Recently, more people have became aware of the existence of VPNs and have begun to use them in their
personal lives.
There are a number of legitimate reasons for people to do this, such as protecting their privacy when
using an open network and the number of legitimate reasons, such as circumventing regional looks on
streaming media.
A virtual private network can be defined as a means of transparent transmitting private data securely
from one network across an unsecured network to the third network here and it's up in.
Oops!
It's the right VPN here.
This is our old ministrations VPN.
Yes.
So let's make it a little bit Zoom, so up.
So, generally speaking, the unsecured network where we are referring to as the internet, which due
to the nature of its design, has a number of potential security risks.
However, this is not always going to be the case.
I worked for one organization that that that required the use of the VPNs within their own infrastructure.
In this case, the network being transmitted was not insecure.
We just needed to ensure any data that was transmitted across.
It was not visible to the others, even though they were from the same company.
We often refer to the use of the VPNs as, you know, using the VPN tunnel.
You may be wondering why companies would need to use a VPN, and that is a good question.
First, let's look at a very common reason for doing so and that it that is when an organization is
located on multiple sides.
Here, let me actually write a diagram here.
So this is this will be our building here.
Here.
So here we will have the heat of this here.
The office.
And then we will have another officer.
This will be a branch office.
So in the of, we will have two companies, for example, computer computer one.
And to.
Yes.
OK, so this is the one to.
Here so this is the.
Here, let's add another writer here.
That was.
So, for example, let's make this rather.
And then we will meet another year of here as well.
And Claude.
This will be internet.
Cloud.
Here.
This is the internet into.
Actually, it's right inside here.
Actually not in sight.
It's good.
Like that.
So this will be internet and we inside the internet, we will have to know, uh, which is VPN tunnel.
Yes.
This is the VPN I'm.
Well, it's intense because here.
And tunnel smells here.
Yeah.
So.
He's feeling the heat of is here.
Surely this is the end of this.
It is.
And this will be our branch office.
Here so.
Is this is the this will be the VPN.
VPN concentrator, here's VPN.
Home.
Here it's naked, for example, 16.
This is the VPN concentrator.
The VPN concentrator also, so these computers connects to this VPN concentrator and also this and this
connects to and this computer connects to.
And this VPN concentrator connects to the VPN tunnel.
So this this connects to a VPN tunnel here.
So.
As you can see here.
In this, uh, actually in this virtual private network, you can see internet, which due to the nature
of design, you may be wondering why companies will need to use a VPN, and that's a good question.
So first, let's look at the very common reason for doing so.
And this is when an organization located on multiple sites in this diagram, we can see a site to site
VPN.
So this is the office of is excellent.
Its VPN and.
Copy of his.
Or a company building?
Here.
So.
In this case, the organization wants to ensure that all the traffic between the sides is protected,
so they routinely utilize VPNs to facilitate this.
All the traffic from the branch officers passes through a device known as the VPN concentrator.
Um, the VPN concentrator at each side will directly connect to the VPN concentrator here with VPN tunnel
at the heat, as you can see here.
So the transmission of the data across the VPN is transparent, transparent and to most users, that
is, they are unaware that this takes place.
So every common form of implementation is throughout the installation of a VPN client on each device,
also known as the Remote Access VPN.
When a user wants to connect to the heath office, they need to open the VPN client application on their
device and then authenticate with the application before they can gain access to the heel of his network.
So this implementation is usually reserved for telecom towers or mobile users, such as the staff or
field engineers or home based users.
Since the ultimate administrative overhead becomes too great to only users and they have to deploy and
configure the application on each device and run the application.
So you also have to rely on the user remembering their VPN credentials, which may not be the same as
their looming credential.
Users who are connecting remotely will be required to Typekit against some form of remote authentication
server before access before access is granted.
This machine is in the recording.
Yes.
Actually, yes.
Before access is granted, they need to authenticate servers.
So here, as you can see here, uh, we created a diagram here.
And now what I want to show you the remote authentication server, how they, uh, how they are created.
So let's copy this here.
Copy and paste it.
Here.
Make it here, so this is the heat of this again here, let's copy this text here as well.
Here this is the heat of year, and we will have a VPN.
