{"id":93051,"date":"2024-11-05T17:14:05","date_gmt":"2024-11-05T09:14:05","guid":{"rendered":"https:\/\/version-2.com\/?p=93051"},"modified":"2024-11-20T16:49:18","modified_gmt":"2024-11-20T08:49:18","slug":"what-is-vpn-passthrough-and-how-does-it-work","status":"publish","type":"post","link":"https:\/\/version-2.com\/zh\/2024\/11\/what-is-vpn-passthrough-and-how-does-it-work\/","title":{"rendered":"What is VPN passthrough and how does it work?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"93051\" class=\"elementor elementor-93051\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-35fe5dd post-content elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"35fe5dd\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[{&quot;jet_parallax_layout_image&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;_id&quot;:&quot;cef08c3&quot;,&quot;jet_parallax_layout_image_tablet&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_image_mobile&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_speed&quot;:{&quot;unit&quot;:&quot;%&quot;,&quot;size&quot;:50,&quot;sizes&quot;:[]},&quot;jet_parallax_layout_type&quot;:&quot;scroll&quot;,&quot;jet_parallax_layout_direction&quot;:&quot;1&quot;,&quot;jet_parallax_layout_fx_direction&quot;:null,&quot;jet_parallax_layout_z_index&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_x&quot;:50,&quot;jet_parallax_layout_bg_x_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_x_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y&quot;:50,&quot;jet_parallax_layout_bg_y_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size&quot;:&quot;auto&quot;,&quot;jet_parallax_layout_bg_size_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_animation_prop&quot;:&quot;transform&quot;,&quot;jet_parallax_layout_on&quot;:[&quot;desktop&quot;,&quot;tablet&quot;]}]}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-409a2e9a\" data-id=\"409a2e9a\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5a8be8f elementor-widget elementor-widget-text-editor\" data-id=\"5a8be8f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><img fetchpriority=\"high\" decoding=\"async\" class=\"alignnone size-medium\" src=\"https:\/\/content.nordlayer.com\/uploads\/large_What_is_VPN_Passthrough_and_How_Does_it_Work_560dfdf9b7.png\" width=\"1000\" height=\"571\" \/><\/p><div class=\"Grid_item__8Wd1v Grid_col9Lg__IiDDJ BlogArticle_contentGrid__wDyG9\"><div class=\"BlogArticle_articleSummary__vUkIt\"><div class=\"ArticleSummary_markdownWrapper__admhj\"><p class=\"Text_text__rSWMU Markdown_paragraph__WNGcF ArticleSummary_paragraph__AmdWA Text_bodyColor__a5sZX\" data-testid=\"text\"><strong class=\"Markdown_strong__zgufl ArticleSummary_strong__PSecf\">Summary:<\/strong> A VPN passthrough enables encrypted VPN traffic through firewalls but poses security risks. What are the alternatives? Read the full guide for secure solutions.<\/p><\/div><\/div><div id=\"section-1\"><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">A VPN passthrough is a router feature that allows data encrypted by VPN protocols to pass network firewall filters.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Passthroughs were once essential to work around router limitations. Improved protocols and security technology have made them less critical. However, some situations still involve the VPN passthrough setting.<\/p><h2 id=\"key-takeaways\" class=\"Heading_root__vbfeI Heading_heading30__45qwh Heading_primary__3VZgz Heading_medium__jmtkh SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading2__q1N0l SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">Key takeaways<\/h2><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">After reading this article, you will:<\/p><ul class=\"SharedArticleMarkdownComponents_list__wACy0 SharedArticleMarkdownComponents_horizontalSpacing__3J8kD List_list__ue2mH\"><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div>Know what a VPN passthrough is and how passthrough types function.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div>Learn how to configure IPSec, PPTP, and L2TP passthroughs on standard routers.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div>Understand the limitations of VPN passthrough features and common security vulnerabilities.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div>Know how to troubleshoot VPN passthrough security problems and create secure VPN router setups.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div>Learn about effective alternatives to a VPN passthrough and how to choose the right way to establish VPN connections.<\/div><\/li><\/ul><h2 id=\"vpn-passthrough-definition\" class=\"Heading_root__vbfeI Heading_heading30__45qwh Heading_primary__3VZgz Heading_medium__jmtkh SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading2__q1N0l SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">VPN passthrough definition<\/h2><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">A VPN passthrough is a router feature that allows outbound VPN traffic to pass through a <a class=\"Link_inherit__NP_8V Link_medium__XEV_Z Link_noTextDecoration__GhdxD Link_aTagRoot__8wRP7 SharedArticleMarkdownComponents_link__aj_Vl\" href=\"https:\/\/nordlayer.com\/learn\/firewall\/network\/\">network firewall<\/a>.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Passthroughs <strong class=\"Markdown_strong__zgufl\">allow businesses to connect devices to VPNs without compromising firewall protection<\/strong>. Users can encrypt traffic leaving the network and hide their activity. The firewall filters other inbound and outbound traffic normally.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Think of a VPN passthrough as a secret passage. Only authorized users can access the passage, and external actors cannot see where it leads.