شرح شامل لل VPN وأنواعه بطريقة مبسطة وجرافيك احترافي — Transcript

Full transcript

1. 0:00Welcome to a new video. From the IT Doz
2. 0:03Network Fundamentals series. Have you
3. 0:06ever asked yourself? How do people
4. 0:07working from home access their company
5. 0:10servers? The ones they work for. And
6. 0:12how do they reach sensitive data?
7. 0:14Belonging to the company, even if it's
8. 0:16in another country. Today we’ll talk
9. 0:19about the official sponsor of "work
10. 0:20from home." We’re talking about VPN,
11. 0:23which stands for Virtual Private
12. 0:25Network. Its job is to ensure secure
13. 0:27access to data from public networks. To
14. 0:30understand better, let's take a simple
15. 0:32example. Imagine a group of thieves
16. 0:35wanting to rob a bank. Of course, we
17. 0:38know the bank vault is guarded. And
18. 0:40there are cameras everywhere. So, it's
19. 0:42not easy at all. They decide to dig a
20. 0:45tunnel from their hideout to the bank
21. 0:47vault. This way, the thieves can
22. 0:49actually reach the bank. Without anyone
23. 0:52revealing their identity, location, or
24. 0:54appearance. We all know this scenario.
25. 0:57We’ve seen it in a hundred movies and
26. 0:59shows, from heist films to Casa de
27. 1:01Papel. You can think of that
28. 1:05underground tunnel as a VPN. Because
29. 1:07through a VPN, you can access the
30. 1:09internet. Without your location or your
31. 1:12device's IP address being known. Now,
32. 1:14let’s see how this happens in detail.
33. 1:17We need to step back a little bit. And
34. 1:20recall what happens when you type a
35. 1:22website address in the URL. We agreed
36. 1:24before that all websites have an IP
37. 1:27address. But we obviously don’t
38. 1:29memorize them. DNS is what performs the
39. 1:32translation from the link we know to
40. 1:34the IP address. Let’s assume you need
41. 1:38to access your bank account at HSBC. In
42. 1:41this case, you send the request to the
43. 1:43router. It forwards the request to your
44. 1:46ISP, the Internet Service Provider.
45. 1:49Then, the ISP starts by verifying
46. 1:52through its filter criteria. Whether
47. 1:55this website is allowed in your country
48. 1:57or not. If allowed, the request passes
49. 2:00through hundreds of thousands, maybe
50. 2:02millions of routers. Until it reaches
51. 2:05the destination device, which is the
52. 2:07HSBC web server. And then. It replies
53. 2:11to you with the website content. The
54. 2:14problem is that when you send the
55. 2:16request, it contains a lot of info
56. 2:18about your device. Like your location
57. 2:20and IP address. And naturally, hackers
58. 2:23can intercept this connection to steal
59. 2:25your device info. They could even gain
60. 2:27access to your bank account details.
61. 2:29And you know what would happen after
62. 2:31that. And it gets worse if you’re
63. 2:34accessing the internet from public
64. 2:36Wi-Fi at a café, for instance. In that
65. 2:39case, you’ve made it very easy for
66. 2:41the hackers. But let's see what happens
67. 2:45if you use a VPN. First, you will need
68. 2:48to install a piece of software on your
69. 2:50device called a VPN client. This VPN
70. 2:53client will create a VPN tunnel between
71. 2:55you and the internet, which is the
72. 2:57tunnel we mentioned a moment ago. The
73. 3:00data leaving your device will start
74. 3:02traveling through this tunnel. There
75. 3:04are tunneling protocols that encrypt
76. 3:07this data. So, even if we assume a
77. 3:09skilled hacker manages to breach the
78. 3:12tunnel and get the data—which is very
79. 3:14difficult—they won't be able to read
80. 3:17it because it will be encrypted. The
81. 3:20data then passes through the tunnel to
82. 3:22the VPN server. It will then
83. 3:24communicate directly with the bank's
84. 3:25server. And it will send the message
85. 3:28after decrypting it and returning it to
86. 3:30its original form. Here, your device's
87. 3:33IP address and location have changed.
88. 3:35They have become the IP and location of
89. 3:38the VPN server. This, of course, gives
90. 3:41you more security and privacy. That is
91. 3:44why when certain websites are blocked
92. 3:46in your country, you can use a VPN. It
93. 3:49performs IP masking, making it appear
94. 3:51as if you are accessing the site from
95. 3:53another country. So, you are actually
96. 3:55able to see the website's content.
