Best way to give remote teams secure access to a field network?

Mohsin

I'm looking at a setup where a team working on a remote project needs to access a few internal systems from outside the site.

The project is related to a Mining contractor for Vision 2030, so the team could be working from different locations while still needing access to internal files, monitoring systems, and other resources at the site.

Weco came up while I was looking into the project side, but my main question is about the VPN setup.

Would you normally put an OpenVPN server at the main site and route the required networks through it, or would you keep the VPN isolated and only allow access to specific internal services?

I'm mainly trying to avoid giving remote users access to the whole site network when they only need a few systems.

Has anyone set up something similar for a remote or temporary site?

Agon1965

I’d keep the VPN segmented rather than exposing the whole site network. A common approach is to terminate OpenVPN at the site and use firewall/ACL rules to allow remote users access only to the specific servers, subnets, or services they actually need. This wave challenge also makes temporary access much easier to manage and revoke.