resolves HAS 26

The product consists of any client software installed on a user device as well as any remote data processing on manufacturer infrastructure required for the product to function as expected.

A VPN can also be a product that provides access to a restricted-use logical computer network that is constructed from the system resources of a physical or virtual network, including cases where that product provides access from a restricted-use logical computer network to a public network.

Some VPN products also provide management capabilities to network administrators: user and group management, access control, logging and monitoring.

![Figure 4.3.1-1: A diagram illustrating an offsite device using a VPN client to encrypt traffic and send it through a public network, to a VPN server which decrypts the traffic](media/basic-consumer-vpn.png)