Choosing the right remote-access VPN: Check IT List

Determining the right virtual private network (VPN) solution can be a daunting task for a small or midsized business (SMB). For the SMB, VPNs usually serve as remote-access tools rather than a wide area network (WAN) that connects multiple remote facilities. WAN VPNs tend to be used for large-scale projects.

Here are five questions to ask before you procure and implement a VPN for your SMB:

1. Do you really need a VPN? This seems like a pretty simple question, but you would be amazed at how many companies do not ask this up front. VPNs provide remote access so employees can access corporate network assets from remote locations. You will need a VPN if you have a centralized computing environment (such as a sales database) that cannot be adequately stored, updated and modified on a host PC or laptop from remote locations. However, in many cases, the remote access is rationalized by nonbusiness reasons such as the desire to work from a home office. This is not a true business requirement and should be considered when evaluating the total cost of ownership for each option.

2. How many remote resources require VPN access? You need to have an understanding of the number of resources requiring remote access, as the products and services available in the market generally scale to the number of supported users. Be sure to add growth factors so that you do not outgrow the VPN eventually chosen. A good rule of thumb is to assume 10% to 15% annual growth over a four-year period. I recommend you refresh after four years. Product lifecycles are shrinking dramatically, and the VPN you choose may be end-of-life (EOL) in three to four years anyway.

3. How will remote users access the VPN? Will the users utilize their personal computers? Will the company provide laptops? These are questions that must be answered and taken into consideration when evaluating total costs. Some things to consider: If you allow end users to use their personal computers from home, there is an undeniable risk that viruses and worms can be introduced into your environment. Home computers are notorious for picking up viruses, because they are used by people who may or may not understand the risk of opening or downloading infected data. If you allow users to use their home computers, consider some form of virus or worm protection that can be loaded. If your employees are using company-supplied laptops, ensure they have virus and worm protection as well. If you are moving toward a remote computing environment, the end-client security is very critical, as a worm can destroy a network.

4. Is sensitive data being passed over the VPN? This is another very critical question that must be answered before moving forward. If the information is critical as well as sensitive, then you will require a VPN solution that encrypts the traffic. Most VPN offerings have some form of tunneling, but the real question is, how robust ...
   
   To continue reading for free, register below or login

   Requires Membership to View

   To gain access to this and all member only content, please provide the following information:

   Email Address:
   
   
   

   By joining SearchCIO-Midmarket.com you agree to receive email updates from the TechTarget network of sites, including updates on new content, magazine or event notifications, new site launches and market research surveys. Please verify all information and selections above. You may unsubscribe at any time from one or more of the services you have selected by editing your profile or unsubscribing via email.
   
   TechTarget cares about your privacy. Read our Privacy Policy
   To read more you must become a member of SearchCIO-Midmarket.com

   As an existing member of the TechTarget network please activate your SearchCIO-Midmarket.com account 

   By joining SearchCIO-Midmarket.com you agree to receive email updates from the TechTarget network of sites, including updates on new content, magazine or event notifications, new site launches and market research surveys. Please verify all information and selections above. You may unsubscribe at any time from one or more of the services you have selected by editing your profile or unsubscribing via email.
   
   TechTarget cares about your privacy. Read our Privacy Policy
   
   
   

   Digg This!     StumbleUpon     Del.icio.us

   
   
   
   

   RELATED CONTENT Data centers and infrastructure for the midmarket 10 tips for renegotiating your virtualization licensing contracts Management tools for virtualized servers: A look at the options Virtual server management vs. physical servers: What's the difference? Virtualization technology use spreading into desktops and storage Laying the groundwork for cloud computing services adoption in 6 steps Cloud computing tips for getting started with next-gen IT capabilities What do you know about data center outsourcing? Pricing out Windows Server 2008 for virtualization cost efficiency Data center strategy starts with the business Desktop and application virtualization: Lessons learned Remote connectivity for the midmarket Midmarket data center management guides: Tips and best practices 9 steps to business continuity strategy: Remote access solutions, more How to build a remote-site disaster recovery plan -- a CIO's advice Arts center's network infrastructure hits right note with Wi-Fi, FMC Unified communications plans should tap CIO Forrester: IT industry demands better collaborative, integrated data Broadband Wi-Fi access a community dream Augusta latest city to try out municipal Wi-Fi Consumer smartphones pushing midmarket CIOs to adopt (news podcast) IPhone: CIOs ponder personal tech toys in the office

   RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary

   
   
   are the authentication and encryption capabilities for the out-of-the box tools? How much time and resources are required to support a do-it-yourself VPN solution that requires encryption? Always remember that no matter what the vendor is touting, these are not plug-and-forget solutions.

5. What are the available alternatives? Without going into a tremendous amount of detail, there are two main categories that you will want to look at. The first is a hosted VPN solution and the second is a do-it-yourself VPN. The questions above will help you define the initial requirements that can be used to evaluate the alternatives in each of the solution buckets. If you do not have a staff to design, install and maintain a product-based solution, look at the hosted VPN solutions. Be sure to map function vs. function, and when comparing monthly or annual costs, be sure to include the resources required to manage your own.

Robert Harrell is the National Director, Advanced Infrastructure Practice, SBC PremierServ Consulting Services provided by Callisma Inc.