{"id":11849,"date":"2017-08-24T12:21:59","date_gmt":"2017-08-24T12:21:59","guid":{"rendered":"https:\/\/www.process.st\/templates\/vpn-configuration\/"},"modified":"2024-02-28T20:45:51","modified_gmt":"2024-02-28T20:45:51","slug":"vpn-configuration","status":"publish","type":"post","link":"https:\/\/www.process.st\/templates\/vpn-configuration\/","title":{"rendered":"VPN Configuration"},"content":{"rendered":"<section id=\"introduction-to-vpn-configuration\">\n<h2> Introduction to VPN Configuration: <\/h2>\n<div class=\"image-content\">\n<figure>\n   <a href=\"https:\/\/www.process.st\/templates\/wp-content\/uploads\/2024\/02\/k8wXWxyPRkCmHI44Z7FLKA.png\" alt=\"VPN Configuration - Process Street\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/www.process.st\/templates\/wp-content\/uploads\/2024\/02\/k8wXWxyPRkCmHI44Z7FLKA.png\" \/> <\/a><figcaption>\n     VPN Configuration - Process Street<br \/>\n   <\/figcaption><\/figure>\n<\/p><\/div>\n<div class=\"text-content\">\n<p>This <a href=\"https:\/\/www.process.st\" rel=\"nofollow noopener\" target=\"_blank\">Process Street<\/a> VPN configuration checklist is engineered to <strong>allow an administrator to prepare a staff member's laptop for remote access to an internal network<\/strong> through establishing a VPN. &nbsp;<\/p>\n<p>This use case reflects the need to keep internal systems secure within the context of an increasingly remote work culture. This is particularly relevant to members of staff with higher levels of access to sensitive data, as all precautions must be put in place to secure important information.<\/p>\n<p>The process has <strong>two real steps<\/strong>:<\/p>\n<ol>\n<li>Enabling the router in the office.<\/li>\n<li>Setting up the VPN access on the staff computer.<\/li>\n<\/ol>\n<p>However, given that most security breaches are not the result of technical failures but of human error, the main purpose of this process is documentation.<\/p>\n<p>By running the checklist, we can record <strong>who has been given remote access, why they have been given it, and whether or not HR has been notified<\/strong> of the event. This means that if an employee is fired from the company, HR will know to contact IT to revoke the remote access, etc etc. It is the process which attempts to overcome the human and communication errors. &nbsp;<\/p>\n<p>This template is also entirely editable so that you can adapt it to the specific needs of your company, adding or removing steps at will. &nbsp;<\/p>\n<p>If you want to know more about configuring VPNs you can <strong>watch the video below<\/strong> from one particular provider:<\/p>\n<\/p><\/div>\n<div class=\"video-content\">\n<div class=\"iframe-container\">\n   <iframe src=\"https:\/\/www.youtube.com\/embed\/BpexjgfsD34?modestbranding=1&amp;showinfo=0\" frameborder=\"0\" allowfullscreen=\"true\"> <\/iframe>\n  <\/div>\n<div class=\"description\">\n    Setup IPSec VPN Access to Work Network for Remote Users using FortiClient\n  <\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"record-staff-details\">\n<h2> Record staff details <\/h2>\n<div class=\"text-content\">\n<p><strong>Use the form fields<\/strong> to record the details of the individuals involved in this process.<\/p>\n<\/p><\/div>\n<div class=\"text-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Name of employee requesting remote access <\/label><br \/>\n   <input type=\"text\" placeholder=\"Something will be typed here...\" disabled=\"disabled\" class=\"form-control\" \/>\n  <\/div>\n<\/p><\/div>\n<div class=\"text-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Name of staff member setting up the VPN <\/label><br \/>\n   <input type=\"text\" placeholder=\"Something will be typed here...\" disabled=\"disabled\" class=\"form-control\" \/>\n  <\/div>\n<\/p><\/div>\n<div class=\"textarea-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Reason for VPN creation <\/label><br \/>\n   <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled=\"disabled\" class=\"form-control\"><\/textarea>\n  <\/div>\n<\/p><\/div>\n<div class=\"text-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> VPN identifier <\/label><br \/>\n   <input type=\"text\" placeholder=\"Something will be typed here...