Cipherium B-series provides centralized role-based identity management for SMBs to deploy a secure and manageable wireless environment. With role-based access control, administrators can effectively manage network resources by setting policies to authenticate and authorize users' access to specific resources based on user and device identity. Also, administrators can manage and monitor the activities of both users and access points through a centralized secured web interface.
To protect network communications, Cipherium B-series brings a comprehensive Multi-Level Secure Solution (AEA: Authentication, Encryption, and Authorization) to home office, small office and branch office networks.
- Authentication : User identity of all users must be validated before granting access to wired and wireless networks.
- Encryption : End-to-end traffic is protected as it enters and leaves business premise.
- Access Control Policies : Policies are enforced to manage what different users can do on the networks.
For Teleworkers : With B-series gateways running PPTP VPN termination with clientless approach, VPN tunnels will be actively established while selected users are logging in. The same clientless VPN setup implementation can also be extended to teleworkers in accessing corporate network from public Internet. Now traveling employees can link back to their corporate network via reliable, secure connections.
For Remote Offices : B-series gateways support site-to-site IPSec VPN, allowing corporate IT staff to establish secured network links between a remote office and the corporate headquarter, and thus enabling the workers at the branch office to share corporate IT resource. Two or more remote sites can be connected through the Internet by IPSec VPN tunnels to virtually form a unified working environment. Furthermore, with the remote management capability, corporate IT staff can centrally manage and troubleshoot B-series gateways deployed remotely.
Controlled Network Access for Visitors : Cipherium's solution brings the advantage of Instant Visitor Account Provisioning -- any employee with pre-assigned privilege can generate a random account and issue a pair of ID/password for his/her visitors directly from his/her computer without the need of IT professional's assistance. The generated instant account is a one-time ticket with time-limit access right, which is beneficial to reduce the impact on bandwidth loading. To block outsiders from sharing the private access-control network as the company's Intranet, visitors are only allowed to access a publicly available network, e.g. the Internet. |
