AT&T VPN Portfolio · MPLS VPN AT&T Network VPN GW ... device configuration) Corporate Internet IPSec Tunnel ... AT&T’s team of experts will design, implement and
Post on 29-Jul-2018
219 Views
Preview:
Transcript
AB-1186-01© 2008 AT&T Intellectual Property. All rights reserved. AT&T and the AT&T logo are trademarks of AT&T Intellectual Property.
AT&T VPN Portfolio
32
Virtual Private Networks (VPN) offer the flexibility to connect allemployees and applications, anywhere, anyhow regardless ofphysical location or access type. VPNs deliver the attributes ofa private data network within a shared network infrastructure.They offer enterprise-class scalability and reach across multipleIP-based infrastructures, along with many of the performanceand security characteristics traditionally found only indedicated private environments.
AT&T’s VPN portfolio offers global networking services rangingfrom individual components to tailored end-to-end solutions.The portfolio provides network-based, premises-based, remoteaccess and hybrid VPN solutions with management capabilitiesranging from individual customer managed to fully managedVPNs. Our portfolio allows you to choose the level ofmanagement that meets your networking needs, in additionto the ability to customize your network design basedupon your business applications.
CustomerLocation
Customer Location(AT&T Managed CPE)
CustomerLocation
RemoteLocation
MobileWorker
MobileWorker
MobileWorker
IP Sec
IP SecInternet
Dial/DSL
Cellular
Wi-Fi
MPLS VPN
AT&T Network
VPN GW
Integrated VPN
AT&T VPN PortfolioAs a business in today’s competitive environment your network is the lifeline for connectingyour locations and ensuring access to critical applications. Enterprises are looking to extendthe network and applications to every location and employee whether in a corporate location,branch office, or mobile workers with remote work locations.
Benefits
• Secure, reliable network architectureproviding any-to-any connectivity globally
• Management capabilities providing thelevel of control you require
• Flexibility to add new locations, applicationsand features to the network
• Improved application performance usingClass of Service to prioritize traffic
• Easily integrate new technologies toexisting infrastructure
• Simplify network management with easyto use web-based tools
• Service Level Agreements to support yourmission critical traffic
• Secure remote access for the mobile,remote employee
• Single sign-on for all applications,regardless of network connection type
• Consistent, global customer experience
for IP networks, including methods for network authentication,data encryption and integrity checking. This comprehensivetunneling standard for VPNs protects data end-to-end, fromthe remote user or desktop to the LAN.
• SSL. This option extends the corporate network by providingsecure communications through a web browser. SSL cansecure connections by authenticating and encryptingtraffic in a clientless environment. As an application layerencryption protocol, it allows secure access to and fromuser devices located outside of traditional enterpriseboundaries. Ideal for clientless access to web-enabledapplications, as well as client-server applications, andprovides a simplified, efficient way for you to roll out a VPNfor remote access applications.
Premises-based solutions allow you to build upon currentinvestments by providing dedicated, broadband, and remoteaccess solutions for connection to the AT&T Global Networkor Internet.
Given the range of applications supported across yourenterprise, one or both encryption protocols may beappropriate. AT&T can fully implement your premises-basedVPN from the largest headquarters location to the travelingsales person.
AT&T’s Hybrid VPN SolutionsAT&T’s hybrid VPN solutions combine the best of network-basedand premises-based technologies. Through our focusedinnovation we can provide seamless interoperability,flexibility and security within a single enterprise networksolution designed to meet your infrastructure andapplication requirements.
Remote Access ServicesRemote access services provide seamless, secure integration of wireline and wireless access technologies and mobilesolutions as an extension of existing enterprise network.Whether the end-user is a remote worker, a traveling user oran extended member within your business model, RemoteAccess Services will provide access to corporate informationand applications on the fly.
Through the use of AT&T’s Global Network Client, with aneasy and simple, single logon, the user’s experience is asflexible and high performing for the remote worker as forthose directly on the corporate network. In addition, theAT&T Global Network Client provides end-user control ofaccess selection and corporate control over who gainsaccess to specified corporate infrastructure applications – both domestically and throughout most of the world.
54
Dial-upor BroadbandUser
Dial-upor BroadbandUser
Service Manager(for Authentication,device configuration)
CorporateInternet
IPSec Tunnel
IPSec TunnelServerAT&T IP Network
Public Internet/3rd Party ISP
IPSec tunnel
Authentication flow(simplified)
AT&T Premises-Based VPN
Full Spectrum of VPN CapabilitiesAT&T Network-Based VPNsAT&T network-based VPNs provide a graceful way to controlthe evolution of your network while providing high levels offlexibility, reliability and security. AT&T network-based VPNs aredelivered via the AT&T Global Network utilizing MultiprotocolLabel Switching (MPLS) routing technology. MPLS is theenabling technology supporting a converged, any-to-anyarchitecture with built-in MPLS security and Class of Service(CoS) to efficiently transport traffic over the network.