\" disabled=\"disabled\" class=\"form-control\" \/>\n  <\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"check-the-office-vpnenabled-router-is-functional\">\n<h2> Check the office VPN-enabled router is functional <\/h2>\n<div class=\"text-content\">\n<p><strong>Make sure the VPN is working correctly.<\/strong>&nbsp;<\/p>\n<p>The VPN router should have:<\/p>\n<ul>\n<li>wired and wireless connectivity<\/li>\n<li>the ability to support up to 10 connections<\/li>\n<li>built in VPN features<\/li>\n<\/ul><\/div>\n<\/section>\n<section id=\"make-sure-the-router-is-secure\">\n<h2> Make sure the router is secure <\/h2>\n<div class=\"text-content\">\n<p>Given that this router is allowing access to the organization's network from outside, it is vital you put strong security measures in place to protect sensitive data.&nbsp;<\/p>\n<p>Make sure that the router is encrypted. Choose the highest levels of security your VPN router provides. This will likely be WPA2 with AES.<\/p>\n<p><strong>Use the form field below<\/strong> to record your notes.<\/p>\n<\/p><\/div>\n<div class=\"textarea-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Notes on encryption <\/label><br \/>\n   <textarea placeholder=\"Something will be typed here...\" rows=\"3\" disabled=\"disabled\" class=\"form-control\"><\/textarea>\n  <\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"set-a-strong-password-for-the-router\">\n<h2> Set a strong password for the router <\/h2>\n<div class=\"text-content\">\n<p>It is important to <strong>make sure all access is password protected<\/strong>.<\/p>\n<p>For regular use, you can consider using a password generator and manager like <a href=\"https:\/\/1password.com\/\" rel=\"nofollow noopener\" target=\"_blank\">1password<\/a>.<\/p>\n<p>However, for highest security access you could consider reviewing the steps in our <a href=\"https:\/\/www.process.st\/templates\/privileged-password-management\/\" rel=\"nofollow noopener\" target=\"_blank\">Privileged Password Management<\/a> checklist.&nbsp;<\/p>\n<\/p><\/div>\n<\/section>\n<section id=\"enable-remote-management-on-the-router\">\n<h2> Enable remote management on the router <\/h2>\n<div class=\"text-content\">\n<p>Within the router's settings you should find the option to enable remote management.&nbsp;<\/p>\n<p><strong>Make sure this is enabled<\/strong>.&nbsp;<\/p>\n<\/p><\/div>\n<\/section>\n<section id=\"add-the-member-of-staff-as-a-user\">\n<h2> Add the member of staff as a user <\/h2>\n<div class=\"text-content\">\n<p>Inside the router's software, you should have the ability to create user accounts.&nbsp;<\/p>\n<p><strong>Create the first user account.<\/strong>&nbsp;<\/p>\n<p>This will be the account given to the member of staff for them to connect to the router remotely.&nbsp;<\/p>\n<\/p><\/div>\n<\/section>\n<section id=\"download-and-install-the-vpn-client-software-on-staff-device\">\n<h2> Download and install the VPN client software on staff device <\/h2>\n<div class=\"text-content\">\n<p>Choose the VPN client software you wish to use and <strong>install it onto the staff member's device<\/strong>.&nbsp;<\/p>\n<p>You can find a selection of VPNs to consider at the following link: <a href=\"https:\/\/www.bestvpn.com\/best-vpn-software\/\" rel=\"nofollow noopener\" target=\"_blank\">5 Best VPN Software 2017<\/a>.<\/p>\n<p><strong>Include in the form field<\/strong> which software you have chosen.<\/p>\n<\/p><\/div>\n<div class=\"text-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> VPN software <\/label><br \/>\n   <input type=\"text\" placeholder=\"Something will be typed here...\" disabled=\"disabled\" class=\"form-control\" \/>\n  <\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"configure-the-new-connection-within-the-settings\">\n<h2> Configure the new connection within the settings <\/h2>\n<div class=\"text-content\">\n<p>Now we need to configure the VPN and set up the network connection.