Virtual Private Networks (VPN) establish secure connections between distant networks. For the users of those networks the distance is widely transparent - they use servers of the remote network as if they were located in the local network.

There are numerous variants of VPNs such as dedicated leased lines or Internet-based solutions. Especially the latter solutions are of great interest since they cause the least costs compared to other solutions. The technical infrastructure of the Internet is well established and provides for a high data performance without problems. Especially one aspect that is very important in conjunction with the Internet has to be taken into account - security and confidentiality of the transmitted data.

Architecture of Internet-based VPNs

Modern VPNs use the standard protocol IPSec. It acts as the basis for interoperability between VPN-components of different manufacturers. IPSec offers the opportunity to automatically encrypt and tunnel the complete data flow to be sent over public networks.

At the conception of VPNs different components have to be considered. A secured connection could be established between two networks as well as between a network and a single remote computer. The following figure depicts this scenario.

Which requirements do you have with regard to security and confidentiality for the transferred data? How should your field staff access to your network? NOVOSEC supports you with the conception and realisation of your VPN and the appropriate security mechanisms and policies. We find the best solution for your corporate VPN.

Administration

In order to assure a high level of security the administration has to master some complex challenges. According to the corporate security policy user accounts have to be administered, users must be authenticated and access control rules have to be set up. Good bases are standard PKIs (X.509) with existing mechanisms for registration, key management and more. This guarantees a high level of security and interoperability.