A VPN, or virtual private network, is a technology that creates an encrypted connection across the internet, so users or sites can communicate with a private network as though they were directly connected to it. The encryption protects data from being read while it travels over public networks.
There are two main types. A remote access VPN lets an individual, such as a staff member working from home, connect their device to the business network through software on that device. A site-to-site VPN joins entire locations, such as stores and head office, with the connection handled by firewalls or routers at each end. Authentication checks who or what is connecting before access is granted.
Retail and hospitality businesses use site-to-site VPNs to link stores to head office systems, shared files, central reporting and some on-premise servers. Remote access VPNs allow finance, operations and support staff to reach internal systems when away from the office. Many modern cloud-based systems need no VPN because they are accessed securely through the browser, so the need should be assessed rather than assumed.
Things to consider include strong authentication, ideally with multi-factor authentication, because a VPN with weak credentials is an open door. Keep VPN devices and software patched, as they are frequent targets, and give users access only to the systems they need. Performance can suffer if all traffic passes through one site. A common pitfall is a forgotten old VPN account belonging to a former employee or contractor.
A well-managed VPN gives secure access to internal resources without exposing them to the internet. RetailCare configures VPNs as part of its network and security services.