<\/p>\n<p>Follow the steps below to show you <strong>where these options are located on Windows and on Mac<\/strong>:<\/p>\n<ul>\n<li>In Windows, go to Control Panel, Network and Sharing, Create a New Connection, VPN.<\/li>\n<li>For a Mac, you\u2019ll go to System Preferences, Network, +, VPN.<\/li>\n<\/ul>\n<p><strong>Here you enter the IP address.&nbsp;<\/strong>If you have a static IP address it should work fine.<\/p>\n<p><strong>Record in the form field<\/strong> below the OS of the staff device:<\/p>\n<\/p><\/div>\n<div class=\"text-field-content form-field-content\">\n<div class=\"form-group\">\n   <label> Staff device OS <\/label><br \/>\n   <input type=\"text\" placeholder=\"Something will be typed here...\" disabled=\"disabled\" class=\"form-control\" \/>\n  <\/div>\n<\/p><\/div>\n<\/section>\n<section id=\"test-the-connection\">\n<h2> Test the connection <\/h2>\n<div class=\"text-content\">\n<p>Test your connection to see if everything works!<\/p>\n<\/p><\/div>\n<\/section>\n<section id=\"notify-hr-to-record-which-employee-has-remote-vpn-access\">\n<h2> Notify HR to record which employee has remote VPN access <\/h2>\n<div class=\"text-content\">\n<p>It is important for others within the organization to have a record of what has been set up in case of changes within the company.&nbsp;<\/p>\n<p>For example: When the staff member&nbsp;finishes working at the company, they should have their access revoked.<\/p>\n<p><strong>Use the email widget below to send an email to HR<\/strong> to notify them of the remote access setup. You can use the variables to automatically pull information into the email.<\/p>\n<\/p><\/div>\n<\/section>\n<section id=\"troubleshooting\">\n<h2> Troubleshooting: <\/h2>\n<\/section>\n<section id=\"check-whether-you-have-a-static-or-dynamic-ip-address\">\n<h2> Check whether you have a static or dynamic IP address <\/h2>\n<div class=\"text-content\">\n<p>One problem which might occur is that the VPN <strong>doesn't connect well with a dynamic IP address<\/strong>. This can lead to the VPN breaking and needing to be regularly fixed.&nbsp;<\/p>\n<p>You are <strong>presented with three options<\/strong>:<\/p>\n<ol>\n<li>Accept that the VPN will need occasionally updating<\/li>\n<li>Acquire a static IP address<\/li>\n<li>Set up a dynamic Domain Name Server which points to the office.&nbsp;<\/li>\n<\/ol>\n<p>This third option will make sure the DNS provides a consistent address to the VPN while adapting itself to the dynamic IP address used in the office. This can cause occasional small delays but will fix the problem pretty comfortably,&nbsp;<\/p>\n<\/p><\/div>\n<\/section>\n<section id=\"sources\">\n<h2> Sources: <\/h2>\n<div class=\"text-content\">\n<ul>\n<li><a href=\"https:\/\/technet.microsoft.com\/en-us\/library\/cc725734(v=ws.10).aspx\" rel=\"nofollow noopener\" target=\"_blank\">Configure a Remote Access VPN Server - Microsoft<\/a><\/li>\n<li><a href=\"http:\/\/www.databasemart.com\/HowTo\/Cisco_VPN_Remote_Access_Setup_ASA5500.aspx\" rel=\"nofollow noopener\" target=\"_blank\">Step by Step Guide to Set Up Remote Access VPN Server - Database Mart<\/a><\/li>\n<li><a href=\"http:\/\/sumac.com\/how-to-setup-a-vpn-to-access-your-office-files-remotely\/\" rel=\"nofollow noopener\" target=\"_blank\">How to Set Up a VPN to Access Your Office Files Remotely - Sumac<\/a><\/li>\n<li><a href=\"https:\/\/www.ssc.wisc.edu\/sscc\/pubs\/remote_desktop.htm\" rel=\"nofollow noopener\" target=\"_blank\">Connecting to Your Office Computer Using Remote Access - SSCC<\/a><\/li>\n<\/ul><\/div>\n<\/section>\n<section id=\"related-checklists\">\n<h2> Related Checklists: <\/h2>\n<div class=\"text-content\">\n<ul>\n<li><a href=\"https:\/\/www.process.st\/templates\/privileged-password-management\/\" rel=\"nofollow\">Privileged Password Management<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/network-administrator-daily-tasks\/\" rel=\"nofollow\">Network Administrator Daily Tasks<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/network-security-audit-checklist\/\" rel=\"nofollow\">Network Security Audit