Affordable solutions for Secure Remote Access to your existing internal information systems utilizing advanced web-enabled technology combined with the highest level of security available to protect the integrity of your data.
- Secure Remote Access from any web-enabled device
- Overlays existing IS Systems creating "managed access interface"
with no expensive modification to existing hardware and software
- Data security that exceeds HIPAA Standards
- Controlled access for authorized users
- Budget Sensitive with demonstrable ROI
A versatile secure remote access solution that provides both a traditional PPTP or IPSec/L2TP based VPN and the more cost effective SSL, browser based, VPN for ultimate flexibility of “anytime, anyplace, any device” access.
VPNs Defined
A traditional VPN provides an extension of an enterprise’s local area network to remote locations by utilizing the Public Internet network. To maintain security and privacy a virtual “tunnel” is established within the Internet from the remote workstation to the enterprises local area network. This tunnel is enabled through special software installed on the client workstation and a special server on the enterprise network. The tunnel is kept private by highly encrypting the data with a secret code known only to the remote workstation and the enterprise’s VPN server. Before the tunnel can be established the remote workstation must authenticate to the enterprise VPN server to assure that only authorized personnel are allowed to connect. The remote workstation acts like it is locally connected to the enterprises local area network so most applications work just like they do internally if the appropriate application software has been installed on the remote workstation.
The newer SSL, browser based VPN depends on using the remote workstation’s Internet browser only without establishing a tunnel. There is no special VPN software installed on the remote workstation. A remote workstation contacts a special enterprise VPN server like the SRA Advance and authenticates in a similar way to the traditional VPN. If successful in the authentication then packets of information begin flowing between the remote workstation’s browser and the enterprise’s VPN server. These packets are all highly encrypted using SSL technology deployed within the Internet browser so security and privacy is maintained.
Because there is no special software needed on the remote workstation the remote access to applications becomes much easier to accomplish on a much wider range of computers and devices that have some type of connection to the Internet. The Internet browsers on virtually all typical public and private computers, kiosks stations, PDAs and many cell phones are usually capable of utilizing SSL technology for secured transmission of data.
Security
- Hardened network appliance
- Based on SSL: the Internet's most widely used security protocol
- Proxy prevents direct connections to your network
- Granular access control down to the user, group, application, and URL
- Kiosk security features
- Strong encryption standards
Flexible Remote Access
An efficient remote access solution needs to provide the capability for a remote user to connect regardless of which computer they are at or where they may be located. The SSL, browser based VPN solution requires only that the computer, PDA, cell phone, or kiosk be connected to the Internet by any means and have a common internet browser with SSL capability installed. The remote user simply directs the browser to a pre-configured enterprise web portal page and select the Login button. The browser is then placed into SSL mode which securely encrypts all data sent to and received from the enterprise web portal. The user is challenged to authenticate with their UserID and Password. Additional strong authentication can be optionally added such as the RSA SecurID Passcode from a physical, key chain device the remote user carries with them. This access is generally available even when the remote user is behind a firewall or at a public Internet Workstation or Kiosk.
Existing Legacy Application Access
Usually the existing enterprises various information systems do not require any upgrade or modifications to enable remote access with SRA Advance. They do need to be accessible from the enterprise’s network. If an existing application cannot be displayed in a browser then an optional emulation software can be provided to enable secure remote access to that legacy application via the SSL, browser based VPN
Because SRA Advance also includes a traditional VPN server an existing legacy application’s client software can still be used remotely should the emulation, browser based access not be adequate. This flexibility is provided in the SRA Advance however for maximum access flexibility and minimal end-user support the SSL, browser based VPN should be the primary approach.
Personalized, Single Application Click, Web Portals based on User
Based on the users authentication at the initial web portal screen, various subsequent customized application screens can be displayed. This minimizes an end-users confusion regarding which applications they need and also provides a method to enable a single remote sign-on to applications where appropriate.
Lower Support Costs
- No distribution or management of VPN clients
- Easy solution for end users means fewer support calls
- Single, centralized policy management interface
- Seamless integration with directories and security infrastructure
- Virtual Host based authentication
- Scalable Technology Platform
- Optional InteleMed managed services for user management, managed directory, and 24 X 7 helpdesk
Additional included Features
- Scalable, multi-layer, stateful inspection firewall and web proxy server
- Dynamic packet filtering
- Smart application filtering for e-mail, streaming media, and Internet content-aware filters
- Secure Network Address Translation (NAT)
- Internet content filtering
- High performance Web Caching to accelerate Web traffic and prioritize bandwidth by group, application, site, and content type
- Intrusion detection
- System Hardening
- Advanced authentication
- Policy rules for access by user, group, application, content type, schedule, and destination
- Software Development Kit (SDK)
- H.323 standards based Gatekeeper interface to support virtual conferencing applications.
- Broad application support via dozens of predefined protocols and software clients
- Integration with Active Directory
- Distributed and hierarchical cache load balancing across servers with the Cache Array Routing Protocol (CARP)
- Rich administration tools for powerful remote management, including detailed logging, alerts, and reporting
|
