Secure Site2Site Optimization

The Site2Site module can aggregate multiple tunnels over multiple broadband connections and includes additional optimization features that fine tune the tunnel traffic and provide for forward error checking (FEC) within each tunnel.

Click Image To Enlarge

The Problem: Most of these mission critical VPN connections have no built-in redundancy capabilities and have no built-in methods for optimizing the application traffic passing through them.

The Solution: With the XRoads Networks' Tunnel Multiplier technology VPN tunnels can be combined to provide 5:1 faster throughput, built-in application QoS, and up to 99.999% reliability, thus ensuring that remote users stay connected to critical applications.

Instantly add fault tolerance for remote users and enhance the responsiveness for critical remote applications.

The Edge appliance can quickly and easily improve any existing VPN environment, and in the process increase VPN throughput by up to five times (requires our browser plug-in) and increase reliability to over 99.999%, all without having to make significant changes to the existing infrastructure.

How Does It Work

Tunnel Multiplier technology dynamically binds multiple VPN tunnels through multiple service providers and then balances session traffic across each tunnel for higher network throughput and increased security.

Pre-Firewall Deployment

In this scenario the Edge appliance is placed in front of the firewall on the LAN network. Any existing VPN that the firewall had been terminating is shutdown. The Edge appliance then initiates a VPN through the firewall to the remote Edge appliance. Secondary VPN tunnels are then made through additional broadband links connected directly to the Edge appliance.

Post-Firewall Deployment

In this scenario the Edge appliance is placed between the firewall and the WAN router. Any existing VPN that the firewall had been terminating is shutdown. The Edge appliance then initiates a VPN through the WAN router to the remote Edge appliance. Secondary VPN tunnels are then made through additional broadband links connected directly to the Edge appliance.

An important factor in this scenario is that the Edge appliance can only tunnel traffic as it is seen from the firewall, so any LAN traffic that is NAT'd by the firewall would have to be tunneled as NAT'd traffic. Most applications will not have a problem with this, however please confirm whether this might be a problem prior to choosing this type of deployment.