QTS: Introduction to VPNs

Fundamentals of Internet Security
Introduction to VPNs & Secure Remote Access
Presented by Neil A. Rosenberg
President & CEO
Quality Technology Solutions, Inc.

Three Part Seminar Series
Firewalls and Intrusion Detection
VPNs and Authentication
Bandwidth Management & Content Management

Who is QTS?
Network Integrator & Solution Provider
Worry Free Networking
Network Uptime, Redundancy & Reliability
Network Management
Security Services
Solution Suite based on Best of Class Products

What is a VPN?
Virtual Private Network
Uses the Internet (a public network) to create a Virtual, Private Network
Elements are:
Authentication
Encryption

Security: A Physical Analogy Security Office Traditional Locks Guard Security Camera Card Key

Why VPN?
Reduce Telecomm Costs
Improve Redundancy & Backup (can back up the WAN, or MARO)
Integrate client platforms & communications links (DSL, Cable Modem, etc.)
Simplify Networks & Reduce Connection Points

Types of VPNs
Site to Site
Client to Site (remote access)
Partner/Client Extranet

Site to Site
Reduces WAN/Telecomm Costs
Improve redundancy
Manage bandwidth
Chicago Internet Corporate HQ network Policy-based Management Console

Client to Site
Remote Access to replace modem pools
Enables DSL, Cable Modem Users
Reduce Comm Costs (local dial access)
Internet Remote Broadband Users Mobile Dial-up Users

Partner/Client Extranet
Business Enabler
Same Technology, more integration issues
Contrast with SSL as solution

How does a VPN work?

IPSec
Internet Prototol Security
A set of security protocols and algorithms used to secure IP data at the network layer
IPSec provides data confidentiality (encryption), integrity (hash), authentication (signature/certificate) of IP packets while maintaining the ability to route them through IP networks

Encryption Layers Network-Layer (IPSec) Application-Layer (SSL, PGP, S-HTTP) Link-Layer Encryption Application Layers (5-7) Transport/ Network Layers (3-4) Link/Physical Layers (1-2)

IPSec Consists of
3DES (Data Encryption Standard) Encryption (also DES)
IKE (Internet Key Exchange)
May also use RSA/DSS, X.509v3 or MD5/SHA for Key Exchange/Management

What is a Key? Key – An initial, primary value input to a computational algorithm, producing a theoretically unique result exclusive to the input value. Key Algorithm Algorithm KEY Encrypted Correct KEY KEY Encrypted Incorrect KEY Decrypted Opened Encrypted Locked

Encryption Process Encryption Process – Inputting a key into an algorithm that acts upon a message to produce encrypted output. Key + Message Key (numerical) Message (converted to numerical)
Multiply key and message
Then add 400
Then divide by 2
Encryption Algorithm = Encrypted Encrypted Output

Authentication
VPN System Database
RADIUS
LDAP
RSA ACE Server
Other

Elements of a Secure VPN
VPN Gateways
VPN Clients
Strong Authentication integrated with Directory
Consider need for non-VPN application access, and design accordingly

QTS: Introduction to VPNs

by Franklin72

Accessibility

Categories

Upload Details

Usage Rights

Statistics