97. 3:58There is also a very important feature
98. 4:00in VPNs. As we said, to reach any point
99. 4:03on the internet, you need to pass
100. 4:05through a series of routers. With a VPN
101. 4:07, this path will be inside a tunnel, as
102. 4:10we mentioned. So, if the tunneling
103. 4:12protocol detects that a hacker is
104. 4:15trying to breach this tunnel, the
105. 4:17tunnel will shut down. And it will
106. 4:19start using another path with a
107. 4:21different set of routers. Now, let's
108. 4:25learn how companies. use VPNs. For
109. 4:29example, we have Company X with its
110. 4:31main branch in Cairo. Naturally, since
111. 4:34it is the main branch, this is where
112. 4:36the critical data is located—the
113. 4:38sensitive company data. Company X has
114. 4:41another branch in Riyadh. Of course,
115. 4:44employees at the Riyadh branch will
116. 4:46need access to the servers and data in
117. 4:48the main branch. There are several
118. 4:50solutions to do this, but the most
119. 4:53economical and fast solution is to
120. 4:55leverage the internet and transfer data
121. 4:58through it. However, we have a problem
122. 5:01here, which is that the public internet
123. 5:03is considered, as we said before, an
124. 5:05unsafe zone. This is because it has a
125. 5:08very large number of users and
126. 5:10computers, including, of course,
127. 5:12hackers. So, I am putting the company's
128. 5:14sensitive data at risk, and that is why
129. 5:17in these cases we resort to a VPN. We
130. 5:21agreed that a VPN creates a secure
131. 5:23tunnel, or as we call it, a tunnel. And
132. 5:25the data must pass through this tunnel
133. 5:27before it goes out to the internet.
134. 5:29This tunnel encrypts it, meaning it
135. 5:31performs an encryption process on it.
136. 5:33This is so that if someone on the
137. 5:35public internet actually manages to
138. 5:36reach the data, they won't be able to
139. 5:38do anything with it. And I don't need
140. 5:40to tell you that as soon as the data
141. 5:42reaches the receiver, it will also be
142. 5:44decrypted, meaning the code will be
143. 5:46unlocked using a specific key. At that
144. 5:48point, the device receiving the data
145. 5:50will be able to read it normally. If
146. 5:52you are working from home for a company
147. 5:54, you need to install a VPN client,
148. 5:56which will establish that VPN tunnel.
149. 5:59We have two types of VPNs. The type you
150. 6:02see here is called a Site-to-Site VPN.
151. 6:05And as the name suggests, its function
152. 6:07is to connect one site to another in a
153. 6:09different location. Naturally, I have
154. 6:11to perform configurations at all my
155. 6:13sites. For example, if I have a third
156. 6:16site in London, I must configure the
157. 6:19VPN on it as well. In short, I have to
158. 6:22set up the VPN at the main branch and
159. 6:24at all the remote sites. All sites must
160. 6:27be connected to the public internet,
161. 6:30and the VPN must be configured on the
162. 6:33router or firewall at each site. The
163. 6:36most famous site-to-site VPN is IPsec,
164. 6:39which is a framework containing a set
165. 6:42of rules that allow us to create a VPN
166. 6:45on our network. This type is very
167. 6:47suitable for creating connections
168. 6:49between sites. But let's assume the
169. 6:51more common situation. Which is needing
170. 6:53to connect individual users as well.
171. 6:56Like employees working from home. They
172. 6:59would certainly need access to the
173. 7:01network and company data. So here, I
174. 7:03would immediately use the second type
175. 7:05of VPN. Which is Remote Access VPN.
176. 7:08This provides network access to just
177. 7:11one device. For example, granting
178. 7:13remote access to a specific employee's
179. 7:15laptop. However, the site-to-site type
180. 7:17is completely different. Because it
181. 7:19connects the networks themselves, which
182. 7:21contain a very large number of devices.
183. 7:24A Remote Access VPN allows a specific
184. 7:26device to connect to the company
185. 7:29network. And this device could be a PC,
186. 7:31a laptop, or even a mobile phone. For
187. 7:34the device to use the Remote Access VPN
188. 7:36, an application must be installed on
189. 7:38it. Which is the VPN client. Such as
190. 7:41OpenVPN or GlobalProtect. We also have
191. 7:45two types of configurations for Remote
192. 7:47Access VPNs. They are Full Tunnel or
193. 7:50Split Tunnel. Full Tunnel means that
194. 7:53all of the remote user's traffic must
195. 7:55go through the company network. And it
196. 7:58must pass through the VPN. For example,
197. 8:01if you are browsing Facebook, the
198. 8:03traffic must go through the tunnel.
199. 8:06This makes you subject to the firewall
200. 8:08policies present in the company. And
201. 8:10all your movement on the public network
202. 8:13will be encrypted. But in return,
203. 8:15network performance won't be the best.
204. 8:18Because increasing the traffic will
205. 8:19cause a lot of congestion on the
206. 8:21network. And this will certainly cause
207. 8:22a delay. However, with Split Tunnel,
208. 8:26only traffic specific to the company
209. 8:28passes through the VPN. But any other
210. 8:31traffic not related to the company
211. 8:33network will go directly over the
212. 8:35public internet. This will certainly
213. 8:37save bandwidth and give us better
214. 8:39network performance. And with that, we
215. 8:42have reached the end of today's video.
216. 8:44We have summarized the basics of VPNs.
217. 8:47Of course, those specializing in
218. 8:49security will need to delve deeper into
219. 8:51this. If you liked the video, don't
220. 8:53forget to like and share it. And tell
221. 8:55us your opinion in the comments. And
222. 8:57don't forget to subscribe to the
223. 8:58channel as well. So you can get
224. 8:59everything we post.