Checklist<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/firewall-audit-checklist\/\" rel=\"nofollow\">Firewall Audit Checklist<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/vpn-configuration\/\" rel=\"nofollow\">VPN Configuration<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/setup-apache-server\/\" rel=\"nofollow\">Apache Server Setup<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/email-server-security\/\" rel=\"nofollow\">Email Server Security<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/penetration-testing\/\" rel=\"nofollow\">Penetration Testing<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/inventory-management-process\/\" rel=\"nofollow noopener\" target=\"_blank\">Inventory Management Process<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/network-security-management\/\" rel=\"nofollow noopener\" target=\"_blank\">Network Security Management<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/client-data-backup-best-practices\/\" rel=\"nofollow noopener\" target=\"_blank\">Client Data Backup Best Practices<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/computer-maintenance-guide\/\" rel=\"nofollow noopener\" target=\"_blank\">Computer Maintenance Guide<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/ubuntu-server-setup-process\/\" rel=\"nofollow noopener\" target=\"_blank\">Server Setup Process<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/virtual-private-server-setup\/\" rel=\"nofollow noopener\" target=\"_blank\">Virtual Private Server Setup<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/it-support-process\/\" rel=\"nofollow noopener\" target=\"_blank\">IT Support Process<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/helpdesk-management\/\" rel=\"nofollow noopener\" target=\"_blank\">Helpdesk Management<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/server-maintenance-checklist\/\" rel=\"nofollow noopener\" target=\"_blank\">Server Maintenance<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/server-security-checklist\/\" rel=\"nofollow noopener\" target=\"_blank\">Server Security<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/information-security-incident-response\/\" rel=\"nofollow noopener\" target=\"_blank\">Information Security Incident Response<\/a><\/li>\n<li><a href=\"https:\/\/www.process.st\/templates\/sql-server-audit-checklist\/\" rel=\"nofollow noopener\" target=\"_blank\">SQL Server Audit Checklist<\/a><\/li>\n<\/ul><\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"<p>Introduction to VPN Configuration: VPN Configuration - Process Street This Process Street VPN configuration checklist is engineered to allow an administrator to prepare a staff member's laptop for remote access to an internal network through establishing a VPN. &nbsp; This use case reflects the need to keep internal systems secure within the context of an [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":11850,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"ep_exclude_from_search":false,"cover_icon_emoji":"","cover_icon_url":"","tasks_count":"15","template_description":"Run this VPN Configuration template when you want to set up a virtual private network for employees to access the office network remotely.","template_id":"ok4xCJJi0hYgfPnocdhAJA","task_0":"Introduction to VPN Configuration:","task_slug_0":"introduction-to-vpn-configuration","task_1":"Record staff details","task_slug_1":"record-staff-details","task_2":"Check the office VPN-enabled router is functional","task_slug_2":"check-the-office-vpnenabled-router-is-functional","task_3":"Make sure the router is secure","task_slug_3":"make-sure-the-router-is-secure","task_4":"Set a strong password for the router","task_slug_4":"set-a-strong-password-for-the-router","task_5":"Enable remote management on the router","task_slug_5":"enable-remote-management-on-the-router","task_6":"Add the member of staff as a user","task_slug_6":"add-the-member-of-staff-as-a-user","task_7":"Download and install the VPN client software on staff device","task_slug_7":"download-and-install-the-vpn-client-software-on-staff-device","task_8":"Configure