VSGate also authorizes access to network services based on the user's identity. Access to internal resources can be restricted based on the user's group. The diagram illustrates how data is tunneled. The remote PC on the Internet needs to send data to hosts on the corporate network. VSClient intercepts application data on the PC and transfers it through the encrypted and authenticated connection to VSGate, which decrypts, validates, and checks for proper authorization of the data before forwarding it to the hosts on the secure network.
Data originating from the corporate network travels the opposite route.