<\/p><\/div><div id=\"section-2\"><div class=\"ArticleImage_root__wPCMO BlogArticle_articleImage__BPrGe\"><img decoding=\"async\" class=\"alignnone size-medium\" src=\"https:\/\/content.nordlayer.com\/uploads\/VPN_passthrough_definition_4844a34f36.png\" width=\"1400\" height=\"490\" \/><\/div><\/div><div id=\"section-3\"><h2 id=\"how-does-a-vpn-passthrough-work\" class=\"Heading_root__vbfeI Heading_heading30__45qwh Heading_primary__3VZgz Heading_medium__jmtkh SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading2__q1N0l SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">How does a VPN passthrough work?<\/h2><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Sometimes, compatibility issues arise between VPNs and network routers. Some routers do not support <strong class=\"Markdown_strong__zgufl\">VPN protocols<\/strong>.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">VPNs rely on protocols to encrypt and transport data. VPN clients must establish connections with VPN servers outside the network boundary. This leads to problems when Network Address Translation (NAT) setups cannot handle VPN protocols.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">NAT assigns a public IP address and sends data to its destination. Unfortunately, older VPN protocols can derail this process. NAT is unable to route packets to their final destination. Instead of creating an encrypted tunnel, routers block data packets and return them to the source.<\/p><\/div><div id=\"section-4\"><div class=\"ArticleImage_root__wPCMO BlogArticle_articleImage__BPrGe\"><img decoding=\"async\" class=\"alignnone size-medium\" src=\"https:\/\/content.nordlayer.com\/uploads\/How_VPN_passthrough_works_cb5a81d707.png\" width=\"1400\" height=\"361\" \/><\/div><\/div><div id=\"section-5\"><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">A VPN passthrough solves this problem. Passthroughs allow routers to recognize protocols like <strong class=\"Markdown_strong__zgufl\">IPSec, L2TP, or PPTP<\/strong>. When the VPN passthrough is engaged, encrypted traffic can pass across the network edge, protecting user data.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\"><strong class=\"Markdown_strong__zgufl\">Note<\/strong>: Advanced protocols like OpenVPN and WireGuard <strong class=\"Markdown_strong__zgufl\">avoid the need for a VPN passthrough<\/strong>. Modern VPN protocols work with NAT, allowing outbound traffic to the VPN server.<\/p><h2 id=\"do-all-routers-need-a-vpn-passthrough\" class=\"Heading_root__vbfeI Heading_heading30__45qwh Heading_primary__3VZgz Heading_medium__jmtkh SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading2__q1N0l SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">Do all routers need a VPN passthrough?<\/h2><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Not all routers need a VPN passthrough, but some do. It&#8217;s important to know whether your routers support VPNs, as configuration issues can expose sensitive data to cyber attackers.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">The good news is <strong class=\"Markdown_strong__zgufl\">most routers include a VPN passthrough option<\/strong>. In practice, only very old routers lack passthrough capabilities (and you should probably replace those devices for security reasons).<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">The bottom line is that you need to enable passthrough for older VPN protocols like IPsec or PPTP. Modern protocols and more secure alternatives make this unnecessary.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">If you <em>do<\/em> need passthrough functionality on your router, choosing the right type matters. That&#8217;s where we will turn next.<\/p><h2 id=\"types-of-vpn-passthrough\" class=\"Heading_root__vbfeI Heading_heading30__45qwh Heading_primary__3VZgz Heading_medium__jmtkh SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading2__q1N0l SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">Types of VPN passthrough<\/h2><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">VPN passthroughs deal with different <a class=\"Link_inherit__NP_8V Link_medium__XEV_Z Link_noTextDecoration__GhdxD Link_aTagRoot__8wRP7 SharedArticleMarkdownComponents_link__aj_Vl\" href=\"https:\/\/nordlayer.com\/learn\/vpn\/types-and-protocols\/\">VPN protocols<\/a>. There is no one-size-fits-all passthrough design, as protocols operate differently. Here are the three main versions:<\/p><h3 class=\"Heading_root__vbfeI Heading_heading20__p7mXS Heading_primary__3VZgz Heading_medium__jmtkh SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading3___q75_ SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">PPTP passthrough<\/h3><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">The point-to-point tunneling protocol (PPTP) uses the Transmission Control Protocol (TCP) via Port 1723 and the Generic Routing Encapsulation (GRE) protocol.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">GRE does not require a specific port or IP address to create a PPTP connection. NAT requires a port number and IP address\u2014creating a conflict. That&#8217;s where a PPTP passthrough becomes essential.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">The PPTP passthrough feature solves this conflict by assigning a Call ID to GRE headers. The router sees this Call ID as a port number and allows traffic through the firewall.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Users implement a PPTP passthrough via their router firmware. Here\u2019s how to do so:<\/p><ol class=\"SharedArticleMarkdownComponents_list__wACy0 SharedArticleMarkdownComponents_horizontalSpacing__3J8kD List_list__ue2mH List_ol__GAsIC\"><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div>Find your router IP address and enter it into a browser address bar.