Connecting via VPN
Use this guide after your administrator has granted VPN module access and assigned you to an access policy.
Module availability
Section titled “Module availability”The VPN module requires module.vpn and a tenant license that includes VPN. If the menu is missing, contact your administrator.
Prerequisites
Section titled “Prerequisites”- VPN permission on your user or group
- MFA configured on your account
- An approved access policy for the target gateway
Connect
Section titled “Connect”-
Open VPN → overview (
/vpn). -
Choose the gateway (site / edge appliance) you need.
-
If the policy requires it, supply an associated Change Request ID.
-
Download the WireGuard profile or use your organization’s approved VPN client.
-
Activate the tunnel. Traffic to allowed assets routes through the VPN Hub; see Architecture Overview.
During a session
Section titled “During a session”- Sessions (
/vpn/sessions) — view active connections - Audit (
/vpn/audit) — review historical session metadata (administrators and auditors)