VPN (Virtual Private Network) is a technology that helps create a secure connection between the user's device and the destination network over the Internet. Data transmitted through a VPN is encrypted, which reduces the risk of data interception and allows users to safely access internal organizational systems from outside.
In the past, VPNs were often mentioned in the context of hiding IP addresses or accessing restricted websites. However, today VPNs play a more important role in remote work, connecting multiple branch offices, accessing internal organizational systems, and enhancing security for users who need to connect through public networks.
What is a VPN?
VPN or Virtual Private Network is the creation of a secure communication channel, often called an "encrypted tunnel," between the user's device and the VPN server or destination network.
When connected to a VPN, the data transmitted over the network is encrypted, making it difficult for outsiders to read the information. It also allows users to securely access internal company systems, such as File Servers, NAS, ERP, CCTV, Remote Desktop, or other internal systems, from outside the office.
Benefits of VPN
- Enhance data security
VPN helps encrypt data transmitted over the Internet, reducing the risk of data interception, such as passwords, customer information, or internal company data. - Access internal corporate systems remotely
Employees can work from home or off-site and connect back to the company's systems, such as NAS, Server, File Share, or back-end systems - Connect multiple branch offices
Organizations with multiple branches can use a Site-to-Site VPN to connect the networks of each branch together, allowing them to use a shared central system. - Protect your data when using public Wi-Fi
When you need to use Wi-Fi in hotels, airports, coffee shops, or public areas, a VPN helps reduce the risk of your information being intercepted on untrusted networks. - Increase privacy when using the internet
VPN can hide the user's real IP Address and show the IP Address of the VPN Server instead, helping to increase privacy to some extent
Types of VPN
- Remote Access VPN
Used to allow users from outside to connect back to the organization's network. Suitable for employees who work from home or work offsite. - Site-to-Site VPN
Used to connect networks between branch offices, such as the headquarters and a branch office, allowing devices in each branch to communicate with each other through an encrypted network. - Personal VPN
Used for general users who want to increase security and privacy while using the internet, such as when using public Wi-Fi. - Cloud VPN / Business VPN
A VPN service for organizations managed through the Cloud or a central system, helping administrators control user permissions, connections, and security policies more conveniently.
VPN Protocols Commonly Used Today
- WireGuard
is a new-generation VPN protocol that focuses on speed, simplicity, and security. It is suitable for both personal and organizational use that requires high performance, easy setup, and low latency. - OpenVPN
It is a VPN protocol that has been popular for a long time. It is highly flexible and supports multiple operating systems. It is suitable for organizations or users who want high customization capability. - IKEv2/IPSec
It is a secure and stable protocol, suitable for mobile devices because it can reconnect well when changing networks, such as switching from Wi-Fi to 4G/5G. - SSTP
It is a protocol commonly used with Windows systems and can work well over HTTPS. It is suitable for some organizations that need to connect through networks with strict firewalls. - L2TP/IPSec
It is a protocol that was once popular, but nowadays it should not be chosen as the main option for new systems because there are more modern and secure alternatives available. - PPTP
It is an old protocol, easy to set up, but has low security. It is no longer recommended for use, especially with organizational systems or important data.
Which VPN protocol should be used?
| Protocol | Highlights | Suitable for | Recommendations |
|---|---|---|---|
| WireGuard | Fast, easy to configure, uses new technology | General users, organizations, home offices | Recommended for new systems if the device supports it |
| OpenVPN | Flexible, highly customizable, widely used | Organizations, administrators, advanced users | Still a good option, especially for systems that require flexibility |
| IKEv2/IPSec | Stable, secure, suitable for mobile phones | Notebook, Smartphone, Remote Worker | Suitable for users who need to switch networks frequently |
| SSTP | Works well over HTTPS | Windows system or networks with strict Firewall | Suitable for certain special cases |
| L2TP/IPSec | Widely used in the past | Legacy systems that still need support | Should not be used as the main option for new systems |
| PPTP | Easy to set up, but very old | A very old system that is unavoidable | Not recommended for use |
Using VPN in an Organization
For organizations, VPNs are often used to allow employees to securely access internal company systems from outside, such as NAS, File Servers, ERP, CRM, Remote Desktop, CCTV, or internal management systems.
Example of VPN usage in organizations
- Employees work from home and access company files
- IT department connects to manage Servers or NAS from outside
- Connect headquarters with branches via Site-to-Site VPN
- Access CCTV or NVR systems from outside securely
- Connect POS systems or back-office systems between branches
How are VPN and Zero Trust different?
VPN helps create a connection channel to access the internal network, but modern security concepts are increasingly focusing on Zero Trust, which is based on the principle of "trust no one automatically," even if the user is connected through a VPN.