This service provides you maximum control and flexibility overyour network performance and functionality. Network-basedVPNs provide consistent access to corporate information insidethe office and to mobile and remote workers regardless ofdevice. You have the ability to select the appropriate level ofClass of Service to prioritize your traffic for your unique needs.The convergence of multiple networks to a single MPLSplatform produces gains in employee productivity, streamlinesoperations, improves security and reliability while reducing thetotal cost of ownership.
AT&T’s network-based VPN solutions address the importance ofproviding a converged network to connect your locations whileintegrating both legacy and leading edge technologies thatyou require today and over time.
AT&T Premises-Based VPNsAT&T premises-based VPNs are delivered by addingintelligent devices such as firewalls or VPN tunneling to thecustomer premises. Our premises-based VPNs are deliveredover AT&T’s highly rated Global Network for users needinga high performing network, or over the Internet, for usersrequiring ubiquitous access and extended reach.
AT&T’s premises-based VPNs help to ensure the confidentiality,integrity and authenticity of data traveling across a networkthrough the use of encrypted tunnels. We provide multipletunneling options, including IP Security (IPSec) and SecureSockets Layer (SSL), allowing you to tailor your premises-basedsolution to meet your networking needs.
If you run applications over the Internet, require an additionallevel of protection through encryption and authentication,or need to extend the reach of your network, to businesspartners, AT&T premises-based VPNs offer these capabilities.The following premises-based solutions are available:
• IPSec. This tunneling option can be used to extend accessto the MPLS VPN by supporting remote users and supplychain partners. IPSec enables you to tailor access rights tothe VPN for each individual user. IPSec is a set of securityprotocols that determine data security at the network layer
CustomerSite D
CustomerSite C
CustomerSite A
CustomerSite B
CE
CE
CE
CE
PE
PE
PE
PE
AccessLine
AccessLine
AccessLine
AccessLine
AT&T Global MPLS
Network
Network-Based VPN
76
Simple, secure access tocorporate information andapplications anywhere, anytime.
Headquarters BranchOffice
EuropeanSite
Hub
PE
VPN Gateway
PE PE
PE
PEMPLS
IPSec
IPSec
MPLS
MPLS
MPLS
MPLS
IPSec
SSL
SSL
Telecommuters athome PCs/kiosk
Power-Telecommuters& SOHO
Suppliers/PartnersBanking Partner
Remote OverseasSite(s)
POP
POP
POPPOP
POP
AT&T Global MPLS
Network
Public Internet
Multiple VPN technology choices working together
Management and MonitoringVPNs are intricate solutions, and AT&T has the expertiseand knowledge to help navigate through the complexityof managing your network. The AT&T VPN portfolio issupported by management capabilities that provide a widerange of network control – from selective out-tasking tocomplete outsourcing.
AT&T has expertise in customer care, network engineeringand management, with operation centers worldwide offeringin-country help desk support to take the complexity out of yourday-to-day networking. AT&T streamlines the management
of your network and alleviates your need to deal with multiplesuppliers. AT&T’s team of experts will design, implement andmanage your solution-a single partner to manage all aspectsof your network.
Putting it All TogetherAT&T offers you the most comprehensive set of networkand premises-based solutions for all applications of VPNsin the industry. We are committed to offering enterprisesbest-in-class industry technology for performance, reliability,network agility and security.
For more information contact your AT&T Representative or visit us at www.att.com/business.
SecurityEnsuring the security of your network is critical. You can createa highly secure network by choosing a network-based VPN overthe AT&T Global Network. Security is built into AT&T’s GlobalNetwork using MPLS technology within the backbone, and isdirectly managed by AT&T for high levels of availability and Classof Service. With premises-based VPNs security is built into theservice by utilizing tunneling, encryption, access control andauthentication options.
There is an array of additional options designed to give youmaximum flexibility in securing your VPN whether you implementa premises-based, network-based or hybrid VPN solution.
Security ServicesThe following security services are available to augmentyour VPN solution:
• Firewall Security ServicesSecure your access to the Internet with managedfirewall services. Functionality can be deployedwithin the AT&T network or in customerpremises devices
• Intrusion Detection ServicesExtend managed security services beyond thefirewall through providing comprehensive monitoring,attack recognition and response based upon youpredefined security policy
• Network Scanning ServicesUtilize real time network scanning for potentialentry points open to malicious attack through anautomated web-based scanning tool that probesInternet-facing devices for vulnerability
• Remote Access SecurityFor users of the AT&T Global Network Client thereis optional AT&T Endpoint Security available,in addition to encrypted site-to-site connectivity
Extending your VPN through remote access
top related