Stonesoft Augmented VPN WITH MULTI-LINK TECHNOLOGY
Trends 1 2 3 4 Online production systems need to be available at all times and from any location Organizations are geographically distributed. Remote offices are dependent on connection to the main sites People use more and more Internet services. Critical business related traffic requires guaranteed bandwidth The costs of network connections are rising as organizations require more and more bandwidth MPLS is a costly solution
The right solution for you?! Do you require always-on connectivity?! Do you want to keep ISP costs under control?! Do you want to manage it all with low TCO?
Stonesoft Augmented VPN WHAT IS IT?
STONESOFT AVPN SOLUTION Suitability! For organizations that need to constantly stay connected with minimum ISP costs! Especially useful for geographically distributed organizations Stonesoft came out very well as it not only offered excellent performance but was the most cost-effective as it combines the operating system, the firewall and the loadbalancing solution all in one package. Director of Organization/IT, HAMBURG SÜD
Key benefits Easy Optimized Prioritized Economical Safe Add new multiple links without compromising usability or your budget Always available connectivity with maximized throughput Ensure that your critical business traffic comes first Cost-efficient centralized management & freedom to change your ISPs Enterprise-grade, AET-proof security
Easy Why is it easy? 1 2 3 4 Easy to setup no need for cumbersome BGP configuration You can combine any ISP links and add more whenever needed. Control all ISP connections centrally from Stonesoft Management Center Traffic flow continues even when an ISP link goes down, without the end users even noticing
Optimized Why is it optimized? 1 2 3 4 Utilize all the bandwidth you pay for! Combine lines from competing ISPs into one high-capacity tunnel Increase customer satisfaction by utilizing all the bandwidth No special hardware required, run the solution in physical appliances, virtual appliances or software
Prioritized Prioritized traffic 1 2 3 4 Ensure continuous flow for business related traffic Improve Internet performance with increased bandwidth Reserve sufficient QoS for VoIP calls and video conferencing Don t block non-productive services, just cut the bandwidth reserved for them
Economical Why is it economical? 1 Utilize all the bandwidth you pay for! MPLS 2 Don t keep expensive lines just as backup connections. $ 3 ISP independent solution feel free to change your providers anytime INITIAL COSTS avpn 4 Define and optimise your connections. Use e.g. satellite connections only when really needed # OF SITES
Safe Why is it safe? 1 2 3 4 Eliminates the ISP as a single point of failure Offers fault-tolerant VPN connections You can easily change the ISP if they re attacked, bankrupted etc Benefit from enterprise grade, AET-proof security with high availability
Proofpoints Easy Optimized Prioritized Economical Safe Our previous VPN solution was so complicated and difficult to use that our staff would not even try to connect to the company network from business trips. This was an unnecessary burden to our helpdesk. Now creating a connection via Stonesoft s VPN is so easy that all of our about hundred VPN users can do it effortlessly when travelling. Rauno Pihlajamäki, IT Manager of KWH Pipe By implementing the Stonesoft s solution, Plaza Construction can provide our clients with an immediate, tangible ROI derived from lower implementation costs, reduced communication costs and the elimination of networking downtime. Charles Smith, CIO, Plaza Construction The active load balancing, coupled with StoneGate s bandwidth management and Quality of Service (QoS) also allowed AIT to utilize other technologies that resulted in lower costs and improved network functionality Dan Chesler, Network Administrator for AIT Worldwide Logistics Stonesoft s products have significantly reduced connectivity costs, while enabling an increase in network performance, as well as an expansion of possibilities for remote access, M.Sc Daniele Faccioni, general manager of E- Services Prior to installing Stonesoft solutions, we already understood the importance of having a high-quality firewall in place, but after installing Stonesoft s products we gained the multi-link capability we were looking for. Tim Simpson, IT support manager, Dundee City Council
How does it work? BENEFITS FEATURE BY FEATURE
ISP load balancing! Eliminate easily your ISP(s) as single point of failure! Ensure that your services are always available! Increase the bandwidth by aggregating multiple lines together! Provide better service for users by always selecting the fastest link! No additional costs or configuration of specialized hardware or software
Server load balancing! Ensure the availability of business-critical services! Increase customer satisfaction! No third-party server loadbalancing solutions required! Save money by getting rid of separate load balancers FW Server Pool Monitoring Agent SERVER POOL
Multi-Link VPN! Provides an easy way to build secure and fault-tolerant office-to-office connections! Save money - expensive leased lines or MPLS networks are no longer needed! Migration can be done in phases FW Multiple ISP Connections Multiple ISP Connections Single ISP Connection FW FW! IPv6 is also supported
Bandwidth management! Reserve bandwidth for business traffic and limit the bandwidth for other traffic! Manage existing bandwidth more efficiently instead of buying more! Prioritize bandwidth and allow more to important users! Prioritize services that require QoS in order to work reliably (e.g., VoIP)! Use traffic classification to select preferred tunnels in Multi-Link VPN FW Quality of Service Low priority traffic Reserved bandwidth
DoS protection! Protects Web services from DoS/DDoS attacks! Does not disturb legitimate network traffic! Offers automatic anti-spoofing, SYN flood protection, strict connection tracking, limit concurrent connections per rule, automatic log compression BotNet Attack Legitimate User FW Stonesoft DoS Protection ORGANIZATION
Scalable solution! Add more Netlinks without having to interact with the ISPs! Add more Firewall/VPN nodes without changes in the rest of the networks! Replace cluster nodes with more powerful models without interrupting traffic! Add more servers into a server pool seamlessly
How to: Video
Other features! Clustering! Dynamic routing! IPsec VPN clients! Drag & drop VPN configuration! Efficient VPN troubleshooting tools! VPN and Netlink statistics
Thank you!