In organizational systems that require high security, VPN should be used in conjunction with Zero Trust approaches, such as
- Verify identity with Multi-Factor Authentication (MFA)
- Set access permissions according to user roles
- Restrict access to only necessary systems
- Check devices before allowing connections
- Keep access logs for later auditing
Simple VPN Setup
1. Use VPN service from a provider
If you want to use a personal VPN to increase privacy or protect data on public Wi-Fi, using a VPN service with a ready-made app is the easiest method.
- Choose a trustworthy VPN provider
- Download the application from the provider
- Install and log in
- Select the desired server location
- Click to connect to the VPN
You should choose a provider that has a clear privacy policy, good encryption, and important features such as a Kill Switch or DNS Leak Protection.
2. Set up VPN on Windows
- Go to Settings
- Select Network & Internet
- Select VPN
- Select Add a VPN connection
- Fill in the VPN Server, VPN Type, Username, and Password as specified by the administrator or service provider
- Press Save and then select Connect
3. Set up VPN on macOS
- Go to System Settings
- Select Network
- Select the menu to add a VPN connection
- Choose the VPN type you want
- Fill in the Server, Account, Authentication, and related values
- Click to connect to the VPN
4. Set up VPN on iOS and Android
- Install a VPN app from a provider, or use the VPN system available on the device
- Enter the Server information and user account as provided
- Allow the system to add a VPN Profile
- Press connect VPN
For organizations, the IT department should configure the VPN profile to ensure security settings and access permissions are correct.
VPN Features That Should Be Present Today
- Multi-Factor Authentication (MFA): Adds a layer of security by verifying identity beyond just a password
- Kill Switch: Immediately disconnects from the internet if the VPN drops to prevent data leaks
- DNS Leak Protection: Prevents DNS requests from leaking outside the VPN
- Split Tunneling: Allows choosing which traffic goes through the VPN and which goes directly to the internet
- Device Control: Checks devices before allowing them to connect
- Access Control: Restricts user permissions to access only necessary systems
- Logging and Monitoring: Stores connection data for later review
Precautions When Using a VPN
- Should not use unreliable free VPNs
Some free VPNs may have limitations in speed, security, or may collect user data for marketing purposes - VPN does not make you 100% safe
VPN helps encrypt your connection, but it does not protect against phishing, malware, password leaks, or visiting dangerous websites - Choose the appropriate protocol
You should use WireGuard, OpenVPN, IKEv2/IPSec, or SSTP instead of older protocols like PPTP - Enable MFA for Corporate VPN
If using a VPN to access the company system, MFA should be enabled to reduce the risk of password leaks - Check the privacy policy
If using an external VPN service, you should check how the provider's logging policy is handled - Do not use a VPN for illegal activities
VPN increases privacy, but it does not make users escape legal responsibility - Beware of Split Tunneling
If not configured properly, it may cause some data to bypass the VPN or make accessing internal systems unsafe - Check IPv6 and DNS Leak
If the VPN or network system is not configured correctly, some data may leak outside the VPN.
Who is VPN suitable for?
| User Group | Suitable VPN Type | Recommendations |
|---|---|---|
| General User | Personal VPN | Choose a reliable provider with Kill Switch and DNS Leak Protection |
| Employees working from home | Remote Access VPN | Should use MFA and restrict access rights only to necessary systems |
| Multiple branch companies | Site-to-Site VPN | IP Address, Firewall Rule, and Routing should be clearly planned |
| IT Department | Remote Access VPN / Admin VPN | Admin rights should be separated and access logs should be kept |
| Organizations that require high security | VPN combined with Zero Trust | Use MFA, Device Check, Access Control, and Monitoring |
Summary
VPN is an important tool that helps enhance security in network connections, especially for remote work, connecting multiple office branches, and accessing internal organizational systems from outside.
Currently, one should choose modern VPN protocols such as WireGuard, OpenVPN, IKEv2/IPSec, or SSTP, and avoid older protocols like PPTP, especially in organizational systems or systems containing important data.
For organizations, using only a VPN may not be sufficient. It should be used in conjunction with MFA, Access Control, Logging, Device Control, and Zero Trust approaches to enhance security and reduce the risk of unauthorized system access.
Need expert advice or would like to request a quotation? Contact us today:
E-mail: [email protected]
LINE Official: @sync.co.th
The Company reserves the right to correct any typographical or printing errors and shall not be held liable for any inaccuracies resulting from such errors.
*** This article is the intellectual property of SyncTech Solution Company Limited. Reproduction, modification, or redistribution of this content, in whole or in part, is strictly prohibited without prior written permission from the Company. ***
