Multiple locations.
WHAT THE REQUIREMENT IS
Reaching resources at one location from another, securely.
WHAT NOT TO DO
Expose internal services directly to the internet.
WHAT TO USE INSTEAD
An encrypted connection between the sites or the user and the network.
WHAT THAT PROVIDES
A protected path, so internal services need no external exposure.
WHAT TO CONSIDER
Whether resources need to be internal at all.
Frequently hosting them properly removes the requirement.
FOR REMOTE WORKERS
Access only to what their role requires Strong authentication with a second step The same device standards as on site
WHAT TO MONITOR
Who connects, from where, and when.
WHAT TO REMOVE
Access no longer needed.
WHAT AFFECTS PERFORMANCE
The slower of the two connections Latency between locations
WHAT TO TEST BEFORE RELYING ON IT
Actual performance for the work people do.
WHAT TO DOCUMENT
Who has access and how it is configured.
