--- title: "Business VPN & connectivity | Avepto" canonical_url: "https://avepto.ch/en/productivity/vpn" last_updated: "2026-09-13T20:46:37.755Z" meta: description: "Managed virtual private network (VPN) and multi-factor authentication (MFA) for remote work, multiple sites and sensitive access." "og:description": "Managed virtual private network (VPN) and multi-factor authentication (MFA) for remote work, multiple sites and sensitive access." "og:title": "Business VPN & connectivity" "twitter:description": "Managed virtual private network (VPN) and multi-factor authentication (MFA) for remote work, multiple sites and sensitive access." "twitter:title": "Business VPN & connectivity" --- # Secure remote access, managed by Avepto. Your team reaches your files and applications from anywhere, over an encrypted connection. Avepto deploys, secures and monitors it, in your language. [Book a VPN audit](https://avepto.ch/en/contact) ![Fortinet](https://avepto.ch/_nuxt/fortinet.BVt7gKvL.svg)![ZeroTier](https://avepto.ch/_nuxt/zerotier.Cak0ep6q.svg)![Tailscale](https://avepto.ch/_nuxt/tailscale.K7EFJPoC.svg)![Cloudflare](https://avepto.ch/_nuxt/cloudflare.dUm6IxRa.svg) ![Fortinet](https://avepto.ch/_nuxt/fortinet.BVt7gKvL.svg)![ZeroTier](https://avepto.ch/_nuxt/zerotier.Cak0ep6q.svg)![Tailscale](https://avepto.ch/_nuxt/tailscale.K7EFJPoC.svg)![Cloudflare](https://avepto.ch/_nuxt/cloudflare.dUm6IxRa.svg) ![Fortinet](https://avepto.ch/_nuxt/fortinet.BVt7gKvL.svg)![ZeroTier](https://avepto.ch/_nuxt/zerotier.Cak0ep6q.svg)![Tailscale](https://avepto.ch/_nuxt/tailscale.K7EFJPoC.svg)![Cloudflare](https://avepto.ch/_nuxt/cloudflare.dUm6IxRa.svg) ![Fortinet](https://avepto.ch/_nuxt/fortinet.BVt7gKvL.svg)![ZeroTier](https://avepto.ch/_nuxt/zerotier.Cak0ep6q.svg)![Tailscale](https://avepto.ch/_nuxt/tailscale.K7EFJPoC.svg)![Cloudflare](https://avepto.ch/_nuxt/cloudflare.dUm6IxRa.svg) ![Fortinet](https://avepto.ch/_nuxt/fortinet.BVt7gKvL.svg)![ZeroTier](https://avepto.ch/_nuxt/zerotier.Cak0ep6q.svg)![Tailscale](https://avepto.ch/_nuxt/tailscale.K7EFJPoC.svg)![Cloudflare](https://avepto.ch/_nuxt/cloudflare.dUm6IxRa.svg) ![Fortinet](https://avepto.ch/_nuxt/fortinet.BVt7gKvL.svg)![ZeroTier](https://avepto.ch/_nuxt/zerotier.Cak0ep6q.svg)![Tailscale](https://avepto.ch/_nuxt/tailscale.K7EFJPoC.svg)![Cloudflare](https://avepto.ch/_nuxt/cloudflare.dUm6IxRa.svg) ![Fortinet](https://avepto.ch/_nuxt/fortinet.BVt7gKvL.svg)![ZeroTier](https://avepto.ch/_nuxt/zerotier.Cak0ep6q.svg)![Tailscale](https://avepto.ch/_nuxt/tailscale.K7EFJPoC.svg)![Cloudflare](https://avepto.ch/_nuxt/cloudflare.dUm6IxRa.svg) ![Fortinet](https://avepto.ch/_nuxt/fortinet.BVt7gKvL.svg)![ZeroTier](https://avepto.ch/_nuxt/zerotier.Cak0ep6q.svg)![Tailscale](https://avepto.ch/_nuxt/tailscale.K7EFJPoC.svg)![Cloudflare](https://avepto.ch/_nuxt/cloudflare.dUm6IxRa.svg) - Fortinet - ZeroTier - Tailscale - Cloudflare Operational risk ## Remote work shouldn’t open a hole in your infrastructure. Remote work arrived faster than the rules to govern it. Access followed the urgency of the moment, with no inventory and no monitoring, and what was meant to be temporary stayed in place. ### Shared passwords The same login is shared between several people, sometimes including former employees. ### Individual accounts with two-factor Each colleague has their own access, tied to their identity. Two-factor authentication blocks unauthorised attempts. ### Accesses never revoked Someone left six months ago, credentials still valid on the NAS and the ERP. ### Centralised, immediate revocation A departure cuts every access from a single console. No more ghost accounts. ### Unstable VPN A free solution installed under pressure, never documented or monitored. ### Managed solution, monitored 24/7 Remote access runs on dedicated infrastructure, continuously monitored, with automated alerts. ### Unclear permissions No one knows precisely who can access what, from which device. ### Access inventory, kept up to date A clear view shows who can access what, from which device, since when. Excessive permissions are spotted and corrected. ### Exposed server A port left open on the internet to 'fix something quickly', never closed again. ### No exposed ports, zero-trust access No service open on the internet anymore. Access goes through an authenticated tunnel, verified on every connection. ### No logs If a breach happens, there’s no way to tell who connected, when, or from where. ### Every access audited and retained Who logged in, when, from where, to what. Logs are retained and usable when you need them. Who this service is for ## Built