Access review
We review applications, users, devices and the existing gateway. We identify data and systems that should be available outside the office.
VPN
We give employees VPN access to selected business applications and resources. We configure accounts, access rules and supported ways to add extra sign-in verification. We check connections on users’ devices and the procedure for removing access.
Trusted by
Accounts staff need their finance application; sales staff need information in a business system. We agree which resources require a connection to the company network and who needs them. We then configure access for the appropriate groups. Establishing a tunnel should not give a user access to the entire network.
This page focuses on employee connections. Links between offices and wider network design are covered in a separate scope.
TÜV NORD Polska has certified Virtline’s information security management system to PN-EN ISO/IEC 27001:2023-08. The published certificate states its scope and validity.
View Virtline’s certificateWe first configure and check access for a selected group. Further users follow under the agreed rollout arrangements.
We review applications, users, devices and the existing gateway. We identify data and systems that should be available outside the office.
We select profiles, sign-in methods and network rules. Equipment, licensing requirements and change dates are agreed.
We enable access on agreed devices. With users, we test required applications, permission restrictions and error handling.
We provide instructions, test results and reporting arrangements. We agree access granting and removal, updates and ongoing support.
Practical scope
We check successful sign-in, access restrictions and agreed failure scenarios.
User groups, assigned resources and permission-approval arrangements. Administrator and supplier access and exceptions are documented separately.
Gateway and user-device settings for the chosen technology. We check MFA support, certificates and required licences.
Checks in agreed applications and denied access outside the user’s role. We document results, connection issues and items requiring separate improvement.
How to start the VPN, report problems and remove access. We agree gateway updates, account reviews and the scope of event records.
An encrypted tunnel does not replace computer updates, account protection or data backups. Additional device-health checks depend on the solution and configuration. We agree which traffic uses the VPN and which events are recorded before deployment.
Yes. We review the gateway, updates, accounts and access rules. We identify possible changes, product limitations and any licensing requirements. Replacing the device is not a mandatory outcome of the review.
No. It depends on how the application is provided and your access policy. We distinguish internal-resource connections from cloud-service access to avoid unnecessary complications.
We check specific operating systems, client versions and gateway capabilities. We test agreed devices. If a sign-in method or device check is unsupported, we explain the limitations and options.
We agree which account, certificate or profile needs blocking and who approves the change. We check removal in the defined scope, including handling active sessions. Changing a password alone does not replace a review of other permissions.
Tell us how many employees connect remotely, which applications they use and whether you already have a VPN gateway. Describe current problems. Do not send configuration containing passwords or keys.
Discuss VPN access