LexWorkplace Product Team: I think our concern is more for when we're not using lexworkplace we would like to be secure but we can't work in Lexworkplace with a VPN on then we can't multitask between browsers or programs. So though I understand from Lexworkplace front it isn't necessary, my question is, are there any VPN's that would be compatible or no? Because as of right now we have tried two different VPN's and neither of them allow us to have it on and work in lexworkplace.

Samantha R.: There is no VPN that I'm aware of being compatible with LexWorkplace.

Broadly speaking, VPN's don't really help you be more secure, as nearly all (if not all) modern web-based applications are already encrypted. They're mostly used to spoof (fake) a connection from another country, to access geo-locked content (such as Netflix, etc.) They really have no practical business use, which is why you don't see businesses using them very often.

LexWorkplace Product Team: Thank you for your response. I understand the concept of the VPN and its functionality. I think the attorneys at our firm feel most comfortable when using one. Is there any workaround in lexworkplace that can change some of the settings for the VPN to able to work?

Samantha R.: Hi Samantha. I understand. For what it's worth, that's a false sense of security. In any case, there are currently no plans to develop VPN support, as it provides no additional security, and no other clients use this or have requested this feature.

LexWorkplace Product Team: This article asserts that a VPN provides some protection when using public wifi: https://nordvpn.com/blog/securing-public-wi-fi/

Many lawyers work on the go in airports and coffee shops where free wifi is available. I have always used a VPN when doing so. Are you saying a VPN provides no protection at all? Even if most apps and websites are encrypted, even a small opening for a hacker though an unencrypted app or site seems worth preventing. For example, it would be extremely important to prevent hackers from navigating to the locally-stored LW data, which may or may not be encrypted depending on the user.

Tim Atler: Hi Tim. Yes it does assert that. It also makes/sells VPN software.

Any web site you visit or web app you use that starts with "HTTPS" (and shows the lock icon in the address bar) is already encrypted, rendering VPN's redundant.

Most IT professionals know this, but unfortunately these VPN companies prey on people who don't know better.

LexWorkplace Product Team: I hear you. My concern is just those times when the VPN is not redundant because the user goes to an unencrypted site or uses an app that does not provide encryption. I have no idea how often that happens. If it is never or almost never, then it probably does not make sense to make LW compatible with VPNs. If it is more often than that, it might be a closer call given how much is at stake for law firms when it comes to protecting their data and their clients' data.

Tim Atler: Hi Tim. At this point, I'm confident that ALL major web-based applications use SSL (encryption, or HTTPS), and 99% (or better) of static web sites use SSL. This is why VPN's are needlessly redundant.

(Honestly, the only practical purpose people use them for is to spoof/fake their IP/country of origin).

FWIW, your firm is the only firm that has ever requested this, I think because very few law firms employ them.

Happy to talk about this more in detail--thanks Tim.

-Dennis

LexWorkplace Product Team: No need to discuss further, that was the information I was looking for. I actually did not request this feature but was just responding to the previous posts with my concerns. In any event, thanks for your prompt feedback and for all your hard work improving LW. Your attention to the user base is one of the best aspects of using LW and I really appreciate it!