for SMEs whose IT supports day-to-day operations. Hybrid SMEs with remote staff Part of the team in the office, the rest at home or on the road, several days a week. Multi-site Companies with several offices A Geneva HQ and a Lausanne or Fribourg branch sharing files and business apps. Domain Teams using an ERP, a NAS or in-house tools Accounting software, ERP, client folders, archives, hosted on a server or NAS. Mixed Mac and Windows together Leadership on Mac, workshop on Windows, iOS and Android phones, one consistent setup. Delegated Leaders who want controlled access without running it No in-house IT, or a single generalist who can’t cover everything. Sensitive Activities handling confidential data Law firms, fiduciaries, notaries, healthcare, Swiss FADP and client confidentiality. The VPN paradox ## Remote access managed, not just a VPN installed. Installing a VPN takes fifteen minutes. Keeping it secure over time is another job entirely. Staff turnover, credential theft, missed updates, compromised endpoints: remote access only stays reliable when it’s governed and monitored day after day. Here’s the difference, line by line. Dimension VPN installed alone Managed remote access Passwords Shared, sometimes posted on the wall Named accounts, MFA mandatory Permissions Everyone sees everything Least privilege, role-based groups Updates When someone remembers Scheduled and audited Logs None, or never read Sessions logged, alerts Documentation In one person’s head Delivered, kept current, transferable Staff offboarding Access sometimes never revoked Revocation < 24h, written procedure How it works ## One path. Fully encrypted. An end-to-end encrypted connection. No data travels in the clear, wherever your people work. Frequently asked ## VPN, explained simply. A question that’s not on this page? Bring it to the audit, that’s exactly what it’s for. ### What is secure remote access for an SME? Definition and scope of the service Secure remote access combines an encrypted tunnel, strong authentication, permissions and monitoring. It lets your team use company resources from anywhere, without exposing those resources to the internet. Avepto deploys and maintains this virtual private network (VPN) as a managed service for Swiss SMEs. ### Is a virtual private network (VPN) still useful with Microsoft 365? Microsoft 365 and internal resources Yes, as soon as you also rely on an internal server, a network-attached storage (NAS), on-prem business software or network printers. Microsoft 365 covers email and office suites in the cloud. The rest of your internal infrastructure still needs a dedicated remote access, which the VPN secures. ### Is Avepto’s VPN compatible with Mac and Windows? Compatibility with macOS, Windows and mobile Yes, equally. Avepto’s solutions run on macOS, Windows, Linux, iOS and Android. Your team uses the device they already have, with no hardware change. The same secure configuration covers desktops and mobile phones alike. ### Can you secure access to a network-attached storage (Synology NAS) with a VPN? NAS access and auditable permissions Yes, it’s one of the most common cases. The NAS sits behind the secure tunnel and is no longer exposed to the internet directly. Per-folder, per-user permissions stay preserved and auditable. Your team keeps opening their files just like at the office, from anywhere. ### Is multi-factor authentication (MFA) included in the VPN? Multi-factor authentication included by default Yes, by default and on every access. Multi-factor authentication (MFA) asks each employee to validate their connection via a mobile app, a one-time code or a hardware key, depending on your constraints. This second check stays active on every device, desktop and mobile alike. Continue exploring ## Related services, and the reading that goes with them. The services most often deployed alongside this one, and the field notes published by our specialists. Related services - [Network security Firewall, segmentation, network protection.](https://avepto.ch/en/cybersecurity/networks) - [Identity management MFA, SSO, access reviews.](https://avepto.ch/en/cybersecurity/identity) - [Microsoft 365 Mail, SharePoint and collaboration. Tenant set up and maintained.](https://avepto.ch/en/productivity/microsoft-365) - [Backups Backup and restore. Copies verified, not just stored.](https://avepto.ch/en/managed-it/backups) Next step ## Your remote access, under control. We meet to talk about remote access: your staff on the move, your offices to connect. We recommend the approach best suited to your organisation, no commitment.