SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/tech-vpn-protection-boundary

Where does a remote-access VPN tunnel's protection end?

Its tunnel protects traffic only between the client and VPN gateway.

Start playing free

  1. At the VPN gateway ✔
  2. At every internet server
  3. Inside every stored file

Why: A VPN encrypts and authenticates traffic across its tunnel. Communications beyond the gateway and data stored on the client need their own protections.

Huh, didn't know that: A VPN does not automatically make a user anonymous to the VPN provider or destination service.

The dad joke
The VPN tunnel ended at the gateway because even tunnels have exits.
Like this card?
Play the game

References

Answer: At the VPN gateway. A VPN encrypts and authenticates traffic across its tunnel. Communications beyond the gateway and data stored on the client need their own protections.

  1. NIST SP 800-46 Rev. 2, Guide to Enterprise Telework, Remote Access, and BYOD Security nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-46r2.pdf
    they do not provide any protection for the communications between the VPN gateway and internal resources
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyWhat happens to ordinary internet traffic during split tunneling?Security & PrivacyWhich information commonly drives a basic firewall ruleset?Security & PrivacyWhich three goals form the CIA triad?

That's stuff everyone should know.