ESA Telecom Applications Workshop Harwell 18 19 April 2012



Similar documents
Small, Medium and Large Businesses

Company presentation January 2013


November Defining the Value of MPLS VPNs

Securely linking your business to your customers Reliable Machine-to-Machine connectivity that won t break the bank

SCADA. Supervisory Control and Data Acquisition. How to monitor and control your business operation in the most cost-effective way.

Cisco Virtual Office Express

Based on the VoIP Example 1(Basic Configuration and Registration), we will introduce how to dial the VoIP call through an encrypted VPN tunnel.

Company presentation 2014

PowerLink Bandwidth Aggregation Redundant WAN Link and VPN Fail-Over Solutions

Network Services Internet VPN

Total solution for your network security. Provide policy-based firewall on scheduled time. Prevent many known DoS and DDoS attack

Tunnel Routing. Preface. Challenge

GUINEA GHANA LISBON LIBERIA SENEGAL EQUATORIAL GUINEA BARCELONA AFR-IX: INBOUND, OUTBOUND & WITHIN ATLANTIC AFRICA TELECOM SERVICES

How To Get A Better Price For Your Phone In Orange (European)

JAMII TELECOMMUNICATIONS LTD COMPANYPROFILE

MOBILITY & INTERCONNECTIVITY. Features SECURITY OF INFORMATION TECHNOLOGIES

White Paper: Virtual Leased Line

Janko Jager. * MPLS Multi Protocol Label Switching ** NLBd.d. Nova Ljubljanska banka d.d.

Cisco Virtual Office Flexibility and Productivity for the Remote Workforce

ISG50 Application Note Version 1.0 June, 2011

Objectives. Remote Connection Options. Teleworking. Connecting Teleworkers to the Corporate WAN. Providing Teleworker Services

Configuring IPSec VPN Tunnel between NetScreen Remote Client and RN300

AMERHIS GATEWAY FAMILY

WAN Traffic Management with PowerLink Pro100

Fortigate Features & Demo

Remote Access VPNs Performance Comparison between Windows Server 2003 and Fedora Core 6

Broadband connectivity via satellite for Africa

Technical papers Virtual private networks

How to access peers with different VPN through IPSec. Tunnel

Very soon. Satellite Internet Broadband Service

PRODUCTIVITY NETWORK, INC. Information Technology. VPN Overview

StoneGate Installation Guide

> BCM50e-BSR222 Secure Voice & Data for Small Businesses Teleworking Solution Technical Configuration Guide. Nortel BCM50e Nortel BSR222 Engineering

Cisco RV082 Dual WAN VPN Router Cisco Small Business Routers

Optimizing Networks for NASPI

Internet Privacy Options

Network Security. Protective and Dependable. 52 Network Security. UTM Content Security Gateway CS-2000

Intranet Security Solution

Management of Converging Networks

NAS 322 Connecting Your NAS to a VPN

ENTERPRISE CONNECTIVITY

SES Broadband. Internet connectivity via satellite for Africa

VPLS lies at the heart of our Next Generation Network approach to creating converged, simplified WANs.

Analyst presentation 2009

SpiderCloud E-RAN Security Overview

Efficient use of limited bandwidth and assuring response for mission-critical applications

RESPONSES TO CLARIFICATIONS REQUEST FOR PROPOSAL FOR FOR IMPLEMENTATION OF A HUB STATION AND BROADBAND VSAT WAN CONNECTIVITY ADB/ICB/CGSP/2013/0157

Spacenet Security over VSAT Networks

Enable VPN PPTP Server Function

Values Customer Satisfaction: It is our personal responsibility to satisfy and strive to exceed the expectations of our customers

IP Telephony Basics. Part of The Technology Overview Series for Small and Medium Businesses

Using IPsec VPN to provide communication between offices

Virtual Privacy vs. Real Security

Satellite Basics. Benefits of Satellite

Secured Voice over VPN Tunnel and QoS. Feature Paper

White Paper. Telenor VPN

How To Setup Cyberoam VPN Client to connect a Cyberoam for remote access using preshared key

ZyXEL offer more than just a product, we offer a solution. The Prestige DSL router family benefits providers and resellers enabling them to offer:

