Please enable JavaScript.

Coggle requires JavaScript to display documents.

Modulo 18: VPNs - Coggle Diagram

- - - - Confidentiality - IPsec uses encryption algorithms to prevent cybercriminals from reading the packet contents.
      - Integrity - IPsec uses hashing algorithms to ensure that packets have not been altered between source and destination.
      - Origin authentication - IPsec uses the Internet Key Exchange (IKE) protocol to authenticate source and destination. Methods of authentication include the use of pre-shared keys (passwords), digital certificates, or RSA certificates.
      - Diffie-Hellman - Secure key exchange typically using various groups of the DH algorithm.
- - - - The IP header and data payload are hashed using the shared secret key.
      - The hash builds a new AH header, which is inserted into the original packet, as shown in the figure below.
      - The new packet is transmitted to the IPsec peer router.
        
        The peer router hashes the IP header and data payload using the shared secret key, extracts the transmitted hash from the AH header, and compares the two hashes, as shown in the figure below.
- - - - A remote-access VPN is dynamically created to establish a secure connection between a client and a VPN terminating device. For example, a remote access SSL VPN is used when you check your banking information online.
    - - A site-to-site VPN is created when VPN terminating devices, also called VPN gateways, are preconfigured with information to establish a secure tunnel.
- - - - With the advent of cost-effective, high-bandwidth technologies, organizations can use VPNs to reduce their connectivity costs while simultaneously increasing remote connection bandwidth.
    - - VPNs provide the highest level of security available, by using advanced encryption and authentication protocols that protect data from unauthorized access.
    - - VPNs allow organizations to use the internet, making it easy to add new users without adding significant infrastructure.
    - - VPNs can be implemented across a wide variety of WAN link options including all the popular broadband technologies. Remote workers can take advantage of these high-speed connections to gain secure access to their corporate networks.