Security

Overview

Cisco ASA-5500 Series

Janux already has an embedded firewall/packet filtering based on ‘Linux IPTABLES’. Therefore for most of installations, Janux does not require any external firewalls which is specially of high benefit for installations that require remote management.

However, in addition to Janux, there are several methods and devices to use, in order to establish a secured network, specially for occasions that VPN tunnels are required. By considering the size of the network and the fact that routing will be provided through our service provider, Nashita, as a CISCO Registered Partner, provides Cisco ASA-5500 Series Security Appliances in order to provide a robust backbone with high security reliability. As another solution we can use Juniper Systems NetScreen VPN/Firewalls which are also established industry standards.

Sipura NetScreen 5GT Firewall

Both devices will establish network security in several subsequent levels and assure maximum confidentiality of the data transmission. Both devices can establish a Virtual Private Network (VPN) which creates a secured and encrypted point-to-point data transfer tunnel that could not be monitored by any third party.

For customers with more than one site – or in star and mesh topologies - Nashita’s solution is to install one central VPN/Firewall at the HUB in the earth station.

Flexible VPN Services

Using the full-featured VPN capabilities of the Cisco and Juniper Security Appliances, businesses can securely extend their networks across low-cost Internet connections to mobile users, business partners, and remote offices worldwide. Solutions supported range from standards-based site-to-site VPN using the Internet Key Exchange (IKE) and IP Security (IPSec) VPN standards, to the innovative Cisco Easy VPN capabilities found in Cisco PIX Security Appliances and other Cisco and Juniper security solutions-such as Cisco IOS® routers and Cisco VPN 3000 Series Concentrators.

Cisco Easy VPN delivers a uniquely scalable, cost-effective, easy-to-manage remote-access VPN architecture that eliminates the operational costs associated with maintaining the remote-device configurations that are typically required by traditional VPN solutions. Cisco and Juniper Security Appliances encrypt data using 56-bit Data Encryption Standard (DES), 168-bit Triple DES (3DES), or up to 256-bit Advanced Encryption Standard (AES) encryption.