WebControl is a powerful tool for monitoring and controlling your internet usage and costs.
It lets you monitor and filter traffic before it arrives at your network, giving your business a single point of access and control.
The most secure, reliable and cost-effective way of connecting your multiple sites is through a Connexus Virtual Private Network, or VPN. For a fixed monthly cost, your Connexus VPN gives you unlimited data transfers between sites.
We can link from 2 to 2000 individual connections in your VPN, using advanced MPLS technology from Cisco Systems. This is a new technology which provides a secure VPN environment without costly firewalls and IPsec equipment. This can be installed with any combination of your Connexus Business ADSL, SDSL, Fibre, Ethernet and Co-location services.
All connections are grouped into a single VPN, hosted and managed by Connexus. If you need access to the internet, a high-speed internet gateway is connected to the private network.
We understand that protecting your online assets is crucial. That’s why we use cutting-edge Cisco MPLS technology to isolate your private network from other users. Your users can transfer data between sites without the risk of going through the world wide web.
We manage and monitor your Virtual Private Network around the clock. Most faults are quickly found and fixed by Connexus engineers.
Your VPN can operate through ADSL, SDSL and Fibre. This means you can connect to anywhere in the Australia-wide Connexus network.
Your VPN is fully built and maintained within our Connexus core network. This saves you relying on expensive VPN equipment at your business premises—your remote sites will only need standard modems and routers. Because we completely manage your network, you won’t need to pay for internet security and other running costs.
Click on the image to view a larger version.
| Connexus VPN | IPsec | |
|---|---|---|
| Topology | Virtual mesh topology | Predominantly hub-and-spoke |
| Performance | Data is transmitted in its raw form, ensuring maximum performance with minimal overheads | Each data packet must be encrypted, transmitted and decrypted. This reduces available bandwidth and increases processing time |
| User authentication | Only nominated circuits can access the private network | A digital certificate or shared key is used for authentication |
| Quality of service | Ability to configure QoS because Connexus can identify traffic as being voice or data | Limited ability for QoS because Connexus cannot identify whether packets are voice or data |
| Privacy of data | Data is transmitted separately within the Connexus network for added security and performance | Transmits data over the public internet |
| Firewall | One centralised firewall for the entire customer network | Each site is connected directly to the internet is exposed to security risks. Separate firewalls must be installed at each site |
| Scalability | Scalable to thousands of sites because all connections are managed within the Connexus network | Each new site typically requires a connection to the head office IPsec router, adding cost and complexity |
| Management | Fully managed by Connexus. No complex configurations on customer routers | Requires configuration on each site router as well as head office router |
| Provisioning | One-time configuration by Connexus connects the site to the Connexus Private Network | IPsec tunnels require configuration each time a new site is connected |
| Equipment | Standard modems and routers can be used because the VPN is configured within the Connexus network | Each device requires an IPsec compatible router with firewall functionality |
| Pricing | Reduced costs because sophisticated equipment or configuration is not needed | Requires IPsec compatible equipment at remote sites and head office. Complex configuration adds to installation costs |
Multi-Protocol Label Switching (MPLS) allows VPNs to operate securely without needing traditional IPsec tunnels.
Sites within a private network can communicate together seamlessly and securely in a fully meshed environment using standard DSL modems, without the need for expensive VPN termination equipment. Sites can interact transparently with each other, rather than requiring traffic to be routed through a central location.
A customer-specific MPLS VPN is created in the Connexus core routers, effectively segmenting the customer from the rest of Connexus’ traffic. This private network allows for the secure transfer of data between sites without the need to traverse the internet.
Each location is assigned its own internal subnet, allowing applications and network access to be routed through the MPLS network similar to a LAN. This allows central administration of the entire network from one location, as well as the ability to merge multiple Windows 2000 / 2003 servers into a single Active Directory forest.
As part of Connexus’ implementation of MPLS VPN, we offer free traffic between your locations, meaning that all traffic between your offices will be un-metered.
The speed of your network is determined by the interconnection speed you choose at each location—high-speed SHDSL services up to 4000 kbps may be appropriate for a head office, whilst remote locations may use ADSL 1500 kbps / 256 kbps connections. Connexus will tailor each implementation to suit your business needs.
Secure access to your internal network from anywhere in the world!
MPLS is Connexus’ preferred VPN implementation for its security and robustness, but how can your staff access the office network from home, on the road or overseas?
Cisco have developed arguably the most advanced remote VPN access available. Using SSL VPN technology removes the need to configure special VPN software clients on each computer. SSL (secure socket layer) is built into all modern web browsers and, once implemented by Connexus network engineers, permitted staff can access your internal network (e.g. 192.168 addressing) within seconds simply by browsing to the website https://vpn.yourdomainname.com.
The remote user will be asked for a username and password, which are authenticated against your Microsoft Active Directory. Upon successfully authenticating, an SSL certificate is installed on their computer and they are then part of the MPLS network and can freely access network shares on your internal network just as they would if they were in the office!
There are numerous cheaper alternatives to Cisco’s SSL VPN, but after extensive testing and a lot of experience, our network engineers can’t recommend anything more highly for secure remote access. It’s simple for your users, easy for your IT management to maintain and is highly robust and secure.
