About this interactive
The internet gives cheap, fast connections between sites and users, but the traffic crosses a public network. A virtual private network encrypts it: anyone can see the ones and zeros, but not what they mean. That is what makes it virtually private.
A site-to-site VPN joins two networks, such as headquarters and a satellite campus. Traffic is encrypted as it leaves one site's router or firewall and decrypted at the other's, so users on either side need nothing special. IPsec is a common protocol for this tunnel.
A client-to-site VPN is for users who have no router or firewall of their own to connect, at home or in a coffee shop. Software on their device encrypts traffic to the office, usually to a firewall. IPsec works here too, and TLS VPNs are used on the client side.
To sort a card, ask where each end of the tunnel sits: on network devices at two sites, or on one person's device.
About TechKnowSurge
TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.
Explore free tools and programs →