Skip Navigation

Site-to-Site VPNs at Johns Hopkins

Remote access for individual users is provided to Hopkins affiliates by JHPulse, which is available online through the enterprise portal.  In contrast, site-to-site VPNs allow remote offices, networks, or groups of computers establish secure connections to selected networks or computers within the Johns Hopkins internal network.  Two types of site-to-site VPNs are available and described below.  A side-by-side comparison chart is also available to help customers determine which type of VPN they need.

Site-to-Site VPN (STS)

*Previously known as Business-to-Business (B2B)

A Site-to-Site VPN (STS) typically provides secure communications between Johns Hopkins internal network devices and business partners or vendors.  An example of the need for a B2B VPN would be the manufacturer or vendor of network enabled hospital equipment (such as an MRI or CT scanner) who needs direct access to their devices via the internet in order to provide support and maintenance.  STS VPN network access is strictly controlled to provide access only to specific devices or groups of devices.  It does not provide internet access or unlimited access to Johns Hopkins internal networks.  A general diagram of a business-to-business VPN is available here.


$2,500 one-time setup fee
$1000 annual maintenance fee

If you would like to request a new B2B VPN, please download and complete the STSVPN Request Form.  This form must be filled out in its entirety, including cost center, before work can begin on the new VPN.  Please submit the completed form to, and include the name of the vendor who is requesting the new VPN in your email.  A network security engineer will contact you to review and confirm your request.  If you have questions or need additional information, please contact

NOTE:  Please allow 10 business days for configuration and testing before your requested activation date.

Small Office-Home Office VPN (SOHO)

A Small Office-Home Office VPN (SOHO) provides a block of internal Johns Hopkins network addresses to a remote office.  SOHO VPN connections allow internet access and unlimited access to other Johns Hopkins internal networks.  For more information about SOHO VPNs, please contact

Vendor Owned and Managed Devices or Vendor Network Connections

Many applications and devices used at Johns Hopkins are supported by vendors.  In most cases this support can be provided using existing Johns Hopkins Internet connections, usually over a B2B VPN or via JHPulse for added security.  In a few cases, the vendor requires a dedicated connection and/or dedicated hardware.  We strongly discourage this approach, because IT@Hopkins has very little ability to insure the health of these solutions.  We are also unable to do much to help resolve any problems that may occur with the solution.
In order provide network connectivity, space and power in a data center for any physical devices and basic security, there is a monthly fee that must be paid by the Johns Hopkins team or individuals responsible for the vendor support setup. This monthly fee is in addition to any fees that must be paid to the vendor. If you have questions or need additional information, please contact