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div>Log onto the router settings tool and find the VPN settings section.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div>You should see an option to apply a PPTP passthrough. Enable the VPN passthrough and save your settings.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div>Reboot the router. The VPN passthrough functionality should be enabled.<\/div><\/li><\/ol><h3 class=\"Heading_root__vbfeI Heading_heading20__p7mXS Heading_primary__3VZgz Heading_medium__jmtkh SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading3___q75_ SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">IPSec passthrough<\/h3><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">IPSec (Internet Protocol Security) passthroughs use NAT-Traversal (NAT-T) technology.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">NAT-T packages data using the User Datagram Protocol (UDP) to wrap IPSec data. The NAT router can recognize this format but cannot understand encrypted IPSec traffic.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">IPSec passthroughs use UDP port 4500 to establish an IKE packet exchange. IKE exchange allows the router to assign a private IP address for IPSec traffic while underlying payloads remain untouched.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Users also implement an IPSec passthrough via router firmware. To do so:<\/p><ol class=\"SharedArticleMarkdownComponents_list__wACy0 SharedArticleMarkdownComponents_horizontalSpacing__3J8kD List_list__ue2mH List_ol__GAsIC\"><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div>Firstly, log onto your router via a web browser.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div>Look for the VPN section and the option to enable IPSec passthrough.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div>You may need to reboot the router after saving passthrough settings.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div>Test the VPN connection to ensure passthrough is enabled.<\/div><\/li><\/ol><h3 class=\"Heading_root__vbfeI Heading_heading20__p7mXS Heading_primary__3VZgz Heading_medium__jmtkh SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading3___q75_ SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">L2TP passthrough<\/h3><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">The L2TP VPN passthrough resembles the process for PPTP. In this case, passthroughs use Port 1701 to create a VPN connection.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">VPN passthroughs assign a Session ID to UDP packets passing over the port. This Session ID substitutes for the port number, allowing transfers via the NAT router.<\/p><h2 id=\"what-is-the-difference-between-a-vpn-and-a-vpn-passthrough\" class=\"Heading_root__vbfeI Heading_heading30__45qwh Heading_primary__3VZgz Heading_medium__jmtkh SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading2__q1N0l SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">What is the difference between a VPN and a VPN passthrough?<\/h2><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">VPNs and VPN passthroughs sound similar, but they are very different technologies. <strong class=\"Markdown_strong__zgufl\">Passthroughs only allow VPN traffic from internal networks to the public internet<\/strong>. That&#8217;s all they do.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Virtual Private Networks are far more powerful network security tools. VPN companies operate servers across the world. The VPN server <strong class=\"Markdown_strong__zgufl\">transports encrypted data and assigns new IP addresses,<\/strong> effectively making users anonymous.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Users generally access the VPN server via a locally-hosted VPN client. VPN software uses protocols to encrypt and send data to servers. A VPN passthrough feature smooths that process.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Companies may also choose to install a <strong class=\"Markdown_strong__zgufl\">VPN router<\/strong>. VPN routers operate on the internal network and eliminate the need to install a VPN client on every device. The router encrypts and anonymizes data and connects with external VPN services.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Passthroughs are not usually needed if you run a VPN router. They <em>may<\/em> be necessary if you rely on separate clients for devices connected to a standard network router.<\/p><h2 id=\"vpn-passthroughs-and-security-considerations\" class=\"Heading_root__vbfeI Heading_heading30__45qwh Heading_primary__3VZgz Heading_medium__jmtkh SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading2__q1N0l SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">VPN passthroughs and security considerations<\/h2><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Let&#8217;s assume you continue using PPTP or IPSec and must traverse a typical NAC router. Does this impact your network security status, and should you take action in response?<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Firstly, passthroughs are <strong class=\"Markdown_strong__zgufl\">more secure than disabling NAC<\/strong>. This would solve the routing issue, but NAC manages traffic efficiently, conceals IP addresses from the public internet, and allows easy IP changes for network users.