Share it !
Today's businesses expect a lot when it comes to their data networks. Speed, reliability, robustness, and scalability are just a few of the performance parameters with high standards from business users. One area in particular requiring special emphasis is security. Choosing the right network infrastructure is critical to ensuring that your security requirements are met end to end...and everywhere in between.
For example.... do NOT be so enamored with a traditional VPN backbone (e.g. Layer 2-based VPN services such as ATM and Frame Relay) that you overlook the drawbacks in maintaining the secure environment that your company applications will require. A standard VPN will not offer the same level of privacy and security as will a private dedicated backbone. At least not without extra effort on your part... and higher costs therefore in the long run.
A typical virtual private network (VPN) is a computer network that is layered on top of an underlying computer network. This is most commonly a public telecommunication infrastructure such as the internet. The private nature of a VPN means that the data travelling over the VPN is not generally visible to, or is encapsulated from, the underlying network traffic. Although it is run "layered" on top of a public pathway (the internet).... secure segregation of the two is enacted through using encrypted tunnels to ensure that data cannot be accessed without authorization.
The purpose of a VPN is to enable remote locations and/or individual users (e.g. telecommute staff) to access a company's network with some expectation of secure activity. An additional intent is to avoid the perceived high cost of owned or leased lines (dedicated circuits) that can only be used by one business. So, the goal of a VPN is to provide the organization with the same, secure capabilities, as a dedicated network. But at a much lower cost.
However that presumption is misleading. A traditional VPN network is not as secure as you likely expect and need. After all... it is still tied to a public infrastructure. A talented and persistent intruder can still defeat most encryption safeguards. Plus, a glitch in the hardware or software leaves your information open to public eyes. The appearance of failsafe privacy and security is really just that.... an appearance.
As for cost.... the price tag of the extra hardware and software to enable encrypted communication over your entire network is not cheap. Even though it may appear so compared to other options you may be considering. There's much more to the cost than set-up, installation, and encryption software. Don't overlook the maintenance, oversight, and trouble shooting of those safeguards. Particularly since you are responsible for all of that.... forever.... just to try and save a few pennies.
This is where MPLS comes in.
The architecture and protocols of MPLS (Multi-Protocol Label Switching) are predicated on the absolute privacy and security enabled via a dedicated network infrastructure. Put simply..... the entire network is completely separate and unto itself. You own it, share it with no one, and there is no connectivity of any kind with a public infrastructure. Now that is security.
To further drive home the main point of this entire article in simple terms..... with private lines or MPLS solutions, there is no path from the public into those network facilities. With VPN over the internet, the path is there and it's your responsibility to provide your own security. Think of the difference between a brick wall, and a brick wall with a door. VPN over the internet is the wall with a door, and you have to manage the lock and keys.
Once your MPLS core is configured and operating..... you're done. In fact it's unlikely you would even have much involvement with that. Your provider will do it all for you. Since it's a dedicated circuit network you are not responsible for the maintenance, oversight, and troubleshooting you would be with a VPN. In short.... it's hands off for you. No recurring costs except the monthly "leasing" fee for the lines comprising your network.
Before you play the cost card..... look deeper. The price of all dedicated circuits has been dropping dramatically for the last few years. Whether it's copper or fiber based.... the sticker shock days of old for dedicated T1 lines, DS3 Bandwidth, or SONET circuits (e.g. OCx) is long past. In fact.... probably the best deal for you today is pursuing MPLS over an Ethernet backbone. You'll get the best of both security and cost savings.
Michael is the owner of FreedomFire Communications.... and also authors Broadband Nation where you're always welcome to drop in and catch up on the latest BroadBand news, tips, insights, and ramblings for the masses.
For quality Dedicated Bandwidth service, protect yourself and your investment by comparing amongst 30 first and top tier carriers where you have a Low Price Guarantee. For more information about Dedicated Bandwidth and finding your best deals and options, please visit Business Ethernet
Menlo Logic AccessPoint SSL VPN Software was selected the winner in the VPN Software category of the WindowSecurity.com Readers? Choice Awards. Checkpoint VPN-1 Power and Astaro Network Security were runner-up and second runner-up respectively.
AccessPoint SSL VPN Software
?Our Readers? Choice Awards give visitors to our site the opportunity to vote for the products they view as the very best in their respective category,? said Sean Buttigieg, WindowSecurity.com manager. ?WindowSecurity.com users are specialists in their field who encounter various network security solutions at the workplace. The award serves as a mark of excellence, providing the ultimate recognition from peers within the industry.?
WindowSecurity.com conducts monthly polls to discover which product is preferred by Network Security administrators in a particular category of third party network security solutions. The awards draw a huge response per category and are based entirely on the visitors? votes. WindowSecurity.com visitors can submit their votes for the current Readers' Award poll in the site?s left-hand bar.
If you'd like to know who the past Readers' Choice winners were, please take a look at our Readers' Choice Awards Yearly Roundup.
Even more awards?will be?given out during 2011. Visitors to WindowSecurity.com?have the opportunity to vote for their preferred Security products. Below is a list of the Readers? Choice categories, the month that visitors can submit their votes, and the announced winners.
WindowSecurity.com (http://WindowSecurity.com) is a Microsoft Windows Security resource site. It is the leading Windows Security site, attracting over 450,000 Security administrators and specialists a month. The site provides the latest Windows Security Services, articles and tutorials by leading Windows Security experts, message boards, software listings and product reviews.
WindowsSecurity.com forms part of a group of sites run by TechGenix Ltd., including http://www.windowsnetworking.com - a comprehensive Windows Networking resource site; http://www.msexchange.org, a Microsoft Exchange Server resource site; http://www.virtualizationadmin.com, the essential Virtualization resource site for administrators and?http://www.isaserver.org, a Microsoft ISA Server resource site.
All product and company names herein may be trademarks of their respective owners.
(function(d, s, id) { var js, fjs = d.getElementsByTagName(s)[0]; if (d.getElementById(id)) {return;} js = d.createElement(s); js.id = id; js.src = "//connect.facebook.net/en_GB/all.js#xfbml=1&appId=242485732454577"; fjs.parentNode.insertBefore(js, fjs);}(document, 'script', 'facebook-jssdk'));Get all articles delivered directly to your mailbox as and when they are released on WindowSecurity.com! Choose between receiving instant updates with the Real-Time Article Update, or a monthly summary with the Monthly Article Update. Sign up to the WindowSecurity.com Monthly Newsletter, written by George Chetcuti, BSc in Computing & IS (Honors), containing news, the hottest tips, security links of the month and much more. Subscribe today and don't miss a thing!
