XRoads Networks Site2Site SSL VPN Connectivity

Our Site2Site module can combine multiple sites together via one or more SSL tunnels. Tunnels can be placed in an automated failover manner so that upon a link outage, the tunnel will automatically re-establish over the secondary connection. Further, when two or more tunnels are configured the appliance can selectively route traffic in a manner which optimizes the bandwidth available via each tunnel connection.

Click To Enlarge

The Problem: Connecting two or more offices can be done via most VPN technologies, however ensuring that they stay connected and are optimized is a challenge for most security appliances.

With the ability to connect two or more tunnels between offices, the EdgeXOS platform can also optimize the bandwidth by setting up specific application routes which brake-up the network traffic and thus provide faster overall throughput between the offices. The data between offices can be further segmented based on destination network.

The Solution: With the ability to connect two or more tunnels between offices, the EdgeXOS platform, will automatically provide 99.999% uptime between offices in the event of a network failure. Additionally our appliances can also optimize the bandwidth by setting up specific application routes which brake-up the network traffic and thus provide faster overall throughput between the offices. The data between offices can be further segmented based on destination network.

Layer 3 Tunnel
Standard 3DES Encryption
Built-In Compression
Automated Tunnel Failover
Application Tunnel Routing

Instantly add fault tolerance for remote users and enhance the responsiveness for critical remote applications.

How Does It Work

The Site2Site tunnel technology performs a site-to-site IP Layer connection, which means that any IP-based traffic can be used across these tunnels. The Site2Site tunnels also support the 3DES encryption standard to ensure secure communications between offices. Finally each tunnel can be configured with data compression enabled so that non-compressed traffic is accelerated.

A Site2Site tunnel can be connected between two or more sites in either a one-to-one, many-to-many, or one-to-many architecture. This means that a single site can connect to a remote site via either a single tunnel to a single WAN link, multiple tunnels to multiple WAN links, or a multiple tunnels to a single WAN link. This last option is useful for connecting a remote office with multiple broadband links back to a collocation facility with a single IP address, which is accessible via multiple paths.

In many instances a customer may have an existing private network connection, via either Frame Relay or MPLS, and requires some method to automatically failover to an inexpensive backup link. Our Site2Site tunnels provide this functionality by monitoring the private link and then failing over to an expensive Internet-based link (DSL, cable, wireless) in the event that the private link were to fail. During the failover process a Site2Site tunnel is established between the two sites over the Internet link and traffic is re-routed across the tunnel rather than the private link.