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Don&#8217;t even think about disabling NAC. Even so, VPN passthroughs generally leave networks <em>more<\/em> exposed to <a class=\"Link_inherit__NP_8V Link_medium__XEV_Z Link_noTextDecoration__GhdxD Link_aTagRoot__8wRP7 SharedArticleMarkdownComponents_link__aj_Vl\" href=\"https:\/\/nordlayer.com\/learn\/network-security\/threats\/\">cybersecurity threats<\/a>. There are a few reasons why this happens.<\/p><ul class=\"SharedArticleMarkdownComponents_list__wACy0 SharedArticleMarkdownComponents_horizontalSpacing__3J8kD List_list__ue2mH\"><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div>Firstly, <strong class=\"Markdown_strong__zgufl\">passthroughs can allow connections via insecure old VPN protocols<\/strong>. These protocols are rarely updated (if ever) and become less secure over time.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div>Security teams may not know if users may establish insecure outbound VPN connections \u2014 putting data at risk.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div>Another problem is that <strong class=\"Markdown_strong__zgufl\">firewalls cannot inspect VPN traffic<\/strong> passing into and from network devices. This is fine if VPNs use strong encryption, but insecure VPN traffic can become an attack vector.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div>Passthroughs also <strong class=\"Markdown_strong__zgufl\">open ports for attackers to exploit.<\/strong> They may even act as <strong class=\"Markdown_strong__zgufl\">backdoors<\/strong>, allowing freedom of movement for malicious traffic inside the network.<\/div><\/li><\/ul><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">That sounds worrying. However, the best practices below should ensure a secure passthrough setup:<\/p><ul class=\"SharedArticleMarkdownComponents_list__wACy0 SharedArticleMarkdownComponents_horizontalSpacing__3J8kD List_list__ue2mH\"><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Avoid older VPN protocols<\/strong>. Use secure protocols like OpenVPN or WireGuard that are harder to crack and offer better compatibility. Use VPN passthrough as a last resort.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Block inactive ports<\/strong>. If you set up a VPN passthrough, only enable port forwarding where necessary. Check and close open ports that the VPN does not need.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Maintain authentication and access policies<\/strong>. Limit network access to authorized users and devices. Use multi-factor authentication and processes to limit VPN access.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Monitor VPN traffic<\/strong>. Use logs and real-time tracking to detect unusual behavior patterns or potential attacks.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Use network segmentation.<\/strong> If you need passthroughs for certain activities, create secure zones with <a class=\"Link_inherit__NP_8V Link_medium__XEV_Z Link_noTextDecoration__GhdxD Link_aTagRoot__8wRP7 SharedArticleMarkdownComponents_link__aj_Vl\" href=\"https:\/\/nordlayer.com\/features\/network-segmentation\/\">network segmentation tools<\/a>. That way, intruders will find their path blocked if they exploit passthrough vulnerabilities.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Audit passthroughs regularly<\/strong>. It&#8217;s never wise to enable VPN passthrough permanently. Regularly check router settings. Disable VPN passthrough when it is no longer needed.<\/div><\/li><li>\u00a0<\/li><\/ul><\/div><div id=\"section-7\"><h2 id=\"alternatives-to-a-vpn-passthrough\" class=\"Heading_root__vbfeI Heading_heading30__45qwh Heading_primary__3VZgz Heading_medium__jmtkh SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading2__q1N0l SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">Alternatives to a VPN passthrough<\/h2><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Another way to avoid the security problems above is to use an alternative solution for outbound VPN traffic. Common alternatives include:<\/p><ul class=\"SharedArticleMarkdownComponents_list__wACy0 SharedArticleMarkdownComponents_horizontalSpacing__3J8kD List_list__ue2mH\"><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">SSL encryption<\/strong>. SSL encrypts HTTPS traffic passing across the network edge. You can use SSL as a VPN alternative, but only for web traffic. SSL is a viable alternative for web-based workloads but a poor general security option.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">RDP<\/strong>. The Remote Desktop Protocol (RDP) enables remote work connections without firewall conflicts. It&#8217;s a good alternative if you need to access remote devices for maintenance or training. However, RDP does not offer encrypted tunnels, making it less secure than a VPN passthrough.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">SD-WAN<\/strong>. Software-defined wide-area networks enable companies to create secure networks across many sites. Access controls and encryption transfer data securely without needing a standard VPN.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">Site-to-Site VPN<\/strong>. <a class=\"Link_inherit__NP_8V Link_medium__XEV_Z Link_noTextDecoration__GhdxD Link_aTagRoot__8wRP7 SharedArticleMarkdownComponents_link__aj_Vl\" href=\"https:\/\/nordlayer.com\/features\/site-to-site-vpn\/\">Site-to-Site VPNs<\/a> connect locations via an encrypted tunneling protocol. Internet gateways interact without firewall conflicts, and there is no need for individual clients. However, this VPN style often relies on inefficient hub-and-spoke routing, and configuration can be complex. Problems may also arise when securing cloud deployments.