Funkwerk VPN Access 1000 gateways/controller

VPN Access 1000 With the VPN Access Line, Funkwerk Enterprise Communications presents a new generation of VPN Gateways. All of the previous advantages of bintec devices are included. The new VPN Access devices are optimised for high availability use in a VPN environment. Higher performance CPUs and more memory makes the products "Future Proof". IPSec and PPTP encryption is already enabled. There is no need for the separate purchase and activation of licenses. In addition, there are many new features included in the new VPN Access product line.

Load Balancing
For all the devices in the VPN Access line with three Ethernet interfaces, it is possible to configure two of the three interfaces as WAN interfaces. This not only provides more bandwidth, it also gives you the opportunity of distributing your data traffic on the individual lines, depending on the load or the data type. In this way, one of the lines can take care of all the traffic into the Internet, while the second line is dedicated to VPN traffic. The second WAN port can use a second ADSL or even an SDSL line to take care of your company's other data traffic. This switchover is performed seamlessly and the user will not notice a thing.There is even an option to set up a backup via an ISDN, an analogue or a GSM modem.

Extensive backup options
A VPN helps you to exchange businesscritical data between different company locations securely and at an affordable price. And so it is all the more important that communication is always guaranteed.
In this case, Funkwerk Enterprise Communications offers a wide variety of automatic mechanisms. If two WAN lines are active, for example, then one can take over the entire data transfer for the other, should a malfunction occur. If both lines break down, the VPN traffic can be automatically forwarded via the integrated ISDN modem. This switchover is performed seamlessly and the user won’t notice a thing. And there is even an option to set up a backup via an analogue or a GSM modem.

Device redundancy
If the device itself should malfunction, it is possible to forward data exchange automatically to a second device. Thanks to our bintec Router Redundancy Protocol (BRRP), two devices can be operated redundantly and act as one device in the LAN. In addition to their own IP and MAC address per interface, they both also have a common virtual IP and MAC address. This address is entered as the standard gateway in all the computers in the LAN. The two VPN devices communicate using the bintec protocol. Should one device malfunction, the other would automatically take over the entire data traffic.

Secure encryption
The bintec IPSec implementation offers everything that customers wish for. In addition to numerous methods of encryption, including the AES ("Advanced Encryption Standard"), Funkwerk Enterprise Communications offers the VPN Access product line with encryption codes up to 256 bits in length. This means that your enterprise will be ready to meet the demands of tomorrow today.

Certificate support
Of course, our devices are not limited to working with just preshared keys; they function with certificates as well. This means you can build a public key infrastructure for the greatest possible security and the greatest flexibility in the daily operation of your VPN. Thus, direct intervention to secure the system – when your staff changes or a VPN device is stolen – is only required at one central location. This makes your administration easier, increases security and reliability and reduces the costs at the same time.
(By the way: the Governmental Organisations for Security in Information Technology recommend the use of certificates.)

VPN with dynamic IP addresses
The bintec IPSec implementation supports the building of VPN tunnels right from the beginning – even with dynamic IP addresses.As such, the central office with a static IP address can use a free ISDN callback process to have each branch office build a tunnel. This makes small branch locations permanently available, even if they are not online all the time.And even if both VPN parties have dynamic IP addresses, there is nothing to stand in the way of their communication with the bintec solution. The IP addresses are exchanged via Dynamic-DNS service providers in the Internet or intranet.

Save costs with data compression
To save costs, data compression was used on conventional ISDN lines in the past to increase data throughput considerably. And of course, the same applies to VPN connections. However, it is not possible to use such conventional data compression processes as VJHC, STAC or MPPC on IPSec packets. This would alter the packets so that the communications partner would identify this as a hacker attack and reject the incoming packets. The remedy to this problem is the IPCOMP process, which all the bintec VPN Access products support. IPCOMP does not increase the bandwidth of the connections; depending on the type of data, it reduces the data quantity by a factor of ten. And even if we assume a factor of only two, this would at least halve the costs for volume-based transmission rates.