To create a secure tunnel between two points on the Internet, we normally use some type of VPN connection. This means that a client or a network located away from our server centres can connect and use services on our servers as if they were a part of the local network.

VPN solutions should be designed on a case-to-case basis, taking into account all the different aspects of a hosting solution. WebDeal has IT security experts to help out with designing a solution and to interpret the upsides and downsides of different VPN solutions.

IPSec

This is a VPN technology that we recommend using for point-to-network solutions. Implementations can be done with OpenVPN on server-side and an Astaro firewall remote for simple server-to-network tunnels, or more complex Astaro firewall-to-Astaro firewall solutions in situations where two or more servers are located in our server centre. The reason why we use Astaro firewalls is its easy maintenance and the fact that it is based on open software standards.

SSH Tunnel

For simple tunnels between Linux servers and Linux clients, SSH Tunneling can be a simple, low-cost solution that results in an extremely secure setup and requires a minimum of maintenance.

PPTP

The point-to-point tunneling protocol has a reputation of being an insecure way of building a VPN connection. Although we don't disagree that there might be flaws in PPTP, we believe that the protocol can also bring simpler VPN setup and tunneling for Windows clients that no other technology currently in the market can. This is why it's so important to know the solution before you decide which technology to use. Maybe your application already has encryption of data and all you are looking for is tunneling to the network. In this case, PPTP is a great alternative.

State-of-the-art VPN

WebDeal's recommendations regarding security are simple: be realistic and think about what a tighter security will mean for the users. If you are looking for the most secure authentication to your VPN network, you should require the following from your users:

• Something you know – password, pin code, etc
• Something you have – Smart Card, USB dongle
• Something you are – biometric information such as fingerprint

WebDeal can design this type of solution upon request.