<\/div><\/li><li class=\"ListItem_item__IYMrj SharedArticleMarkdownComponents_listItem__cstSU\"><div><strong class=\"Markdown_strong__zgufl\">IAM<\/strong>. Identity and Access Management (IAM) partly replaces VPNs for cloud-based and hybrid networks. Admins can control who accesses sensitive assets, blocking unauthorized connections. With the correct security setup, there is no need for an extra VPN or a VPN passthrough.<\/div><\/li><\/ul><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">A VPN passthrough may be necessary to connect older devices or applications and allow remote work. But more advanced alternatives exist. Options include the tools above and modern VPN protocols that render passthroughs obsolete.<\/p><h2 id=\"go-beyond-a-vpn-passthrough-with-nordlayerx27s-security-solutions\" class=\"Heading_root__vbfeI Heading_heading30__45qwh Heading_primary__3VZgz Heading_medium__jmtkh SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading2__q1N0l SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">Go beyond a VPN passthrough with NordLayer&#8217;s security solutions<\/h2><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">One thing hasn&#8217;t changed\u2014<strong class=\"Markdown_strong__zgufl\">companies <em>must<\/em> secure connections without compromising firewall performance<\/strong>. As cyber threats mount, protecting data transfers is becoming more important than ever.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">NordLayer provides a flexible solution to secure remote connections and optimize efficiency. Our <a class=\"Link_inherit__NP_8V Link_medium__XEV_Z Link_noTextDecoration__GhdxD Link_aTagRoot__8wRP7 SharedArticleMarkdownComponents_link__aj_Vl\" href=\"https:\/\/nordlayer.com\/business-vpn\/\">business VPN<\/a> uses a variant of the WireGuard protocol, with no need to configure a VPN passthrough.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Secure gateways connect remote devices to on-premises and cloud assets. Strong encryption and IP address anonymization keep transfers completely secure. Access controls and Firewall-as-a-Service implement Zero Trust Network Access principles\u2014blocking unknown and unauthorized connections.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Forget about VPN passthrough issues. Our simple, scalable, secure solution protects data and streamlines security management. To find out more, <a class=\"Link_inherit__NP_8V Link_medium__XEV_Z Link_noTextDecoration__GhdxD Link_aTagRoot__8wRP7 SharedArticleMarkdownComponents_link__aj_Vl\" href=\"https:\/\/nordlayer.com\/contact-sales\/\">contact<\/a> the NordLayer team today.<\/p><h2 id=\"frequently-asked-questions\" class=\"Heading_root__vbfeI Heading_heading30__45qwh Heading_primary__3VZgz Heading_medium__jmtkh SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading2__q1N0l SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">Frequently asked questions<\/h2><h3 class=\"Heading_root__vbfeI Heading_heading20__p7mXS Heading_primary__3VZgz Heading_medium__jmtkh SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading3___q75_ SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">Should VPN passthrough be enabled?<\/h3><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">No. As a rule, companies should <strong class=\"Markdown_strong__zgufl\">minimize the need for a VPN passthrough<\/strong>.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Passthroughs rely on outdated VPN protocols and create serious security vulnerabilities. Instead, security teams should invest in a modern router or investigate secure remote access solutions.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Only enable a VPN passthrough if bypassing your firewall is necessary. You may need a point-to-point tunneling protocol (PPTP) passthrough for remote access or operating devices that rely on the PPTP VPN protocol.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">If possible, <strong class=\"Markdown_strong__zgufl\">update your setup to accommodate newer protocols<\/strong>. Only use the VPN passthrough as a temporary solution.<\/p><h3 class=\"Heading_root__vbfeI Heading_heading20__p7mXS Heading_primary__3VZgz Heading_medium__jmtkh SharedArticleMarkdownComponents_heading__EjJDp SharedArticleMarkdownComponents_heading3___q75_ SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"heading\">What happens if you turn off the VPN passthrough?<\/h3><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Turning off the VPN passthrough is rarely a problem.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Turning off a VPN passthrough <em>can<\/em> prevent encrypted data transfers through your network firewall. The VPN passthrough allows transfers across older VPN connection types. If the VPN passthrough fails or is not activated, the VPN connection will lapse.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">This can cause problems for remote workers who rely on their VPN client to establish outbound VPN connections. In some cases, users may backslide to less secure connection methods.<\/p><p class=\"Text_text__rSWMU SharedArticleMarkdownComponents_paragraph__rX5nt SharedArticleMarkdownComponents_horizontalSpacing__3J8kD\" data-testid=\"text\">Generally, <strong class=\"Markdown_strong__zgufl\">choosing to enable VPN passthrough is worse than turning it off.<\/strong> Advanced VPN protocols and <a class=\"Link_inherit__NP_8V Link_medium__XEV_Z Link_noTextDecoration__GhdxD Link_aTagRoot__8wRP7 SharedArticleMarkdownComponents_link__aj_Vl\" href=\"https:\/\/nordlayer.com\/identity-access-management\/\">tools like IAM<\/a> provide reliable connectivity and improve security.