# What is a Remote-Access VPN?

> A remote-access virtual private network (VPN) connects an individual client outside an organization’s local network to a VPN gateway or access service.

- Canonical URL: https://yellowcube.eu/glossary/remote-access-vpn/
- Publisher: Yellow Cube
- Language: en
- Contact: hello@yellowcube.eu

## Content

After authenticating the user, device, or both, the system creates a protected path for authorized traffic. Access may cover selected applications and subnets or provide broader network connectivity.

The client may use installed software or, for some web-oriented services, a browser. A full-tunnel configuration sends general network traffic through the organization or provider; split tunneling sends only selected traffic through the VPN. These choices affect bandwidth, inspection, name resolution, privacy, local-network exposure, and which controls can observe a session.

### Key points

- **Authentication and enrollment:** Bind access to managed accounts and devices, use phishing-resistant multi-factor authentication where appropriate, and secure initial setup and recovery.
- **Least-privilege access:** Limit routes, applications, ports, and administrative functions by role and context; enforce policy again after traffic reaches the gateway.
- **Endpoint and gateway security:** Patch exposed services and clients, protect keys and tokens, assess device risk, log important activity, and revoke access promptly when conditions change.
- **Important limitation:** An encrypted tunnel protects traffic between its endpoints but does not make the remote device trustworthy. Malware, stolen sessions, unsafe local networks, excessive authorization, and vulnerable internal services remain risks.

### Related terms

[Virtual private network (VPN)](<https://yellowcube.eu/glossary/virtual-private-network/>) · [SSL/TLS VPN](<https://yellowcube.eu/glossary/ssl-tls-vpn/>) · [Split tunneling](<https://yellowcube.eu/glossary/split-tunneling/>) · [Zero trust network access (ZTNA)](<https://yellowcube.eu/glossary/zero-trust-network-access/>) · [Multi-factor authentication (MFA)](<https://yellowcube.eu/glossary/multi-factor-authentication/>) · [Virtual desktop infrastructure (VDI) security](<https://yellowcube.eu/glossary/virtual-desktop-infrastructure-security/>)

### Sources

[NIST SP 800-46 Rev. 2: Enterprise Telework, Remote Access, and BYOD Security](https://csrc.nist.gov/pubs/sp/800/46/r2/final) · [NIST SP 800-77 Rev. 1: Guide to IPsec VPNs](https://csrc.nist.gov/pubs/sp/800/77/r1/final)

## Attribution and scope

This Markdown representation is generated from the same approved content records as the canonical HTML page. Cite the canonical URL above when referencing this material. Product and service descriptions are informational; confirm project-specific requirements with Yellow Cube.