隨著網際網路的蓬勃發展，虛擬私人網路不但具備專線等級的安全性，而且透過使用網際網路，亦具備成本低的優點，個案公司在降低經營成本及提昇企業競爭能力的壓力下，面臨是否需使用虛擬私人網路技術，以取代既有的國際長途專線與跨國網路之管理問題。 本文即從虛擬私人網路的定義開始，探討其應用方式與種類，並進一步深入探討虛擬私人網路使用的技術，與實作上需要的網路安全技術，同時亦將相關ISO 27001的控制措施，及個案公司的營運特性等，一併納入規劃時的考量，同時運用網路規劃方法，規劃符合個案公司營運特性的虛擬私人網路建議方案。 接著本研究採用可行性分析的方式，來評估所提出的虛擬私人網路建議方案，以更深入的了解在技術面、管理面、法規面及經濟面的可行性。最後摘要說明分析的結果，並期望建議方案能解決個案公司的管理問題並達成降低成本的商業目的。With the proliferation of the Internet, security technologies on virtual private network (VPN) have developed to such a stage that it not only can rival with lease lines in security, but also has a strong edge in cost-effectiveness. This study focuses on “Company A”, and explores the feasibilities to switch from the existing leased lines to Internet-based VPN, with the aim of lowering its operating costs while maintaining its security requirements. This study sets out from the definition of VPN, explores its applications and varieties, and further investigates VPN technologies and security techniques required. ISO 27001 control measures and business characteristics are taken into accounts as well. Finally, an alternative solution specifically designed for Company A is proposed, based on the network planning method. Feasible study of the proposal is reported, evaluating factors from the technical, managerial, legal and economic dimensions. This study also provide analysis to justify the proposed solution against Company A's managerial goal of lowering its operational cost. Keywords: Virtual private network, SSL, VPN, network planning
