VPN

We set up the gateways, configure the tunnels, manage certificates and access, keep the updates in order and run the connections. You do not have to keep track of gateway software or certificate lifetimes.

Both are possible. IPsec is widespread in networking and well suited to linking sites permanently. OpenVPN is more flexible for individual access across different operating systems. Which variant fits depends on your remote ends and devices.

Yes. In addition to security certificates, multi-factor authentication can be set up. We also connect LDAP or Active Directory, so that access is granted and withdrawn centrally.

Yes. With site-to-site connections, applications at different sites can be connected to one another and reached in encrypted form.

That depends on the setup. For manageable setups, the VPN is a function of the managed firewall — rules and tunnels are then in the same place, which keeps things clear. Where many tunnels or a lot of throughput come together, we put separate gateways in front, so that firewall and VPN do not slow each other down. What fits in your case we work out beforehand.

Not as a product. What we run is classic VPN using IPsec and OpenVPN — with multi-factor authentication, certificates and centrally granted access. Individual principles from zero trust thinking can be implemented with it, such as sign-in through Keycloak and separate access for each application. But it is not a ZTNA product that checks every connection individually — and we do not call it one.

We monitor around the clock, every day of the year. How quickly we intervene and through which escalation stages is set out in your contract — a time we have not committed to is not a time we state here.