A layered framework strategy for deploying high assurance VPNs

Deploying VPNs (Virtual Private Networks), especially in a large-scale environment, requires much planning. Based on actual implementation experience, we propose a layered framework that can be used to distribute VPN deliverables among different workgroups. Despite the perception that a VPN is not a customizable solution, we conclude there is a broad range of VPN options available with corresponding trade-offs. This framework supports advanced planning to maximize trade-offs depending on individualized requirements.