> For the complete documentation index, see [llms.txt](https://doc.engenius.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://doc.engenius.ai/esg-application-guide/highlight-features/client-vpn.md).

# Client VPN

Introduction

**Client VPN** refers to a virtual private network configuration that allows **remote workers using individual devices,** such as laptops or smartphone&#x73;**, to securely connect to corporate or personal networks over the internet.** This connection extends the network's security boundary to include remote users as if they were directly connected to the network's main hub(ESG) in the company. This setup is essential for enabling remote access to corporate resources, maintaining privacy, and ensuring data security over public and private networks.

{% hint style="info" %}
EnGenius Client VPN supports two types:&#x20;

* **IPSec Client VPN**: This method uses the IPSec protocol to secure communications across the internet.
* **SecuPoint Client VPN**: EnGenius offers a proprietary Client VPN solution leveraging the **SSL VPN** protocol to ensure secure, encrypted connections **in an easy way.**
  {% endhint %}

{% hint style="info" %}
Client VPN connections can only be established on the **primary active WAN**.
{% endhint %}

{% hint style="info" %}
Client VPN traffic can be **routed** through Site-to-Site VPN, including both **AutoVPN and other Non-EnGenius VPN.**
{% endhint %}

<figure><img src="/files/JP3HdnJkdsHard5pyIaD" alt=""><figcaption><p>Figure 1. Client VPN </p></figcaption></figure>

### **Key Benefits of Client VPNs**

* **Secure Remote Access**: Client VPNs are essential for providing secure access to corporate or personal networks from any location, **without requiring physical changes to the network infrastructure.** This ensures that remote work or access to sensitive information can be securely conducted, significantly reducing the risk of data breaches.
* **Data Encryption**: This setup encrypts data being transmitted over the internet, safeguarding sensitive information from potential interceptors and ensuring that private conversations and data exchanges remain confidential.
* **Privacy Enhancement**: By **masking IP addresses and location details,** Client VPNs enhance user privacy, making it challenging for third parties to track online activities or determine a user's physical location.
* **Network Scalability:** They enable networks to scale securely by seamlessly integrating remote users into the network's ecosystem, alleviating the need for cumbersome physical network expansions.

### **The Mechanism Behind EnGenius Client VPNs**

When a **user(remote worker)** enables a Client VPN, such as SecuPoint client VPN Tool or IPSec Client VPN, on their device, the VPN creates a virtual encrypted SSL VPN or IPSec tunnel through the internet to the main hub/Gateway (ESG.) This tunnel serves as a secure conduit for data transmission, protected from external threats and surveillance. **The user(VPN client) on the device manages connection protocols, such as SSLVPN or IPSec, and encryption, ensuring a robust security perimeter is maintained regardless of the user's remote location or the nature of the public network being used for internet access.**

### **Applications and Use Cases**

* **Remote Work**: Employees working from home or while traveling can access their company's network securely as if they were in the office, complete with access to shared files, applications, and internal systems.
* **Data Protection on Public Wi-Fi**: Users connecting to public Wi-Fi networks, known for their security vulnerabilities, can shield their activities and data from other users on the same network.
* **Global Connectivity**: For businesses with international teams or individuals in regions with internet restrictions, Client VPNs provide a means to access the internet and company resources freely and securely.

### **Conclusion**

The rise of Client VPNs is a big step forward for safe, flexible, and scalable network access, especially important today with more remote work and a focus on digital privacy. They bring a strong security layer to digital communication and network connections, emphasizing the importance of keeping data safe and private. **With Client VPNs, users can connect securely, from anywhere at any time.**

## Configuring ESG for Client VPN

On the **CONFIGURE > Gateway > Client VPN** page, users can configure two types of Client VPN on the ESG:

* SecuPoint SSLVPN.&#x20;

  For detailed configuration, please refer to the [link](/esg-application-guide/highlight-features/client-vpn/engenius-secupoint-sslvpn-client-tool.md#how-to-enable-esg-secupoint-sslvpn).
* &#x20;IPSec VPN.

  For detailed configuration, please refer to the[ link](/esg-application-guide/highlight-features/client-vpn/ipsec-client-vpn.md#how-to-confiugre-esg-ipsec-client-vpn).

<figure><img src="/files/XGK9NM2MVHjuUGRZVUzo" alt=""><figcaption><p>Figure 2. Client VPN</p></figcaption></figure>

## Client VPN Connections

After configuring/enabling the client VPN and users starting to connect, it may be useful to see how many and which client devices are connected to your network. To see connected all client VPN devices, navigate to **MANAGE > Clients> VPN Client page.**

<figure><img src="/files/w6zBoSBxdEphBbqe5BKe" alt=""><figcaption><p>Figure 3. Client VPN Connections- <strong>MANAGE > Clients> VPN Client page.</strong></p></figcaption></figure>

Navigate to MANAGE > **Gateway page** and then select a gateway to click the **"Detail"** button **to view the IPSec or SecuPoint VPN client connection status.**

<figure><img src="/files/MGvNxixg3eGgNlCrr3iF" alt=""><figcaption><p>Figure 4. Client VPN Connections- <strong>MANAGE > Gateway > Details page</strong></p></figcaption></figure>

Go to **MANAGE > Gateway**, where you can monitor **the current number of SecuPoint VPN user connections** in the SecuPoint Users field for each gateway.

<figure><img src="/files/EO89y0QavLeXTRCW5jBH" alt=""><figcaption><p>Figure 5. Client VPN Connections- <strong>MANAGE > Gateway  page</strong></p></figcaption></figure>

## Additional Resources

For further reading and learning, consider exploring these resources:

* [EnGenius SecuPoint SSLVPN Tool](/esg-application-guide/highlight-features/client-vpn/engenius-secupoint-sslvpn-client-tool.md)&#x20;
* [IPSec Client VPN ](/esg-application-guide/highlight-features/client-vpn/ipsec-client-vpn.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://doc.engenius.ai/esg-application-guide/highlight-features/client-vpn.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