Virtual Private Networks Solutions for Secure Remote Access. White Paper

Extending Constant Connectivity to Any Location. How leading companies meet challenges with satellite communication technology

Huawei One Net Campus Network Solution

UDgateway VPN Q & A. Objective

Small Business Server Part 2

Remote Connectivity for mysap.com Solutions over the Internet Technical Specification

How To Improve The Humano-Uganda Satellite Network

ITC Corporate Connect

Network Security Guidelines. e-governance

Quidway SVN3000 Security Access Gateway

UBIqube unified Managed Services Solution MSActivator. Managed VoIP Module Q1-09

Table of Contents. 1 Overview 1-1 Introduction 1-1 Product Design 1-1 Appearance 1-2

Chapter 6 Configuring the SSL VPN Tunnel Client and Port Forwarding

Business Continuity White Paper

Local Area Networks (LANs) Blueprint (May 2012 Release)

Fundamentals of Network Security Graphic Symbols

Global Headquarters: 5 Speen Street Framingham, MA USA P F

Configuring IPsec VPN with a FortiGate and a Cisco ASA

HOW TO DEVELOP A STRATEGIC NETWORK PLAN

Appendix A: Configuring Firewalls for a VPN Server Running Windows Server 2003

Solutions Guide. Secure Remote Access. Allied Telesis provides comprehensive solutions for secure remote access.

WAN Optimization. Riverbed Steelhead Appliances

VPN. Date: 4/15/2004 By: Heena Patel

Colt IP VPN Services Colt Technology Services Group Limited. All rights reserved.

Secure Network Design: Designing a DMZ & VPN

Managed 4G LTE WAN: Provide Cost-Effective Wireless Broadband Service

Virtual Private Network and Remote Access

Enterprise Broadband Customer Service Description

Support of Windows Server 2012 The NCP Secure Enterprise VPN Server supports the Windows Server 2012 (64 bit) operating system.

Last Mile Keeper. Trusted maritime broadband connections

The Weakest Link : Securing large, complex, global Oracle ebusiness Suite solutions

High Availability Private Network (HAPN ) Network Upgrade Case Study

SkyVision is a leading global telecommunication solution provider to corporate markets, offering solutions that combine satellite service platforms

ECESSA. White Paper. Optimize Your Network on a Limited IT Budget

IPSec or SSL VPN? Copyright 2004 Juniper Networks, Inc. 1

Exam Name: Cisco Sales Associate Exam Exam Type: Cisco Exam Code: Doc Type: Q & A with Explanations Total Questions: 50

VoIP Telephony Network Security Considerations TR Title: VoIP Telephone Network Security Architectural Considerations

QoS VPN Router.

Why a Reverse Proxy with My Instant Communicator for mobiles??

IP Telephony Management

Recommended IP Telephony Architecture

Transcription:

ESA Telecom Applications Workshop Harwell 18 19 April 2012

Agenda Background SatFinAfrica Objectives Applications Money Transfer Automatic Telling Machines Virtual Private Networks The Customer Management Tool Conclusion

Background-1 SatADSL Mission Offer affordable broadband satellite service to Africa Target SoHos, SMEs and small branches of big corporations 3

Background-2 2009: Market study Use of satellite triple play services in emerging countries (ARTES 1) 2010: Pre-operations of Astra2Connect in Africa 2011: SatFinAfrica Pilot Project co-funded by ESA (ARTES-4) 2012: Incorporation of SatADSL as the operating spin-off of Sea&Space 4

Background-3: Business Model Technology Provider Newtec Hub Operator SES Satellite Operator Telesat Hub Connectivity Bandwidth Managed Service Provider African Distributors Corporate Services End users

Background-4: Satellite coverage T11N

Background-5: Sat3Play User Terminal

Background-6: Achievements To Date End-users: over 500 active terminals 15 Distributors spread over Mali, Nigeria, Cameroon, RDC, Congo Brazzaville, Gabon, Benin, Equatorial Guinea, Sierra Leone, Zimbawe, etc. Confidential 8

SatFinAfrica Objectives 1. Demonstrate the suitability of Sat3Play platform, originally designed for serving the consumer market, for reliable and secured financial institutions applications in emerging countries 2. Demonstrations and a Pilot Project in West Africa Financial institutions represent a fast growing market Their remote sites in West Africa are often too small to justify the investment in a classic corporate VSAT Need to develop a corporate version of Astra2Connect service, tailored to the need of financial institutions Pilot project to demonstrate the suitability of the new corporate service

