Site-to-Site vs Remote-Access VPN: Which Do You Need?
A business VPN does one of two jobs: it joins two networks together, or it brings one person into a network. Most businesses with more than one office and some remote staff need both.
Site-to-site VPN
A permanent encrypted tunnel between two firewalls. People in the branch use head-office systems without doing anything: the firewalls handle it. It suits offices, warehouses and shops that need to share servers, printers or a phone system.
Remote-access VPN
A tunnel from one device to the office firewall, started by the person using it. Staff install a client, sign in and can then reach office systems from home, a hotel or a customer's site.
How they differ
- Who connects: a whole site, or one person
- Who starts it: the firewalls, always on, or the user, on demand
- What it needs: a firewall at each end, or a firewall and a client app
- What to watch: tunnel throughput, or the number of simultaneous users
Keeping remote access safe
Remote-access VPN is a common way in for attackers, because it is a sign-in page that faces the internet. Use two-step sign-in, give each person their own account, keep the firewall's firmware current, and limit each account to the systems that person needs.
Beyond VPN
Newer zero-trust access products give each user access to named applications instead of the whole network. All five brands on this site offer one. For a small business a well-configured VPN is still a sound choice.
Common questions
Do both ends of a site-to-site VPN need the same brand?
No. Site-to-site VPN uses a common standard, so different brands connect to each other. The same brand at both ends is easier to set up and manage.
How many remote users can a firewall support?
Each model has a limit, and some need a licence beyond a set number. Tell us how many people will connect at once and we will check for the model.
Is a consumer VPN service the same thing?
No. Consumer VPN services hide your browsing from the network you are on. A business VPN connects you to your own office.