VPN and virus protection?

Question

VPN

Good day! I still can't figure out whether the VPN network limits the spread of viruses?
I now mean a VPN not for accessing the Internet, but for combining several work networks and / or providing remote access to employees.
I will describe everything in tasks ...
1) There are networks A and B, interconnected by a VPN tunnel, let it be, a strong OpenVPN. If a worm appears in network A, will it reach network B. Does VPN block any ports? Will the worm see the VPN as a normal network? Or does an attacker need to specifically write in the worm's code that they need to scan not only networks but also VPN connections?
2) There is a remote employee with his shitty computer. For example, he has some kind of BankMail Trojan that steals Bitcoins. I give him VPN access to connect remotely. Will this trojan cross over the VPN connection to my work network? Is there a way to grant VPN access to an employee? I see only one VPN option with forwarding one single RDP port. Well, further tables.

Share knowledge who understands the construction of VPN networks.

Answer 1

VPN does not restrict ports. To do this, there are firewalls everywhere, why should a VPN climb into someone else's garden?
VPN does not affect the spread of viruses in any way. It's not about viruses at all.
The following measures help against viruses (in that order of priority):
1. limited user rights on working computers and servers. This is generally the most important thing in the whole fight against viruses. The fulfillment of this condition will add 100500 points to the security of the network. And not execution will make all other gestures meaningless.
2. a properly configured corporate firewall (blocking everything except allowed traffic)
3. an updatable normal antivirus installed on all workstations and servers
4. anything you can think of in addition :-)

I see only one VPN option with forwarding one single RDP port

If RDP is not further restricted, then theoretically the virus will be able to penetrate the corporate network through it. It is necessary on the RDP server to prohibit the mapping of client disks to the server, prohibit the clipboard between the client PC and the remote one, cut off the user's hands :-)

Answer 2

Require an installed antivirus. Well, let him come not from his garbage dump, but from a clean virtual machine.

Answer 3

A VPN does not prevent the spread of a virus. The virus is prevented by a properly configured firewall and antivirus.

Answer 4

Does VPN restrict the spread of viruses?

No. A VPN is a regular network, it's just that it's not a physical medium that is used as a transport, but an existing network.
In general, in this regard, a VPN is no different from any other network, such as Ethernet.
Firewalls, OS security settings, user access rights, and specialized programs serve to combat viruses and malware and limit their spread.

Answer 5

VPN , as an organized network, is no different from just a LAN - it is in fact a large LAN (if we abstract from the mechanism of its construction) - what you limit will be limited :) allow only RDP and only on his computer