the new connection within the settings","task_slug_8":"configure-the-new-connection-within-the-settings","task_9":"Test the connection","task_slug_9":"test-the-connection","task_10":"Notify HR to record which employee has remote VPN access","task_slug_10":"notify-hr-to-record-which-employee-has-remote-vpn-access","task_11":"Troubleshooting:","task_slug_11":"troubleshooting","task_12":"Check whether you have a static or dynamic IP address","task_slug_12":"check-whether-you-have-a-static-or-dynamic-ip-address","task_13":"Sources:","task_slug_13":"sources","task_14":"Related Checklists:","task_slug_14":"related-checklists","task_15":"","task_slug_15":"","task_16":"","task_slug_16":"","task_17":"","task_slug_17":"","task_18":"","task_slug_18":"","task_19":"","task_slug_19":"","task_20":"","task_slug_20":"","task_21":"","task_slug_21":"","task_22":"","task_slug_22":"","task_23":"","task_slug_23":"","task_24":"","task_slug_24":"","task_25":"","task_slug_25":"","task_26":"","task_slug_26":"","task_27":"","task_slug_27":"","task_28":"","task_slug_28":"","task_29":"","task_slug_29":"","task_30":"","task_slug_30":"","task_31":"","task_slug_31":"","task_32":"","task_slug_32":"","task_33":"","task_slug_33":"","task_34":"","task_slug_34":"","task_35":"","task_slug_35":"","task_36":"","task_slug_36":"","task_37":"","task_slug_37":"","task_38":"","task_slug_38":"","task_39":"","task_slug_39":"","task_40":"","task_slug_40":"","task_41":"","task_slug_41":"","task_42":"","task_slug_42":"","task_43":"","task_slug_43":"","task_44":"","task_slug_44":"","task_45":"","task_slug_45":"","task_46":"","task_slug_46":"","task_47":"","task_slug_47":"","task_48":"","task_slug_48":"","task_49":"","task_slug_49":"","task_50":"","task_slug_50":"","task_51":"","task_slug_51":"","task_52":"","task_slug_52":"","task_53":"","task_slug_53":"","task_54":"","task_slug_54":"","task_55":"","task_slug_55":"","task_56":"","task_slug_56":"","task_57":"","task_slug_57":"","task_58":"","task_slug_58":"","task_59":"","task_slug_59":"","task_60":"","task_slug_60":"","task_61":"","task_slug_61":"","task_62":"","task_slug_62":"","task_63":"","task_slug_63":"","task_64":"","task_slug_64":"","task_65":"","task_slug_65":"","task_66":"","task_slug_66":"","task_67":"","task_slug_67":"","task_68":"","task_slug_68":"","task_69":"","task_slug_69":"","task_70":"","task_slug_70":"","task_71":"","task_slug_71":"","task_72":"","task_slug_72":"","task_73":"","task_slug_73":"","task_74":"","task_slug_74":"","task_75":"","task_slug_75":"","task_76":"","task_slug_76":"","task_77":"","task_slug_77":"","task_78":"","task_slug_78":"","task_79":"","task_slug_79":"","task_80":"","task_slug_80":"","task_81":"","task_slug_81":"","task_82":"","task_slug_82":"","task_83":"","task_slug_83":"","task_84":"","task_slug_84":"","task_85":"","task_slug_85":"","task_86":"","task_slug_86":"","task_87":"","task_slug_87":"","task_88":"","task_slug_88":"","task_89":"","task_slug_89":"","task_90":"","task_slug_90":"","task_91":"","task_slug_91":"","task_92":"","task_slug_92":"","task_93":"","task_slug_93":"","task_94":"","task_slug_94":"","task_95":"","task_slug_95":"","task_96":"","task_slug_96":"","task_97":"","task_slug_97":"","task_98":"","task_slug_98":"","task_99":"","task_slug_99":"","footnotes":""},"categories":[42,7,1],"tags":[],"class_list":["post-11849","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-internal-audit","category-miscellaneous","category-uncategorized"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/11849","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/comments?post=11849"}],"version-history":[{"count":0,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/11849\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/media\/11850"}],"wp:attachment":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/media?parent=11849"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/categories?post=11849"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/tags?post=11849"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}