<\/p><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-9e34e91 elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"9e34e91\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[{&quot;_id&quot;:&quot;c4f773e&quot;,&quot;jet_parallax_layout_image&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_image_tablet&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_image_mobile&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_speed&quot;:{&quot;unit&quot;:&quot;%&quot;,&quot;size&quot;:50,&quot;sizes&quot;:[]},&quot;jet_parallax_layout_type&quot;:&quot;scroll&quot;,&quot;jet_parallax_layout_direction&quot;:&quot;1&quot;,&quot;jet_parallax_layout_fx_direction&quot;:null,&quot;jet_parallax_layout_z_index&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_x&quot;:50,&quot;jet_parallax_layout_bg_x_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_x_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y&quot;:50,&quot;jet_parallax_layout_bg_y_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size&quot;:&quot;auto&quot;,&quot;jet_parallax_layout_bg_size_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_animation_prop&quot;:&quot;transform&quot;,&quot;jet_parallax_layout_on&quot;:[&quot;desktop&quot;,&quot;tablet&quot;]}]}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-bb2c932\" data-id=\"bb2c932\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-b2e8410 elementor-widget elementor-widget-spacer\" data-id=\"b2e8410\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-2b27c32 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"2b27c32\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[]}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-cadc1df\" data-id=\"cadc1df\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e5436a1 elementor-widget elementor-widget-shortcode\" data-id=\"e5436a1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\">\n\t\t<div data-elementor-type=\"page\" data-elementor-id=\"63561\" class=\"elementor elementor-63561\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-1b6aa2c4 elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"1b6aa2c4\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[{&quot;_id&quot;:&quot;c4f773e&quot;,&quot;jet_parallax_layout_image&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_image_tablet&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_image_mobile&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_speed&quot;:{&quot;unit&quot;:&quot;%&quot;,&quot;size&quot;:50,&quot;sizes&quot;:[]},&quot;jet_parallax_layout_type&quot;:&quot;scroll&quot;,&quot;jet_parallax_layout_direction&quot;:&quot;1&quot;,&quot;jet_parallax_layout_fx_direction&quot;:null,&quot;jet_parallax_layout_z_index&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_x&quot;:50,&quot;jet_parallax_layout_bg_x_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_x_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y&quot;:50,&quot;jet_parallax_layout_bg_y_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size&quot;:&quot;auto&quot;,&quot;jet_parallax_layout_bg_size_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_animation_prop&quot;:&quot;transform&quot;,&quot;jet_parallax_layout_on&quot;:[&quot;desktop&quot;,&quot;tablet&quot;]}]}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-1b283ee5\" data-id=\"1b283ee5\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-4e466f1a elementor-widget elementor-widget-text-editor\" data-id=\"4e466f1a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>About NordLayer<br \/><\/strong>NordLayer is an adaptive network access security solution for modern businesses \u2013 from the world\u2019s most trusted cybersecurity brand, Nord Security.<\/p><p>The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t\n\t\t<div data-elementor-type=\"page\" data-elementor-id=\"18103\" class=\"elementor elementor-18103\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-748947f elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"748947f\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[{&quot;jet_parallax_layout_image&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;_id&quot;:&quot;c4f773e&quot;,&quot;jet_parallax_layout_image_tablet&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_image_mobile&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_speed&quot;:{&quot;unit&quot;:&quot;%&quot;,&quot;size&quot;:50,&quot;sizes&quot;:[]},&quot;jet_parallax_layout_type&quot;:&quot;scroll&quot;,&quot;jet_parallax_layout_direction&quot;:&quot;1&quot;,&quot;jet_parallax_layout_fx_direction&quot;:null,&quot;jet_parallax_layout_z_index&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_x&quot;:50,&quot;jet_parallax_layout_bg_x_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_x_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y&quot;:50,&quot;jet_parallax_layout_bg_y_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size&quot;:&quot;auto&quot;,&quot;jet_parallax_layout_bg_size_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_animation_prop&quot;:&quot;transform&quot;,&quot;jet_parallax_layout_on&quot;:[&quot;desktop&quot;,&quot;tablet&quot;]}]}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-7995c19\" data-id=\"7995c19\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-a437045 elementor-widget elementor-widget-image-box\" data-id=\"a437045\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image-box.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><div class=\"elementor-image-box-content\"><h3 class=\"elementor-image-box-title\">About Version 2 Digital<\/h3><p class=\"elementor-image-box-description\">Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.