Secure VPN Solution for Reliable and Compliant Remote Access
Abstract
The successful installation of a secure VPN solution leveraging Pulse Secure’s appliance-based SSL technology enabled this insurance company with reliable and compliant remote access.
The solution
Data Networks proposed and implemented a comprehensive SSL VPN conversion project in which new hardware and firmware were installed, existing configuration settings were migrated to the new hardware, and users were switched over to the Pulse Secure client software. To replace the Juniper hardware, Data Networks engineers installed a pair of high-availability (HA) Pulse Secure PSA3000 appliances complete with the latest firmware, and then mapped existing configuration settings to corresponding settings that controlled the new hardware, and then migrated all settings efficiently.
Upon careful consideration, Data Networks engineers ultimately recommended that Brethren keep its current version of Network Connect as its end user SSL VPN client, citing that not only are end users accustomed to it, but that it is fully compatible with Windows 10 for the time being. Data Networks engineers would, however, proactively preconfigure and develop a new Pulse Secure client that would be ready for an eventual conversion. As explained by Dwayne MacKenzie, Solutions Architect for Secure Networking at Data Networks, “Because our clients sometimes need for us to get creative with our design, we’ll provide them with not only an immediate solution that satisfies their requirements, but one that also prepares them for the long haul. In Brethren’s case, their current instance of Network Connect was a proven application with which the users were comfortable, so we kept it in the architecture but prepared them for the eventuality of replacing it with the Pulse Secure client.”
Mission accomplished
Data Networks engineers finished the project by moving end users’ physical SSL VPN connections from the old hardware to the new Pulse Secure appliances during a planned 30-minute outage period. They then conducted an end-to-end test of the new SSL VPN from end user workstations positioned outside the Brethren firewall to confirm that resulting network connectivity and access matched that of the prior solution. Knowledge transfer from Data Networks to the Brethren IT team regarding the new PSA3000 configuration, a demonstration of the Pulse Secure client designed for future use, and the verified improvements concluded the successful project.
The Pulse Secure SSL VPN architecture was delivered by Data Networks in 10 business days and has since proven itself as a solution that Brethren truly needed in order to keep pace with the insurance industry marketplace. Brethren IT team members have observed excellent connection throughput supported by the HA appliance pair, and the revision of the Network Connect software continues to be a user-friendly client that experiences no issues with Windows 10. The Pulse Secure client stands ready to replace it when the time comes.
“In the insurance industry, we’re high-uptime and need to minimize user disruption during technology upgrades,” says Brethren Operations Manager Tom Harley. ”Data Networks is truly attentive to our needs with regards to this and all other areas. Additionally, we greatly appreciate Data Networks’ ability to transfer an existing configuration, such as our SSL VPN settings, to a new solution, without having to reinvent the wheel.”