A network access system for detecting intrusions over a network. The network access system includes a computer having non-transitory memory for storing machine instructions that are to be executed by the computer. The machine instructions when executed by the computer implement the following functions: receive network traffic from one or more discrete virtual private network connections, store the network traffic in a repository, and monitor the network traffic for a malicious action.