---
title: "What Is a VPN? Virtual Private Network | Bytes Unlimited"
description: "A VPN (Virtual Private Network) tunnels traffic through an encrypted connection, giving remote users network-level access. Useful for legitimate remote-access cases, increasingly replaced by ZTNA for security reasons."
canonical: https://www.bytesunlimited.com/glossary/vpn/
---

 GLOSSARY · Network 

#  Virtual Private Network VPN 

 Encrypted tunnel that gives a remote user network-level access to internal resources as if they were physically on the office network. Increasingly being supplanted by ZTNA for security reasons. 

## Detailed definition

**Virtual Private Network** has two meanings in IT, and the distinction matters.

## Remote-access VPN (the corporate one)

A remote-access VPN tunnels a remote user’s traffic into the corporate network through an encrypted channel. The user authenticates to the VPN concentrator, then their device behaves as if it’s plugged into the office switch — they can reach file servers, internal apps, and on-prem databases.

This model worked well when “the office” was a clear perimeter and most apps lived inside it. It’s increasingly the wrong tool because:

* **Most apps are now SaaS.** A VPN to access [Microsoft 365](/services/microsoft-365/) is pointless backhaul.
* **VPN access is too broad.** Authenticated user = network-level trust = access to everything on the network, even things they don’t need.
* **Compromised credentials = full lateral movement.** A phished password gets the attacker on the internal network, just like a legitimate user.
* **Always-on VPN is bad for performance.** Routing all traffic through the office adds latency for the cloud apps that are the actual destination.

The modern replacement is [Zero Trust Network Access (ZTNA)](/glossary/ztna/) — per-application brokered access with identity, device, and context checks on every connection.

## Site-to-site VPN

A site-to-site VPN connects two networks (typically two offices, or an office and a cloud VPC) through an always-on encrypted tunnel. This use case is still very much alive — it’s how you get private connectivity between AWS workloads and on-prem databases, or between branch offices.

## Consumer VPN (the “hide my IP” kind)

Unrelated to corporate VPN — a consumer VPN service routes your personal traffic through a third-party server to mask your IP or evade geo-restrictions. Doesn’t apply to corporate IT decisions.

## Where VPN still fits

* Site-to-site connections between offices and cloud
* Niche legacy apps that absolutely require network-level access
* Specific on-prem services with no SaaS or web equivalent

For new deployments, we default to ZTNA via SonicWall Cloud Secure Edge or Cloudflare Access. Existing VPN deployments get migrated opportunistically as users complain about VPN friction or as security reviews expose the lateral-movement risk.

HOW WE HELP

## Related Bytes Unlimited services

* [ SonicWall CSE SonicWall Cloud Secure Edge — zero-trust access, threat protection, and edge security as a managed service.](/services/sonicwall/)

RELATED TERMS

## See also

* [ ZTNA ](/glossary/ztna/)
* [ SASE ](/glossary/sase/)
* [ MFA ](/glossary/mfa/)

##  Need help applying VPN to your business? 

 We've done this kind of work across New York. First conversation is free. 

[ Get In Touch ](/contact/) [ Back to Glossary ](/glossary/)

## Sitemap

- [Site map](https://www.bytesunlimited.com/sitemap.md)
- [llms.txt](https://www.bytesunlimited.com/llms.txt)
- [Canonical URL list](https://www.bytesunlimited.com/sitemap.xml)