Remote access, without opening the whole building.
Secure access for staff who are not on site, built so that one stolen laptop does not become access to everything. Multi factor by default, and the temporary rules from 2020 finally closed.
Access to what is needed, not to everything
Site to site VPN
Branches and sites joined properly, with routing and failover that survive one link going down.
Client VPN
Staff laptops connecting over an encrypted tunnel, with multi factor authentication as a requirement rather than an option.
Zero trust access
Access granted per application rather than per network, so a compromised device sees one system instead of all of them.
Device posture
A check that the connecting machine is patched, encrypted and running endpoint protection before it is let in.
Split versus full tunnel
Decided deliberately, because the wrong choice either exposes traffic or makes video calls unusable.
Logging
Who connected, from where, to what. The record you need after an incident and cannot create retrospectively.
Three leftovers from 2020
- Remote desktop published straight to the internet, because it was the fastest thing to do that week. It is still there.
- A shared VPN password used by everyone, including three people who have left.
- No multi factor, on the argument that the VPN is itself the second factor. It is not.
Ask us what is reachable from the internet
We will scan your public addresses and tell you. It usually takes an afternoon.
02 3537 5791