CZ
Home > Technologies > Kernun VPN Access
Kernun VPN Access
We are introducing quick, simple and secure remote connection to your company private network.
Regardless of where you are, you may share data and important information that you need for your business meeting or for your travel plans. You can also make communication between branches easier!
Virtual private network
Kernun VPN Access is an appliance where you can create secure and encoded tunnels between branches. It may also be used by travelling clients to access their private network remotely. It contains a firewall and it is compatible with all devices compliant with the IPSec and OpenVPN standards.
Kernun VPN Access makes transfer of secure data easier.
Transparent interconnection between networks
Kernun VPN Access technology provides safe interconnection of geographically distant computer networks. This interconnection creates a robust "virtual private network", within which each user may share all documents, databases, disk space and also other resources, regardless of the where the data are physically stored. This solution is perfectly transparent and offers many advantages to all end users.
Kernun VPN Access also enables you to access the inner network securely from one computer, which is mainly appreciated by managers and by travelling employees. Electronic email, databases, files, printers, and other sources included in the internal network will be available to you from anywhere. All you need is one portable computer and connection to the Internet. The rest is done by Kernun VPN Access.
Supported technologies
Kernun VPN Access supports widely used protocols that are used during the creation of private networks, such as IPSec, OpenVPN (SSL based VPN) and PPTP. Thanks to this you may use any operating system and still get connected.
What are the advantages of Kernun VPN Access?
- Connection from anywhere, flexible control of connection for mobile clients, connection accounting.
- Secure connection is realized through secure certificates, using typical standards X.509 and strong encoding algorithms.
- The speed of encoding has virtually no effect on the transfer speed.
- Transparency users are part of one company network.
- Versatility suitable for small and large networks.
- Availability support of redundant VPN tunnels as a backup option and load distribution of the line.
- Compatible with all devices compliant with the IPSec and OpenVPN standards
- Utilization of advantages of both technologies IPSec and SSL VPN
- Support of dynamically assigned IP addresses
- Transparent and secure interconnection of branches, easy control of connections between branches.
- Modern and sophisticated firewall
- Efficient use of investment elements and management elements
- VPN client for a variety of OS platforms.
Standard components
VPN server
Virtual Private Networks are absolutely necessary in many organizations. For example, they are necessary for travelling users, who must enter their system, or for partners who need access to business applications. They all require and need some method of transparent and secure channel.
Kernun Net Access is very flexible as far as the VPN setup is concerned. The supported protocols are Ipsec/IKE, PPTP, L2TP and OpenVPN; the last one is suitable for client connection to the network (client-network, point-to-multipoint), as well as for network interconnection (network-network, point-to-point). The possibilities are higher than possibilities of other protocols and at the same time it stays simple and open. A typical setup includes the utilization of X.509 certificates and modern coding/encoding methods to ensure authenticity, integrity and privacy.
Stateful packet inspection
All communication is checked by packet inspection tool. Modern and advanced stateful packet engine offers remote OS detection, bandwidth management and DoS protection combined with high level of both throughput and security. Moreover, bi-directional address translation, traffic normalization and detail connection logs are available.
Optional extensions
High Availability Option
This extension offers a guarantee, ensuring that the services will be available. This is possible because the product consists of two or more mutual back up hardware devices, a so-called hot stand-by cluster. It supports connections to more than one Internet provider and distribution of loads between them.
Managed services
It enables the customer to fully rely on qualified and guaranteed software maintenance services (repair and new version installations), as well as configuration modifications. Sophisticated Kernun technology eliminates problems caused by the human factor, which means, information absence along with professional knowledge of security issues.
Typical implementation
1. Travelling employees
How to enable travelling employees to access their mails, intranet, databases or information stored at the company server? The only thing you need is the connection to the Internet and you can create a virtual connection with the central server Kernun VPN Access by using your personal authorization certificate (VPN Client). To connect to the Internet, you may use a notebook computer or PC or you may use PDA and some types of smart phones.
Individually set authorization
Each connection is authenticated via a secure certificate. The certificate identifier is unique and uses an individual employee or client safety policy. Each employee may use a totally different range of authorization or access options.
2. Third party access
Do you need to allow a third party to access your inner network? For example the server administrator? But at the same time, you require only limited access, allowing only necessary elements to be available for the administration process. Like employee access, this connection is also authenticated through a unique secure certificate, based on which each client may use a totally individual and different scope of authorizations and accesses.
3. One individual company network
Kernun VPN Access ensures simple connections between local company branches. All branches access the Internet through the central point, where all communications and data exchange are collected and stored. The central point is protected by IDS against viruses and spam and offers filtering according to preset contents.