How to Choose Business Remote Access: VPN and ZTNA Types Explained
Disclosure: This site may contain affiliate links. We may receive a commission from qualifying transactions. Commercial relationships can create conflicts of interest. Learn more.
| VPN type | Typical pricing model | Possible use | Watch out for |
|---|---|---|---|
| Zero Trust / ZTNA platform | Per-user/month, tiered | Growing teams, remote-first, compliance needs | Setup complexity; may need IT support to configure |
| Business team plan (consumer VPN) | Per-seat/month or annual, cheaper | Small AU teams, contractors, travellers | Fewer access-control features; 'business' can just mean shared billing |
| Self-hosted / open-source VPN | Free software + your server costs | Technical teams wanting full control | You own all maintenance, patching and uptime |
| Site-to-site hardware VPN | Appliance cost + licensing | Offices linking fixed locations | Overkill and inflexible for mobile/remote workforces |
What a 'business VPN' actually means in 2026
The phrase covers wildly different products. At one end sit consumer VPN apps with a shared team dashboard bolted on; at the other, Zero Trust Network Access (ZTNA) platforms offering identity- and policy-based application access; the actual checks depend on configuration. For Australian teams — especially remote-first ones and people who travel — the right choice depends far more on how your people work than on raw connection speed.
First distinguish an internet-exit VPN from remote access to private business applications. Shared billing or an Australian IP address does not establish access control or compliance. Identify the applications, identities, devices and logging you need with your IT team before evaluating a VPN or ZTNA service. You can See the category guides for buying criteria. once you know which tier fits.
Selection criteria that actually matter
1. Access control vs. simple tunnelling
A network VPN may grant broad access if not constrained by segmentation and access policy. The risk depends on configuration, not whether staff work in an office. Look for granular, per-application access, device posture checks (is the laptop encrypted and patched?), and the ability to revoke a single user instantly when a contractor rolls off.
2. Logging and jurisdiction
For business use you often want connection audit logs for your own compliance, but you don't want the provider retaining unnecessary content data. Read the policy: distinguish operational logs (who connected, when) from traffic logs (what they did). Australian teams should also understand where the provider is headquartered and how that affects lawful access requests.
3. Australian and multi-region presence
If staff need to appear on an Australian IP for testing or accessing local services; an IP address alone does not establish compliance, confirm the provider has stable AU endpoints — not a single overloaded server. Travellers benefit from broad global coverage with consistent performance.
4. Device and OS coverage
Count every platform your team uses: Windows, macOS, Linux, iOS, Android, and increasingly ChromeOS. Check per-device or per-user seat limits so you're not surprised at renewal.
How pricing models work
- Per-user/month: most common for team and ZTNA plans. Predictable but scales linearly — budget for growth.
- Per-seat annual: cheaper unit cost, but you're committed. Only sensible once you've trialled the product.
- Self-hosted: the software is free, but factor in server hosting, someone's time to maintain it, and the security risk if patching slips.
- Appliance + licensing: hardware VPNs suit fixed offices, not mobile teams. Increasingly niche.
Many vendors advertise a headline monthly figure that only applies on a multi-year prepay. Always check the true renewal price before committing. See the category guides for buying criteria. and compare the annual vs. monthly maths for your headcount.
Red flags to avoid
- Vague 'military-grade encryption' claims with no detail on protocols or key management.
- 'No-logs' marketing that quietly excludes billing, connection and device metadata.
- Lifetime deals from unknown providers — VPN infrastructure has ongoing costs, and 'lifetime' often signals a business that won't be around to maintain servers.
- No documented process for onboarding/offboarding staff, which can leave unnecessary access active.
Who each option suits
A team plan, ZTNA platform, self-hosted VPN or site-to-site connection addresses different requirements. Assess actual features, permissions, patching responsibilities and total cost; none is automatically suitable based on headcount. Logging can help investigations but does not certify compliance. When you're ready, See the category guides for buying criteria..
This is general information, not legal or security-compliance advice — verify current terms, jurisdictions and features directly with each provider before purchasing.
Sources and further reading
These links support the specific topics noted below, not every statement on this page. No product testing or legal or security review is claimed.
- ASD's ACSC: public Wi-Fi and hotspots — VPNs as one layer, provider trust, HTTPS and public-network precautions.
- ASD's ACSC: security tips for travelling — Data minimisation, device security and checking destination laws; not border legal advice.
- ASD's ACSC: Using Virtual Private Networks (October 2021) — Remote-access controls, least privilege, MFA and logging; not a vendor ranking or current certification.