Remote Access VPN and SSL VPN

What is it?

Remote Access VPN lets an individual user connect securely to the corporate network from anywhere. The most common modern implementation is SSL VPN, which uses standard HTTPS (TCP 443) instead of traditional IPsec, making it far easier to use from restrictive networks like hotel Wi-Fi or coffee shops where other VPN ports may be blocked.

Why should I learn it?

Remote and hybrid work made remote access VPN one of the most operationally important network security topics — and SSL VPN specifically because it “just works” through firewalls and NAT that block classic IPsec.

How it works

User opens a browser or lightweight client → connects to the VPN gateway over standard HTTPS (443) → authenticates, ideally with AAA and MFA → the gateway builds an encrypted tunnel and assigns the user an internal IP → traffic to internal resources routes through the tunnel; other internet traffic may or may not (depending on split-tunnel configuration).

Real-world example

An employee working from a hotel, where the network blocks most non-web ports, can still connect via SSL VPN because it looks like normal HTTPS browsing traffic — a traditional IPsec client on UDP 500/4500 would likely be blocked.

Troubleshooting mindset

If a user cannot connect from a specific location but can from home, first check whether the network they’re on is blocking the VPN’s required port — this is far more common than an actual configuration fault on the gateway.

Common mistake

Do not memorise the definition without connecting it to packet flow, device state and verification. Ask: what should happen, what actually happened, and which command or capture can prove the difference?

Quick recap

• Understand the job of the protocol or feature.
• Know where it sits in the traffic path.
• Verify behaviour instead of guessing.
• Connect the topic to the next networking layer.

Interview connection

Explain the concept in simple words first. Then give one practical example or troubleshooting check. That is stronger than repeating a textbook definition.

References & Further Reading

• AddySec original content — written for the Network Security track to build practical, interview-ready understanding.