A layered framework strategy for deploying high assurance VPNs
Samuel T. Patton, B. Smith, D. Doss, William J. Yurcik · 2002
Deploying VPNs (Virtual Private Networks), especially in a large-scale environment, requires much planning. Based on actual implementation experience, we propose a layered framework that can be used to distribute VPN deliverables among different workgroups. Despite the perception that a VPN is not a customizable solution, we conclude there is a broad range of VPN options available with corresponding trade-offs. This framework supports advanced planning to maximize trade-offs depending on individualized requirements.