2SRA Secure Remote Access
2SRA Secure Remote Access, the OpenNAC Enterprise module, provides secure access to corporate networks while mitigating the risks of identity theft.
The secure remote access module acts as a frontend for completing VPN tunnels with clients through an agent. The solution performs authentication, authorization and auditing against the company’s identity database and enables the implementation of a second authentication factor (OTP) to minimize the risk of identity theft.
Main feautures
Reduced risk from users’ devices
Ensures compliance with minimum requirements for devices connecting to the network.
Identification of anomalous behaviour
Monitors traffic between the user (remote devices) and the system (protocols used, data sent/received, services used, hosts contacted, etc.).
Enforcing the principle of least privilege and the zero-trust approach
Users can only access information and resources that are essential for carrying out their work within a corporate security framework in which only authenticated and authorized users and devices can access company data.
Mitigating the risk of identity theft
Provides an extra layer of security by applying two-factor authentication (OTP) to reduce the risk of identity theft.
Implementation
01
The user sends corporate credentials and token (OTP) to OpenNAC Enterprise to verify identity.
02
2SRA Secure Remote Access validates the token and checks the corporate credentials in the user database.
03
The user device sends its posture to OpenNAC Enterprise in order to assess whether it meets the connection requirements
04
The user device sends its posture to OpenNAC Enterprise in order to assess whether it meets the connection requirements.
05
2SRA Secure Remote Access monitors all the traffic exchanged across the VPN connection to identify any anomalous behaviour
Case use
In March 2020, Julian, the CIO at an international consultancy firm, was charged with a mission-critical task that would ensure his company could continue to operate in relative normality.
The firm’s CEO notified Julian that within a week or two, all employees would be working remotely, and this was set to last for a long time. A rapidly-spreading virus was about to force the company’s entire staff to work from home.
The CEO tasked Julian with the mission of finding an easily deployed, secure remote access platform. He underlined the need for strong authentication and for employees only to be able to access what was strictly necessary to carry out their duties. He underlined the need for strong authentication and for employees only to be able to access what was strictly necessary to carry out their duties.
Julian checked to see if any of the platforms they currently had on their infrastructure supported a specific, concurrent volume of remote connections and was sufficiently secure and complied with relevant security requirements.
He discovered that his access control platform, OpenNAC Enterprise, has a secure remote access module with two-factor authentication, VPN, role-based access to maintain the principle of least privilege and can also monitor user traffic. As such, Julian has successfully responded to the demands of his CEO, the consultancy firm has implemented a secure remote access solution that adapts to their needs and they have been able to operate with most staff working from home for over a year.
About the module
Algunos de nuestros clientes hablan sobre los resultados obtenidos tras la implementación del módulo de la solución OpenNAC Enterprise.
“With the outbreak of COVID-19, we realised that we needed a robust solution that enabled remote access from 7000 users, a 1300% increase in connected users. That’s why we opted for 2SRA Secure Remote Access”
Network manager at one of Spain’s leading universities
Other OpenNAC modules
OpenNAC Enterprise is the only modular access control and visibility solution for corporate networks on the market. The modules adapt smoothly and simply to the level of technological maturity of your company.
