Changes

However, larger organizations now often have people needing to access the intranet remotely.  To accomplish this, an encrypted "tunnel," known as a virtual private network, is established between the remote client and a VPN concentrator within the intranet.  The remote client's connection is then piped across the internet in an encrypted stream, and released into the intranet.  The remote device then virtual becomes a part of the physical network.

However, larger organizations now often have people needing to access the intranet remotely.  To accomplish this, an encrypted "tunnel," known as a virtual private network, is established between the remote client and a VPN concentrator within the intranet.  The remote client's connection is then piped across the internet in an encrypted stream, and released into the intranet.  The remote device then virtual becomes a part of the physical network.

Since an intranet is by definition a self-reliant network, it will typically have its own DNS server, so that users can brows websites using domain names as they would on the public internet. They will also sometimes use the [[HyperText Transfer Protocol Secure|HTTPS]] protocol to encrypt communication using TLS.<ref name="techterms.com">https://techterms.com/definition/intranet</ref>  However, most intranets will run their own certificate authority and use self-signed certificates, which many argue is an inferior form of security.

Since an intranet is by definition a self-reliant network, it will typically have its own [[Domain name|DNS]] server, so that users can brows websites using domain names as they would on the public internet. They will also sometimes use the [[HyperText Transfer Protocol Secure|HTTPS]] protocol to encrypt communication using TLS.<ref name="techterms.com">https://techterms.com/definition/intranet</ref>  However, most intranets will run their own certificate authority and use self-signed certificates, which many argue is an inferior form of security.

Intranets are also usually connected through a firewall to the internet.  This means that users can access both restricted resources hosted on the intranet, and public resources on the internet.  This offers excellent convenience, but since the intranet is in contact with the internet, it offers an attack surface to everyone.  If an attacker manages to gain access to the intranet, they are essentially become an inherently trusted member of the intranet, with full access to everything which should have been secure.  To help combat this, Intranets are now often configured with some internal security controls and detection systems.

Intranets are also usually connected through a firewall to the internet.  This means that users can access both restricted resources hosted on the intranet, and public resources on the internet.  This offers excellent convenience, but since the intranet is in contact with the internet, it offers an attack surface to everyone.  If an attacker manages to gain access to the intranet, they are essentially become an inherently trusted member of the intranet, with full access to everything which should have been secure.  To help combat this, Intranets are now often configured with some internal security controls and detection systems.