[[File:metadata_retrieve_001.png|400px]]
[[File:metadata_retrieve_002.png|400px]]
[[File:metadata_retrieve_003.png|400px]]
A VPN is a two way street. If the machine enters a network, machines on that network can chat. For this reason it is not possible to put a production web server of bxp into another clients network for security reasons. Instead a staging / intermediate server is required, controlled and security audited.
[[File:metadata_retrieve_004.png|400px]]
Now the files can be retrieved from the VPN and then presented securely to bxp through one of the secured interfaces.