SmartSat VPN Service is
a HIPAA/FIPS-140-2 certified client-server satellite application layer
VPN service enabling end-to-end encryption with individual user authentication.
Unlike SecurSat, SmartSat doesn't support bi-directional access (It's an
authenticated client-server application). Only authenticated individual
satellite Internet VPN remote users are granted access to resources behind
the SmartSat server, via a Triple DES or AES-256 encrypted VPN tunnel.
The SmartSat VPN solution
requires a Windows, Red Hat Linux or Solaris server to run. At the remote
sites, SmartSat secure VPN clients are loaded onto individual PCs. The
clients register with the secure server through a secure web interface
(SmartSat supports TCP/IP applications).
SmartSat Features
SmarSat VPN Service utilizes
AEP's SmartGate VPN solution which is designed to provide state-of-the-art
VPN services in remote access, site-to-site and extranet configurations.
The SmartSat VPN server contain four primary components -- a gateway that
provides authentication, encryption, access control, registration and administration;
a guard module that allows installation, configuration, integration, and
administrative control; an IPSec manager to handle site-to-site and client/server
IPSec tunneling; and a firewall.
The firewall can work with
(or replace) an existing firewall. If you already have a firewall, and
just want to implment VPN functionality, the SmartSat VPN server can be
placed in parallel to your existing firewall, connecting to the outside
and inside networks. Users coming in from the outside would be authenticated
and allowed appropriate access based on established control permissions.
No other traffic of any kind, in or out, would be permitted.
The SmartSat server have
two Ethernet interfaces, one to connect to your LAN and the other for your
Internet connection. The outside Ethernet will have one real routable address
assigned to it and will be able to communicate with the Internet; the inside
Ethernet can use any RFC 1918 non-routable address. Since SmartSat servers
involve application layer technology, they eliminate the need to worry
about Network Address Transation (NAT) issues. That allows users to traverse
firewalls without needing to make configuration changes.
If all physical connections
are ready, and if all network addresses are known, the SmartSat server
can be operational in less than an hour. Clients can be downloaded through
a browser, and registration can be handled on line.
SmartSat Benefits
SmartSat VPN Service offers:
-
a VPN framework for mutual authentication,
encryption, access control, audit logging and on-line user registration.
-
a patented application level
protocol that enables client-to-application connectivity, which eliminates
the need for technical end user configuration changes and troubleshooting
Network Address Translation (NAT) issues.
-
support for AES-256, Triple
DES, DES, and RC4 coupled with the ability to constantly change session
keys.
-
two-way and two-factor authentication
to verify the identity of users and systems. A number of authentication
systems are supported including RADIUS, LDAP and RSA SecurID.
-
an online registration system
that allows VPN deployment to end users in minutes. User IDs can be automatically
generated without administrative involvement.
SmartGate
Certifications
|
AEP Networks SmartSat
VPN over satellite solution
certified by Hughes Network Systems, the world's leading provider of satellite
broadband solutions. |
|
AES
Algorithm FIPS 197 List
|
AEP Networks' Products
Use NIST Validated Cryptographic Modules
|
|
Certified
by ICSA *
AEP Networks SSL VPN
products have earned ICSA Labs' prestigious SSL VPN Gateway Certification,
and are in full compliance with ICSA Lab's rigorous security standards. |
|
FIPS
140-1, 140-2 List
|
The FIPS-certified
NSP leverages AEP Network's revolutionary ACCE (Advanced Configurable Crypto
Environment) technology. ACCE is the next generation, flexible cryptographic
platform that provides the highest levels of assurance: FIPS 140. |
More
Information
SmartGate
Datasheet
SmartGate
Security
SmartSat
Whitepaper - A
briefing on latency, acceleration and satellite VPNs.
