Satellite Internet VPN SkySecure From VSAT Systems 

Satellite Internet VPN: SkySecure Features

SkySecure servers are designed to provide state-of-the-art satellite Internet VPN solutions in remote access, site-to-site and extranet configurations.

The SG 1000 is a tabletop unit designed for remote offices and small businesses, the SG 4000 is a rack mountable enterprise class device, and the SG 5000 is a high-reliability enterprise system with redundant components and a higher number of concurrent users.

All SkySecure products contain four primary components -- a gateway that provides authentication, encryption, access control, registration and administration; a guard module that allows installation, configuration, integration, and administrative control; an IPSec manager to handle site-to-site and client/server IPSec tunneling; and a firewall.

The firewall can work with (or replace) an existing firewall. If you already have a firewall, and just want to implment VPN functionality, the SkySecure server can be placed in parallel to your existing firewall, connecting to the outside and inside networks. Users coming in from the outside would be authenticated and allowed appropriate access based on established control permissions. No other traffic of any kind, in or out, would be permitted.

SkySecure servers have two Ethernet interfaces, one to connect to your LAN and the other for your Internet connection. The outside Ethernet will have one real
routable address assigned to it and will be able to communicate with the Internet; the inside Ethernet can use any RFC 1918 non-routable address.

Since SkySecure servers involve application layer technology, they eliminate the need to worry about Network Address Transation (NAT) issues. That allows users to traverse firewalls without needing to make configuration changes.

The SG4000 and SG5000 servers come with an Ethernet interface designed for use as a DMZ (a place where Web or ftp servers can be placed, and accessed by the public, without granting access to an internal network).

If all physical connections are ready, and if all network addresses are known, the SkySecure servers can be operational in less than an hour. Clients can be downloaded through a browser, and registration can be handled on line.

Please use this link for complete technical details on the VSAT Systems secure servers and its role in satellite Internet access.