

Industrial VPN Cloud Services Your tunnels don’t need to be PTP Leverage the power of the cloud Maximize flexibility and easily scalable VPN Challenges Looking for the best way to support your machines remotely and securely without travels Don’t have the time or knowledge to support a solution on your own Want to avoid to have “the talk” with all IT departments at end customers There are changes that you need to do in your customers’ network that you can’t control VPN Requirements (H&S) Remote Techs: Work from home, hotel and vacations 24/7 support was promised Treat the VPN connection as end customer VPN Compatible SW / HW Need some coordination from your own IT group Your central VPN gateway can sit on the edge of the network Or behind a firewall – IT needs to open firewall to allow VPN traffic through You can ask your IT to pass through the VPN traffic to a gateway behind it. VPN Requirements (PTP) At HUB/Host side: Your side of the tunnel can terminate at a VPN device, or another type of router (e.g.

(Usually open outbound) Easy to customize to use another port (e.g.

The end device will initiate the VPN (start the conversation) So nothing needs to be opened in-bound, just allow replies back “Push button initiation” makes this easy By default we use the standard VPN ports (UDP 500/4500). Can go through the customer’s network, wireless access point, have a direct connection, etc. VPN Requirements (PTP) At end customer side: Ultimate destination must be the Internet – via wired connection, wireless broadband, cellular, etc. MD5 / SHA-1 / SHA-256 / SHA-384 / SHA-512 HASH are “not meant” for security, but for ensuring that the data has not changed due to accidental corruption 7 Hashing: in order to protect data a hash value can be used to uniquely identify secret info, this is done through cryptographic hash functions.
#Set up mguard for vpn tunnel password#
Pre-Shared Keys Certs are “digital passports” that prove the identity Certs are digitally signed and unique Certs use X.509 – That is a universal PKI standard Free Certificate tool XCA Certs PSK is a password used in both peers PSK is not as secure as certs Less flexible in its useĮncryption: The process of encoding the info in such a way that only the person (or computer) with the key can decode it. VPN 3 Key Security Attributes: Authentication: Certificates vs.

Interconnectivity Productivity drives our business (try to do more with less) Almost everything is becoming networked SIMPLE AND EASY INTERNET: Routing, networking, Firewalls, VPNs, NAT, etc. Intro Remote access to industrial equipment is not a new invention Dial up Modems: Each machine had a modem.
#Set up mguard for vpn tunnel plus#
Plus customer has to wait till travel arranged ~$1000 per service trip + opportunity cost No matter how you do it, the goal is to provide support Costs Sending technicians/engineers on site Plane ticket Rental car Hotel Meals Comp day Intro How do you support your end customers? Car, train or plane to site Networking & Security | Mariam Coladonato| | Dec 2014 Mercier Project Engineer PHOENIX CONTACT, USA