VPN.
VPN, actual, not VPN, that's OK or not.
This is rather.
OK.
This or not, this is the VPN concentrator, and we will, uh, VPN ActionScript, uh, con generator.
She didn't make it to the.
So this is the VPN concentrator, and we will actually in this case, we will use remote authentication
server servers here.
And this will be our remote authentication service.
Remote.
There.
Yes, this is the remote authentication server and this VPN concentrator, who goes to goes to, uh,
remote authentication server here and also also, uh.
For example, we will use to computer.
Also goes to the first computer, for example, home based.
And.
Here we will have the come counter, for example, field based.
And then this.
But a direct link goes to.
Internet via VPN Tunnel and.
Then this.
Computers.
Connects in.
Here with this VPN tunnels next to the VPN.
So.
So a VPN may also be used with an extra net to provide limited secure communications to our infrastructure
for our trusted partners in other presenting implementations.
The user's device will appear as if it is on the heat of its network.
VPN Tunnels provides data security through the use of encryption and authentication.
So the methods that are used to me right, depending on, uh, the tunneling protocol that's used,
Microsoft has used three ton of tunneling VPN protocol in recent years.
Let me write these protocols here.
Actually, here, so this is it first is a point to point to point to point tunneling protocol.
The protocol, which, uh.
Tell that popped up and.
Also, we have point to point, point to point protocol, point to point protocol, uh, also referred
up and we have.
We have.
Um, secure socket tunneling protocol to secure socket unknowing protocol referred as a step in step.
Yes.
So the new Oxford PPP was designed to transmit, transmit p p p point to point protocol traffic through
the VPN, as you can see here.
So.
In this case, point to point tunneling protocol creates a communication channel to the recipient,
and that channel would then be used to create generic routing encapsulation during a tunnel.
Or the data to be transmitted across SALT encryption was provided by Microsoft.
Point to point encryption, MPE and authentication was my password authentication protocol API challenge
a handshake authentication protocol or t.he API.
So is tape was implemented in Windows Vista.
I like PGP SSD was designed to securely transmit please point to point actually not point to point political,
not anything.
So.
However, says stop using school as a secure socket layer, transportation security, so SSL dealers
to provide encryption.
It also utilizes the same network port as FTP is traffic, so that is the port UM is 443.
Port 443.
So science in sport is usually open on firewalls for secure web browsing, so this means that the network
administrators didn't need to open or open another port to a lot of the traffic.
So authentication of secure socket tunneling protocol protocol actually put a.
Protocol authentication of the Secret Circuit Tunneling Protocol traffic was provided by Mr. Chup and
Extensible Authentication Protocol tells Windows seven, so the interaction of the layer two tunneling
protocol L2TP while L2TP provided the tunnel.
So actually, let me right here, I'm not here for the better understanding.
Here.
Um, this in layers, totally political layer two on the link protocol.
And he l2tp he.
L2TP.
So while and to tip provided the panel, it did not provide any form of encryption.
It was usually deployed alongside Internet Protocol Security IP SEC.
So which does uh, so authentication is conducted using the internet key exchange i key.
So to try and overcome the usurious with users forgetting to start their VPN connections make Microsoft
released support for direct access in Windows seven when users started up their device to direct access
servers running on it will check to see if it was on the same network as a direct access server.
If it is discovered it was on the same network, um, then it knew not to use direct access as a form
of VPN.
So how over?
If it was not the same network as the data cases server, then the device will use the direct as a service
to make a connection to your organization's direct access sediment.
Again, this was a transparent to the user, so to the additional benefit of using direct access was
the and administrators called managed to remove remote devices as if they were on the local network.
With the release of Windows set, the Windows 10, Microsoft provided users with a service called Ellroy's
on VPN, which which was designed to replace State of Texas.
All the some VPN could be configured to create a device channel that would connect to the VPN.
Once the device had but were booted up or code then configured to users and users tunnel that connects.
Once a user looks in.
So these two options are not mutually exclusive and but both can be implemented at the same time.
However, to utilize the device tunnel, you have to use either an enterprise edition of Windows 10
or Education Edition.
So with this, we have finished looking at basic security features of a network in our Udemy course.