The ability to access internal applications and data remotely has become an expectation rather than a privilege. Because of this, it is becoming more and more important to implement effective and seemless remote connectivity solutions for your user-base without sacrificing security in the process. The most common remote access method available today is Virtual Private Networking technology such as IPSEC and SSL.

Both VPN technologies provide access to your internal resources, however, due to the ability to provide access without a pre-installed client, the SSL option is becoming increasingly more popular. The are several concerns that should be addressed when implementing this or any remote access technology:

• Authentication of the User: How will we validate this user? How will we ensure the user id and/or password are not stolen in the process?
• Authentication of the System: How can we ensure we trust the remote system used for this connection (Work PC, Home PC, Kiosk PC, etc)?
• Limiting Access: Once we authenticate the user and system, what access will we provide them for this session?
• Session data control: How do we ensure data accessed is not accessible via other local system applications we do not trust?
• Post connection processing: Once the session is terminated, how do we ensure all internal corporate data remain protected and do not persist outside the company such as in the browser cache.

More Information:

For more information on Secure Remote Access Products, Solutions and Priveon Implementation Services, please contact us.