Do I still need a VPN if everything is in the cloud?

If all your applications are SaaS (accessible via browser with their own authentication), you may not need a traditional VPN. Instead, implement SSO with MFA for all cloud applications and consider ZTNA for secure access. VPN is still needed if you have on-premises resources, private cloud infrastructure, or need to encrypt all traffic from company devices.

What is the difference between VPN and ZTNA?

VPN provides broad network access once connected -- you are "on the network." ZTNA (Zero Trust Network Access) provides application-specific access with continuous verification -- you only access exactly what you need, verified at every request. ZTNA is more secure and better suited to cloud-first environments. Many organisations are transitioning from VPN to ZTNA.

Should I use always-on VPN?

Always-on VPN ensures all device traffic is encrypted at all times, which is ideal for high-security environments. However, it can impact internet performance and user experience. For most businesses, a VPN that activates when accessing company resources (split tunnel) provides a good balance of security and usability.

Book Free Assessment Calculator

Virtual Private Network (VPN)

Virtual Private Network

Also known as:virtual private networkencrypted tunnelsecure remote access

A technology that creates an encrypted tunnel between a device and a network, securing data transmission and enabling secure remote access to company resources over the internet.

In-Depth Explanation

A Virtual Private Network (VPN) creates an encrypted connection (tunnel) between a user's device and a network, securing all data that travels between them. VPNs are widely used for remote access to company resources and for securing internet connections.

Types of VPN:

Remote access VPN: Individual users connecting to company network from anywhere
Site-to-site VPN: Connecting two networks (e.g., office to data centre)
Client-to-site: Software on the user's device connects to a VPN server
SSL/TLS VPN: Browser-based VPN access (no client software needed)
IPsec VPN: Network-layer encryption for site-to-site connections

VPN use cases:

Remote work: Secure access to company resources from home or travel
Cloud connectivity: Encrypted connection between office and cloud
Branch offices: Connecting multiple office locations securely
Public WiFi protection: Encrypting traffic on untrusted networks
Compliance: Meeting data protection requirements for remote access

VPN solutions:

Enterprise VPN: Cisco AnyConnect, Palo Alto GlobalProtect, Fortinet FortiClient
Cloud VPN: AWS Client VPN, Azure VPN Gateway, Google Cloud VPN
Modern alternatives: Cloudflare Access, Zscaler Private Access (ZTNA)
Open source: WireGuard, OpenVPN

VPN vs. Zero Trust Network Access (ZTNA):

VPN gives broad network access once connected (trust the network)
ZTNA provides application-specific access with continuous verification (trust nothing)
ZTNA is increasingly replacing traditional VPN for remote access
VPN remains relevant for site-to-site connections and network-level access

VPN best practices:

Use split tunnelling carefully (only route company traffic through VPN)
Require MFA for VPN authentication
Monitor VPN connections for anomalies
Keep VPN software and firmware updated
Implement always-on VPN for high-security environments
Ensure adequate VPN capacity for remote workforce
Consider ZTNA as a VPN complement or replacement

Business Context

With 30-40% of the Australian workforce working remotely at least part-time, VPN or equivalent secure access technology is essential for protecting company data accessed from home networks and public WiFi.

How Clever Ops Uses This

Clever Ops implements secure remote access solutions for Australian businesses, from traditional VPN to modern Zero Trust Network Access. We configure encrypted access to cloud and on-premises resources, implement MFA for all remote connections, and monitor access patterns for security anomalies.

Example Use Case

"An Australian company deploys Fortinet FortiClient VPN with MFA for their 80 remote workers, providing encrypted access to their cloud applications and on-premises file server while blocking access from unauthorised devices."