SatFinAfrica Film

MTC User profile: Applications Money Transfer Money Transfer Companies (MTCs), and Microfinance Large number of branches spread all over the country Typical remote branch has a small LAN with 3-5 computers and telephones Need for affordable telecommunications service MTC User Applications: International/national financial applications based on client-server transactions Use of https protocol over the Internet Own Client-server banking applications (e.g. accounting) Use of https protocol over the Internet Server located in the MTC HQ connected by terrestrial means (fiber) to the Internet Telephony and Office Applications (Email, web browsing )

Applications Money Transfer Telstar T11N Remote MTC branch A Sat3Play terminal + Router Astra2Connect Platform Luxembourg ATA VoIP gateway Remote MTC branch B Applications: -Money Gram -Money Express -VoIP -E-mail -Internet browsing Router Sat3Play terminal + Router ATA VoIP gateway ATA VoIP gateway HQ in Africa

Applications Money Transfer Kbps 40 35 MTC Site 1 Traffic Average on 30 min (Kbps) 30 25 20 15 10 5 FW Best Effort RT Best Effort FW High Priority RT High Priority 0 High Priority channels (FW and RT) carries critical clientserver transactional traffic

Applications Money Transfer Kbps 60 MTC Site 2 Traffic Average on 30 min (Kbps) 50 40 30 20 10 FW Best Effort RT Best Effort FW High Priority RT High Priority 0 FW High Priority traffic is chopped at 50Kbps (data rate averaged on 30 minutes) by channel size limitation

Applications Automatic Telling Machines ATM User profile: Bank, Bank Consortium operating ATMs ATM User Applications: Connect ATMs in non-bank locations Authenticate and authorize cash transactions Closed Users Group (private IP addresses) VPN tunneling on the Internet

Applications Automatic Telling Machines Telstar T11N Remote ATM A Astra2Connect Platform Luxembourg Applications: -User identification / Authorization for cash delivery VPN Router Sat3Play terminal + Router Remote ATM B VPN Tunnel Sat3Play terminal + Router VPN Router HQ in Africa

Applications Virtual Private Networks VPN User profile: Banks, Insurances VPN User Applications: Connect remote branches to HQ Financial transactions and office applications Secure communications VPN IPsec tunneling (encrypted link) SSL encryption Remote sites in an Intranet

Applications VPN IPsec Tunneling

The Customer Management Tool - CMT Customer Management Tool (CMT) allows SatADSL and African Distributors to manage and monitor Terminals Monitoring: List of terminals per distributor View on volumes consumed and connections parameters Need for technical assistance to Distributors and end-users Export of consumption information to billing and invoicing system Manage: Management of terminal life cycle (activation, de-activation) Manage Users (Distributors, End-User, Administrators and Operators)

CMT Architectural Overview NOCSA, NOCOP, Distributor @ Front Office Server CMT DB Back Office Server Hub GW 1 A2C A2C Hub

CMT: Terminals Monitoring

Conclusions Solutions for the Financial applications developed, implemented and tested Money Transfer Pilot completed 33 sites in Africa Excellent results in terms of transactions served Issue with service availability in heavy rain conditions VPN Demonstration started, in April 2012 ATM pilot to start in October 2012 CMT development, testing and validation completed Distributors highly satisfied Thanks to SatFinAfrica the service is offered commercially by SatADSL

Thank You!

Back-up

Applications VPN SSL encryption Telstar T11N SSL VPN Remote Branch SatADSL Terminal SES Hub Luxembourg SSL VPN SSL VPN OpenVPN Client Software Remote Branch SatADSL Terminal SSL VPN HeadQuarter OpenVPN Client Software OpenVPN Server

Applications VPN Remote sites in Intranet Telstar T11N Remote Branch SatADSL Terminal Private IP Address SES Hub Luxembourg LAN Router Remote Branch SatADSL Terminal Private IP Address VPN Router VPN Tunnel Company Intranet based on Private IP Addresses HeadQuarter LAN Router Other Branch Other Branch Other Branch VPN Router