Please enable JavaScript.

Coggle requires JavaScript to display documents.

Remote Access Solution in Windows Server Environment - Coggle Diagram

- - - - A site-to-site virtual private network (VPN) is a connection between two or more networks, such as a corporate network and a branch office network. Many organizations use site-to-site VPNs to leverage an internet connection for private traffic as an alternative to using private MPLS circuits.
    - - A site-to-site VPN is a permanent connection designed to function as an encrypted link between offices (i.e., “sites”). This is typically set up as an IPsec network connection between networking equipment.
    - - Site-to-site VPNs are frequently used by companies with multiple offices in different geographic locations that need to access and use the corporate network on an ongoing basis. With a site-to-site VPN, a company can securely connect its corporate network with its remote offices to communicate and share resources with them as a single network.
  - - - A remote access virtual private network (VPN) enables users who are working remotely to securely access and use applications and data that reside in the corporate data center and headquarters, encrypting all traffic the users send and receive.
    - - The remote access VPN does this by creating a tunnel between an organization’s network and a remote user that is “virtually private,” even though the user may be in a public location. This is because the traffic is encrypted, which makes it unintelligible to any eavesdropper. Remote users can securely access and use their organization’s network in much the same way as they would if they were physically in the office. With remote access VPN, data can be transmitted without an organization having to worry about the communication being intercepted or tampered with.
    - - No matter which remote access software you are using, it should have authentication to ensure that the right people are accessing the right information. It also helps keep your server secure and protected against hacks and leaks. There are several protocols for doing this:
        
        Single sign-on - grants access to apps without VPN configuration or firewall modifications
        
        IPsec (Internet Protocol Security) - enables authentication and encryption for IP packet transfers using several security protocols.
        
        L2TP (Layer Two Tunneling Protocol) - VPN protocol without authentication or encryption; usually paired with another protocol.
        
        PPTP (Point-to-Point Tunneling) - implements VPN, though it’s less secure than others.
        
        RAS (Remote Access Services) - establishes connection with a dial-up server and host network; remote servers authorize access by communicating with the central server.
        
        RDP (Remote Desktop Protocol) - for Windows users only; grants access with Windows Terminal Services.
        
        TACACS (Terminal Access Control System) - forwards password to an authentication server to grant remote access.
- - - - Updates of the network are exchanged periodically.
      - Updates (routing information) are always broadcast.
      - Full routing tables are sent in updates.
      - Routers always trust routing information received from neighbor routers. This is also known as Routing on rumours.
- - - - NAT conserves legally registered IP addresses.
      - It provides privacy as the device’s IP address, sending and receiving the traffic, will be hidden.
      - Eliminates address renumbering when a network evolves.
- - - - RADIUS server. NPS performs centralized authentication, authorization, and accounting for wireless, authenticating switch, remote access dial-up and virtual private network (VPN) connections. When you use NPS as a RADIUS server, you configure network access servers, such as wireless access points and VPN servers, as RADIUS clients in NPS. You also configure network policies that NPS uses to authorize connection requests, and you can configure RADIUS accounting so that NPS logs accounting information to log files on the local hard disk or in a Microsoft SQL Server database. For more information, see RADIUS Server.
      - RADIUS proxy. When you use NPS as a RADIUS proxy, you configure connection request policies that tell the NPS server which connection requests to forward to other RADIUS servers and to which RADIUS servers you want to forward connection requests. You can also configure NPS to forward accounting data to be logged by one or more computers in a remote RADIUS server group. For more information, see RADIUS Proxy.
      - Network Access Protection (NAP) policy server. When you configure NPS as a NAP policy server, NPS evaluates statements of health (SoH) sent by NAP-capable client computers that want to connect to the network. NPS also acts as a RADIUS server when configured with NAP, performing authentication and authorization for connection requests. You can configure NAP policies and settings in NPS, including system health validators (SHVs), health policy, and remediation server groups that allow client computers to update their configuration to become compliant with your organization's network policy. For more information, see Network Access Protection in NPS.