\n<br><br>\nThrough an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Summary: A VPN passthrough enables encrypted VPN traffi [&hellip;]<\/p>\n","protected":false},"author":149011790,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[973,1130,1273,61],"tags":[974,1132,1272],"class_list":["post-93051","post","type-post","status-publish","format-standard","hentry","category-nord-security","category-nordlayer","category-1273","category-press-release","tag-nord-security","tag-nordlayer","tag-1272"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>What is VPN passthrough and how does it work? - Version 2<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nordlayer.com\/blog\/vpn-passthrough\/\" \/>\n<meta property=\"og:locale\" content=\"zh_HK\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What is VPN passthrough and how does it work? - Version 2\" \/>\n<meta property=\"og:description\" content=\"Summary: A VPN passthrough enables encrypted VPN traffi [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nordlayer.com\/blog\/vpn-passthrough\/\" \/>\n<meta property=\"og:site_name\" content=\"Version 2\" \/>\n<meta property=\"article:published_time\" content=\"2024-11-05T09:14:05+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-11-20T08:49:18+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/content.nordlayer.com\/uploads\/large_What_is_VPN_Passthrough_and_How_Does_it_Work_560dfdf9b7.png\" \/>\n<meta name=\"author\" content=\"tracylamv2\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"tracylamv2\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9810\u8a08\u95b1\u8b80\u6642\u9593\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 \u5206\u9418\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/nordlayer.com\\\/blog\\\/vpn-passthrough\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/2024\\\/11\\\/what-is-vpn-passthrough-and-how-does-it-work\\\/\"},\"author\":{\"name\":\"tracylamv2\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#\\\/schema\\\/person\\\/011bc7c3731c930bcfeecd52fefb6365\"},\"headline\":\"What is VPN passthrough and how does it work?\",\"datePublished\":\"2024-11-05T09:14:05+00:00\",\"dateModified\":\"2024-11-20T08:49:18+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/2024\\\/11\\\/what-is-vpn-passthrough-and-how-does-it-work\\\/\"},\"wordCount\":1984,\"publisher\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/nordlayer.com\\\/blog\\\/vpn-passthrough\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/content.nordlayer.com\\\/uploads\\\/large_What_is_VPN_Passthrough_and_How_Does_it_Work_560dfdf9b7.png\",\"keywords\":[\"Nord Security\",\"NordLayer\",\"2024\"],\"articleSection\":[\"Nord Security\",\"NordLayer\",\"2024\",\"Press Release\"],\"inLanguage\":\"zh-HK\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/version-2.com\\\/2024\\\/11\\\/what-is-vpn-passthrough-and-how-does-it-work\\\/\",\"url\":\"https:\\\/\\\/nordlayer.com\\\/blog\\\/vpn-passthrough\\\/\",\"name\":\"What is VPN passthrough and how does it work? - Version 2\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/nordlayer.com\\\/blog\\\/vpn-passthrough\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/nordlayer.com\\\/blog\\\/vpn-passthrough\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/content.nordlayer.com\\\/uploads\\\/large_What_is_VPN_Passthrough_and_How_Does_it_Work_560dfdf9b7.png\",\"datePublished\":\"2024-11-05T09:14:05+00:00\",\"dateModified\":\"2024-11-20T08:49:18+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/nordlayer.com\\\/blog\\\/vpn-passthrough\\\/#breadcrumb\"},\"inLanguage\":\"zh-HK\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/nordlayer.com\\\/blog\\\/vpn-passthrough\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-HK\",\"@id\":\"https:\\\/\\\/nordlayer.com\\\/blog\\\/vpn-passthrough\\\/#primaryimage\",\"url\":\"https:\\\/\\\/content.nordlayer.com\\\/uploads\\\/large_What_is_VPN_Passthrough_and_How_Does_it_Work_560dfdf9b7.png\",\"contentUrl\":\"https:\\\/\\\/content.nordlayer.com\\\/uploads\\\/large_What_is_VPN_Passthrough_and_How_Does_it_Work_560dfdf9b7.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/nordlayer.com\\\/blog\\\/vpn-passthrough\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9801\",\"item\":\"https:\\\/\\\/version-2.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What is VPN passthrough and how does it work?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#website\",\"url\":\"https:\\\/\\\/version-2.com\\\/zh\\\/\",\"name\":\"Version 2\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/version-2.com\\\/zh\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"zh-HK\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#organization\",\"name\":\"Version 2\",\"url\":\"https:\\\/\\\/version-2.com\\\/zh\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-HK\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/version-2.com\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/v2-hk-hor-4.png?fit=1795%2C335&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/version-2.com\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/v2-hk-hor-4.png?fit=1795%2C335&ssl=1\",\"width\":1795,\"height\":335,\"caption\":\"Version 2\"},\"image\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#\\\/schema\\\/person\\\/011bc7c3731c930bcfeecd52fefb6365\",\"name\":\"tracylamv2\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-HK\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9d01d79cbfd8b2e878f5d701a362cc9fca466d33fec977b59706c23c1a2db15c?s=96&d=identicon&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9d01d79cbfd8b2e878f5d701a362cc9fca466d33fec977b59706c23c1a2db15c?s=96&d=identicon&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9d01d79cbfd8b2e878f5d701a362cc9fca466d33fec977b59706c23c1a2db15c?s=96&d=identicon&r=g\",\"caption\":\"tracylamv2\"},\"url\":\"https:\\\/\\\/version-2.com\\\/zh\\\/author\\\/tracylamv2\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What is VPN passthrough and how