---
title: About Network Applications
canonical: https://openvpn.net/cloud-docs/owner/networks/networks---applications/about-network-applications/
product: CloudConnexa Docs
description: A Network Application identifies a service that is reachable from a connected private network with a domain name. It can restrict access to only specific application protocols authorized to be used with that service. Applications serve as routes to the connected network and can be used in Access Groups to control who can access that Application.
keywords: Network Applications
---

# About Network Applications

A Network Application identifies a service that is reachable from a connected private network with a domain name. It can restrict access to only specific application protocols authorized to be used with that service. Applications serve as routes to the connected network and can be used in Access Groups to control who can access that Application.

The domain name associated with the Network Application can represent a private application or an internet application accessible via the connected private network. For a private application, it is required to [add a DNS Record](https://openvpn.net/cloud-docs/owner/settings/settings---dns/set-dns-records.md) to CloudConnexa, or if a [private DNS server is being used](https://openvpn.net/cloud-docs/owner/settings/settings---dns/set-private-dns-servers.md), a DNS entry needs to be made, mapping the application's domain name to the private IP address. For internet application domain names, there is no need to add a DNS record.

While a network can use Network Applications and IP Services, it is recommended to use only Network Applications whenever possible instead of IP Servives because with Applications, you can:

- Hide the routes to your private networks, even from clients connected to CloudConnexa
- Hide the IP address of the actual application server because the client receives an intermediary IP address from the WPC domain routing range.
- Reduce the possibility of lateral movement because private network routes are not exposed.
- Enforce least privilege policies and use zero trust principles, as all Applications need to be identified.

There are more advantages to using Network Applications and using them as routes. Refer [About Application Domain-Based Routing](https://openvpn.net/cloud-docs/owner/networks/networks---applications/about-application-domain-based-routing.md).

> **Note**
>
> For a Network that is not acting as an [Internet Gateway](https://openvpn.net/cloud-docs/owner/networks/networks---networks/make-a-network-act-as-an-internet-gateway.md), either an Application or an IP Service must be added.

Consider this example of a Network Application for a private application and a public application:

You want to connect a private network to CloudConnexa for all remote users to access a private web server running on 192.168.1.25, but allow only the Sales department to access Salesforce. You represent the private network by configuring a [Network](https://openvpn.net/cloud-docs/owner/networks/networks---networks/about-networks.md) and connecting it to CloudConnexa by using [Network Connectors](https://openvpn.net/cloud-docs/owner/networks/networks---connectors/about-network-connectors.md). You then add an Application named **webapp**, allow only HTTPS, and provide it a domain name of `web.server.local`. You then add another Application named **Salesforce**, allow only HTTPS, and provide it a domain name of `salesforce.com`. After adding [a DNS Record](https://openvpn.net/cloud-docs/owner/settings/settings---dns/set-dns-records.md) mapping web.server.local to 192.168.1.25, you configure an Access Group allowing access to **salesforce** and **webapp** to the User Group that has all the IT department members as its Users and another one to provide access to **webapp** for all other User Groups.

With the above configuration, all users can use only HTTPS and access `web.server.local` while web traffic to Salesforce for the Sales department enters CloudConnexa and exits out of the connected private network on its way to salesforce.com servers.

## Related Documents

- [Add an Application to a Network](https://openvpn.net/cloud-docs/owner/networks/networks---applications/add-an-application-to-a-network.md)
- [Manage Applications](https://openvpn.net/cloud-docs/owner/networks/networks---applications/list-search-edit-and-delete-network-applications.md)
- [About Networks](https://openvpn.net/cloud-docs/owner/networks/networks---networks/about-networks.md)
- [About Network Connectors](https://openvpn.net/cloud-docs/owner/networks/networks---connectors/about-network-connectors.md)
- [About Network Routes and IP Services](https://openvpn.net/cloud-docs/owner/networks/networks---ip-services/about-network-routes-and-ip-services.md)

---

Prev: [Networks - Applications](https://openvpn.net/cloud-docs/owner/networks/networks---applications.md)
Next: [About Application Domain-Based Routing](https://openvpn.net/cloud-docs/owner/networks/networks---applications/about-application-domain-based-routing.md)
Index: https://openvpn.net/cloud-docs/llms.txt