{"answer":"A site-to-site VPN is usually best when two networks need ongoing communication, such as a branch, plant or remote cabinet connecting to a central office. The routers maintain the tunnel automatically and devices can communicate according to fixed firewall rules without each user starting a VPN client.\n\nIndividual remote-access accounts are better for people who need temporary or personal access from different locations. They allow user-level credentials and easier revocation, but may be cumbersome for machine-to-machine traffic. Many deployments use both: a site-to-site tunnel for core systems and individual access for support staff. The design should minimise what each tunnel can reach and account for changing cellular public IPs or carrier-grade NAT.","approval_status":"draft_for_dave_review_pending_public_brain_audit","approved":false,"category":"VPN Security and Private Connectivity","category_slug":"vpn-security-and-private-connectivity","created_at":"2026-06-03T09:10:00+00:00","daily_publish_cap":2,"date_published":"2026-06-03","display_date":"2026-06-03","drip_status":"review_seed","freshness_note":"Confirm current model specifications, carrier compatibility, stock, pricing, firmware, warranty and commercial terms directly with Comset where they affect a decision.","id":"comset-qa-025","image_ids":["comset-product-network-management-system","comset-support-dyndns","comset-support-https-settings","comset-category-hero-009-vpn-security-and-private-connectivity"],"language":"en-AU","last_updated":"2026-06-03T09:10:00+00:00","matched_image_ids":["comset-product-network-management-system","comset-support-dyndns","comset-support-https-settings","comset-category-hero-009-vpn-security-and-private-connectivity"],"public_brain_verified":false,"publish_status":"review_preview","published_at":"2026-06-03T09:10:00+00:00","question":"When should a site use a site-to-site VPN rather than individual remote-access VPN accounts?","question_intent":"public_guidance","question_type":"decision","real_image_mapping_status":"mapped_to_approved_comset_catalogue_v1_6","site_key":"comset","slug":"when-should-a-site-use-a-site-to-site-vpn-rather-than-individual-remote-access-vpn-accounts","source":"Comset public website scrape and stable industrial-networking explanation","source_record_ids":["comset-source-0049","comset-source-0269","comset-source-0017","comset-source-0418"],"source_type":"client_source_plus_stable_explanatory_context","source_urls":["https://comset.com.au/faq","https://comset.com.au/product/5g-4g-router-with-dual-sim-cm950w","https://comset.com.au/product/remote-management-software"],"tenant_slug":"comset","updated_at":"2026-06-03T09:10:00+00:00"}