does it work? - Version 2","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nordlayer.com\/blog\/vpn-passthrough\/","og_locale":"zh_HK","og_type":"article","og_title":"What is VPN passthrough and how does it work? - Version 2","og_description":"Summary: A VPN passthrough enables encrypted VPN traffi [&hellip;]","og_url":"https:\/\/nordlayer.com\/blog\/vpn-passthrough\/","og_site_name":"Version 2","article_published_time":"2024-11-05T09:14:05+00:00","article_modified_time":"2024-11-20T08:49:18+00:00","og_image":[{"url":"https:\/\/content.nordlayer.com\/uploads\/large_What_is_VPN_Passthrough_and_How_Does_it_Work_560dfdf9b7.png","type":"","width":"","height":""}],"author":"tracylamv2","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"tracylamv2","\u9810\u8a08\u95b1\u8b80\u6642\u9593":"10 \u5206\u9418"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/nordlayer.com\/blog\/vpn-passthrough\/#article","isPartOf":{"@id":"https:\/\/version-2.com\/2024\/11\/what-is-vpn-passthrough-and-how-does-it-work\/"},"author":{"name":"tracylamv2","@id":"https:\/\/version-2.com\/zh\/#\/schema\/person\/011bc7c3731c930bcfeecd52fefb6365"},"headline":"What is VPN passthrough and how does it work?","datePublished":"2024-11-05T09:14:05+00:00","dateModified":"2024-11-20T08:49:18+00:00","mainEntityOfPage":{"@id":"https:\/\/version-2.com\/2024\/11\/what-is-vpn-passthrough-and-how-does-it-work\/"},"wordCount":1984,"publisher":{"@id":"https:\/\/version-2.com\/zh\/#organization"},"image":{"@id":"https:\/\/nordlayer.com\/blog\/vpn-passthrough\/#primaryimage"},"thumbnailUrl":"https:\/\/content.nordlayer.com\/uploads\/large_What_is_VPN_Passthrough_and_How_Does_it_Work_560dfdf9b7.png","keywords":["Nord Security","NordLayer","2024"],"articleSection":["Nord Security","NordLayer","2024","Press Release"],"inLanguage":"zh-HK"},{"@type":"WebPage","@id":"https:\/\/version-2.com\/2024\/11\/what-is-vpn-passthrough-and-how-does-it-work\/","url":"https:\/\/nordlayer.com\/blog\/vpn-passthrough\/","name":"What is VPN passthrough and how does it work? - Version 2","isPartOf":{"@id":"https:\/\/version-2.com\/zh\/#website"},"primaryImageOfPage":{"@id":"https:\/\/nordlayer.com\/blog\/vpn-passthrough\/#primaryimage"},"image":{"@id":"https:\/\/nordlayer.com\/blog\/vpn-passthrough\/#primaryimage"},"thumbnailUrl":"https:\/\/content.nordlayer.com\/uploads\/large_What_is_VPN_Passthrough_and_How_Does_it_Work_560dfdf9b7.png","datePublished":"2024-11-05T09:14:05+00:00","dateModified":"2024-11-20T08:49:18+00:00","breadcrumb":{"@id":"https:\/\/nordlayer.com\/blog\/vpn-passthrough\/#breadcrumb"},"inLanguage":"zh-HK","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nordlayer.com\/blog\/vpn-passthrough\/"]}]},{"@type":"ImageObject","inLanguage":"zh-HK","@id":"https:\/\/nordlayer.com\/blog\/vpn-passthrough\/#primaryimage","url":"https:\/\/content.nordlayer.com\/uploads\/large_What_is_VPN_Passthrough_and_How_Does_it_Work_560dfdf9b7.png","contentUrl":"https:\/\/content.nordlayer.com\/uploads\/large_What_is_VPN_Passthrough_and_How_Does_it_Work_560dfdf9b7.png"},{"@type":"BreadcrumbList","@id":"https:\/\/nordlayer.com\/blog\/vpn-passthrough\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9801","item":"https:\/\/version-2.com\/"},{"@type":"ListItem","position":2,"name":"What is VPN passthrough and how does it work?"}]},{"@type":"WebSite","@id":"https:\/\/version-2.com\/zh\/#website","url":"https:\/\/version-2.com\/zh\/","name":"Version 2","description":"","publisher":{"@id":"https:\/\/version-2.com\/zh\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/version-2.com\/zh\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"zh-HK"},{"@type":"Organization","@id":"https:\/\/version-2.com\/zh\/#organization","name":"Version 2","url":"https:\/\/version-2.com\/zh\/","logo":{"@type":"ImageObject","inLanguage":"zh-HK","@id":"https:\/\/version-2.com\/zh\/#\/schema\/logo\/image\/","url":"https:\/\/i0.wp.com\/version-2.com\/wp-content\/uploads\/2020\/08\/v2-hk-hor-4.png?fit=1795%2C335&ssl=1","contentUrl":"https:\/\/i0.wp.com\/version-2.com\/wp-content\/uploads\/2020\/08\/v2-hk-hor-4.png?fit=1795%2C335&ssl=1","width":1795,"height":335,"caption":"Version 2"},"image":{"@id":"https:\/\/version-2.com\/zh\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/version-2.com\/zh\/#\/schema\/person\/011bc7c3731c930bcfeecd52fefb6365","name":"tracylamv2","image":{"@type":"ImageObject","inLanguage":"zh-HK","@id":"https:\/\/secure.gravatar.com\/avatar\/9d01d79cbfd8b2e878f5d701a362cc9fca466d33fec977b59706c23c1a2db15c?s=96&d=identicon&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/9d01d79cbfd8b2e878f5d701a362cc9fca466d33fec977b59706c23c1a2db15c?s=96&d=identicon&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9d01d79cbfd8b2e878f5d701a362cc9fca466d33fec977b59706c23c1a2db15c?s=96&d=identicon&r=g","caption":"tracylamv2"},"url":"https:\/\/version-2.com\/zh\/author\/tracylamv2\/"}]}},"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pbQRKm-ocP","post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/posts\/93051","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/users\/149011790"}],"replies":[{"embeddable":true,"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/comments?post=93051"}],"version-history":[{"count":13,"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/posts\/93051\/revisions"}],"predecessor-version":[{"id":97675,"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/posts\/93051\/revisions\/97675"}],"wp:attachment":[{"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/media?parent=93051"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/categories?post=93051"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/tags?post=93051"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}