IPSEC

Introduction

Enterprise network requirements continue to evolve, especially at the edge of the network. This evolution is being driven by Enterprise IT managers addressing concerns such as security, intrusion detection, demand for newer access technologies, and convergence of data/voice/video applications while ensuring their users have access to the latest services like Virtual Private Networks (VPN), Multiservice Internetworking and Mobility. These new services such as Quality of Service (QoS), Security and Encryption place a heavy demand on system processing resources. Additionally, IT managers are increasingly partnering with Service Providers to take advantage of the opportunity to outsource the management of their networks perhaps to gain geographic coverage, or to simply take advantage of Service Provider capabilities which can decrease time to market for key applications.

This rise in the complexity of Branch Networking means it is not unusual for a typical deployment to have multiple devices, with each device specializing in a particular task. Unsurprisingly this situation increases the CAPEX costs for the branch network, in conjunction with a considerable rise in the total cost of ownership due to the diversity and quantity of these new devices, and the challenges associated with staff training and additional tools required for adequate device management.

Characteristics of IP SEC

Interoperability

Working with existing devices on network such as Firewalls, and intrusion detectors etc. allows in-situ upgrades as required.

Performance Optimized

Layers 3-7 services with QoS and bandwidth management to allow mission critical applications to maintain high performance with the appropriate level of service.

Remote Management & Monitoring

Ability to self install and configure is an excellent way to eliminate costly truck rolls and remote monitoring for in-service control of applications and there are remote non-disruptive deployment (in- situ upgrades) of new services.

Integrated Security

Stateful packet Firewall providing perimeter protection in a single chassis with a choice of additional firewalls. Intrusion prevention ability allow extensive VPN capability providing site to site VPN's, authentication, PKI, and wire speed encryption (DES, 3DES, & AES) using hardware accelerator.

Reliability

Reliability is a key deliverable for Episteme Soft surpassing currently available competitive solutions providing WAN connectivity. Designed with multiple processing engines and power supply, redundancy combined with the state-of-the-art management tools enable Episteme Soft to deliver unsurpassed reliability Branch Networks.

Capabilities Summary

High-end Connectivity

An Enterprise connects its branch office or a remote site with a WAN connection. A service provider provides a T1 or an E1 connection from the Internet to the branch office site. Majority of the networks today run TCP/IP protocols and the WAN connection is terminated in a device running OSPF.

Secure Servers

Behind the device running the dynamic routing protocol, several special purpose appliances are used to provide functionality such as firewall, encryption, intrusion detection device, content switching, content caching, directory assistance, voice termination and call manager, and storage.

Interconnection

A dynamic routing protocol such as BGP is used to connect the branch office to the two WAN connections so that the public networks are used for cost efficiencies and a fall back connection is maintained through the more expensive and more reliable private network.

Efficient

This Metro VPN is where a Service Provider actually provisions the solution with an Ethernet connection into the CPE, rather than traditional WAN connection. Thus providing a solution that provides significantly higher bandwidth for a very competitive price vs lower speed WAN connections.