SSL VPN Remote Access Control Applianc by Array Networks

SSL VPN and Network Admission Control

Array Networks SPX Series Universal Access Controllers combines VPN and Network Access Control functionality in an easy to use and administer and highly cost effective appliance

The Array Networks SPX is more than just another SSL VPN Appliance.

AccessDirect - Remote Access

AccessDirect is a remote access SSL VPN module available independently or in conjunction with other access products on all SPX Series platforms. Designed to supercede legacy secure remote access VPNs, Array AccessDirect SSL VPN provides greater flexibility using ubiquitous Web-based access, more granular data protection through end-point security and identity-based access control, and fewer deployment hassles with an architecture that requires no pre-installed clients and is transparent to existing infrastructure.

AccessDirect supports Web-based, Layer-3 and specifc client-server and thin-client application access – and delivers a fast, customized end-user experience unmatched by the competition.

AccessDirect will work over any 3G or GPRS network where usually providing remote access using standard IPSec VPN for users of Mobile phones or 3G Data Cards is highly problematic. Using the Array SPX these users can be provisioned extremely easily

SiteDirect - Site Connectivity

Array SiteDirect is a site-to-site SSL VPN module available independently or in conjunction with other access products on all SPX Series platforms.

As opposed to traditional site-to-site VPNs, Site Direct provides more than simple Layer-2/3 LAN-to-LAN encrypted connectivity; it goes beyond to allow the publishing of specic subnets, servers and applications on a white-list basis – ideal for limiting network exposure or extending controlled access to Extranet partners.

Because SiteDirect does not need to force entire networks together, it mitigates issues such as duplicate IP spaces and routing conicts. What’s more, unique automatic dual-NATing can make published resources appear to reside on remote networks - hiding sensitive network information. Both hub-and-spoke and mesh architectures are supported via SPX platforms located at each peer.

NAC in the Stack

Array SPX Series Universal Access Controllers are a comprehensive VPN, network admission control and resource access control solution.

Unlike solutions concerned only with local traffic, the Array SPX has the built-in ability to extend NAC functionality to remote and wireless users. Remote users request access and local users are detected; all users and devices are identified, quarantined and remedied where applicable; and identitybased access controls are applied with layer 7 granularity – on a platform with the performance, management and reporting capabilities to handle real-world deployments.

End-Point (Client) Security

A dissolvable security agent mitigates network or resource exposure by enforcing pre- and post-admission policies and adapting access rights to suit changes in the client environment. Host-checking veries device and user identity,ensures clients meet pre-defined security parameters(anti-virus, anti-spyware, personal firewalls, patches, service packs, etc.) and determines adaptive policies. For additional control, cache cleaning can wipe cached information from devices when a session ends; or secure desktop may be enabled to store session data in an encrypted vault to prevent data leakage associated with local saving and printing

Product Highlights

Broad range of secure access solutions from a single system including remote access, remote desktop access and site-to-site connectivity
Network admission control (NAC) and resource access control for all users whether local or remote, fixed or wireless
Multiple virtual SSL VPN communities of interest on a single system for providing employees, partners and customers a separated, fully-customized experience
Scalability and performance to drive productivity and a premium user experience across the organization while maintaining iron-clad security
Ideal access component for an overall business continuity plan, maintaining compliance and keeping critical processes up and running in the face of un-anticipated events
Range of high-availability platforms meet the needs of any size organization