This session covers the design principles associated with the deployment of Group Encrypted Transport (GET) VPNs. A brief overview covers the protocols (GDOI and COOP) and state machines associated with group members and key servers. Best practices are emphasized for redundancy, scalability, manageability, and network performance. Discussion also covers various deployment scenarios. Knowledge of GET VPN architecture is highly recommended as a prerequisite.