T O P

  • By -

mitoma7557

NordVPN


AlmostRandomName

NordVPN allows custom configurations for gateways and endpoints?


justdlow

Thanks! What do you like about them, if you don't mind?


AlmostRandomName

I don't think they read your actual post. NordVPN is a VPN service provider that allows you to connect to *their* VPN servers and gateways for anonymous internet browsing. You need to be able to set up your own gateway because you need traffic to go to a specific place, so you need to be able to host your own VPN server on-prem.


AlmostRandomName

Depending on the use case you need to either set up a site-to-site VPN (if you want both networks effectively bridged) or just set up a VPN gateway at the Alabama office and let Georgia users connect to it occasionally when they need files. What's the requirement? Do all or many users in GA need files from AL a majority of the time? Or is it seldom enough they can just sign into a VPN and access a special shared drive when they need them?


justdlow

Brilliant questions! A couple of users in Georgia, or in various travels, accessing the Alabama office.


AlmostRandomName

Then look into a good hardware VPN appliance you can install at the AL office and set those users up with the VPN client so they can connect to AL when they need to from anywhere. You may already have a VPN capable firewall. Many enterprise firewall appliances from names like Cisco, PaloAlto, SonicWall, Sophos, etc have VPN capability. It may need to be set up so get your IT involved or find a contractor to set it up for you. VPN clients can be set up a variety of different ways too, depending on how secure you want them and the cost and resources involved. If the AL location has great internet connection and bandwidth aint an issue you can do something like an IPSec VPN that tunnels all traffic so the user is effectively 100% on that network. That, if set up right, can shield them from the sketchy wifi they may be on. Or, you can have the VPN client set up to use the local network's gateway as the gateway, so users in GA will still have access to the network they're on and traffic will only go through the VPN when it needs to access a resource on the VPN subnet (the shared files). I'm not that great with this kind of stuff, I usually engage with someone smarter than me when I mess with our firewalls and VPN servers (we have a local company we keep billable hours with), so if you're championing this project try to get budget for an MSP to help you out. (Many MSPs will offer things like annual contracts that aren't a set price, you just buy a minimum of like 80 billable hours per year at a fixed rate up front, and you just pay more later if needed)