCP 443	SSL VPN / TLS VPN
UDP 1194	OpenVPN (default)
UDP 51820	WireGuard (default)

Firewall administrators often allow these ports to support secure VPN connectivity.

Common VPN Commands

Windows

Display VPN connections:

Get-VpnConnection

Test network connectivity:

Test-NetConnection vpn.company.com

Linux

Display IP addresses:

ip addr

Display routes:

ip route

Check VPN tunnel (example):

sudo wg show

These commands help verify VPN connectivity and routing.

Real-World Example

An employee working from home needs access to an internal HR application.

Employee Laptop

↓

Home Wi-Fi

↓

Internet

↓

VPN Gateway

↓

Firewall

↓

Internal HR Application

↓

Database

Throughout the session:

All traffic is encrypted.
Authentication is verified.
Internal systems remain inaccessible to unauthorized users.
Sensitive HR information stays protected.

Best Practices

As an IT professional:

Require Multi-Factor Authentication (MFA).
Use strong encryption standards.
Keep VPN software updated.
Monitor VPN logs.
Restrict access using the Principle of Least Privilege.
Disable inactive VPN accounts.
Rotate certificates and credentials regularly.
Regularly review VPN access policies.

Proper VPN management significantly strengthens enterprise security.

Key Takeaways

After completing this lesson, you should understand:

What a VPN is.
Why VPNs are important.
Remote Access VPNs vs Site-to-Site VPNs.
VPN encryption and authentication.
Common VPN protocols.
VPN services in cloud environments.
VPN security best practices.

Summary

Virtual Private Networks (VPNs) are one of the most important technologies for secure remote connectivity.

They allow employees, administrators, and cloud engineers to safely access enterprise resources over the Internet by creating encrypted communication tunnels.

As you continue through GoHackersCloud Academy, you’ll configure AWS Client VPN, Site-to-Site VPNs, Azure VPN Gateway, Google Cloud VPN, and secure hybrid cloud architectures in hands-on labs.

A strong understanding of VPNs is essential for careers in Cloud Computing, Cybersecurity, Networking, and Enterprise Infrastructure.

Next Lesson

➡️ Lesson 13 — Load Balancers

In the next lesson, you’ll learn how Load Balancers distribute traffic across multiple servers, improve application availability, increase scalability, and support high-performance enterprise and cloud applications.