Virtual Private Network (VPN)
A Virtual Private Network (VPN) securely connects vessels at sea and land offices using cost-effective public Internet access. In order to keep data transmissions private, protected and uncompromised, a VPN provides secure connectivity through authentication and encryption technologies. VPN is offered globally to all Marlink VSAT customers.
Key benefits
• Easy to reach vessels’ LANs without expanding network infrastructure
• Protects access to corporate networks, tools and applications
• Enhances productivity at sea
• Increases flexibility
Key features
• Secured by IP-Sec encryption
• One, some or all vessel’s Local Area Networks (LANs) can be routed through the VPN tunnel
• Supports multiple vessels in one VPN tunnel
• Supports multiple terrestrial destinations
• Activation easily done by change of firewall rules at teleport
• No installations or additional equipment needed on board vessel to activate service
How VPN works
The Virtual Private Network is a secure Local Area Network to Local Area Network best effort connection between vessels at sea and land offices.
To set up a private and protected connection, an IPSec enabled VPN device (i.e. firewall) is required at the land office. This VPN device needs a static public IP address that is mapped directly towards the firewall at the teleport via Network Address Translation (NAT).
After the VPN service has been installed, the vessels’ LANs are accessible from the office on shore like any other network.
The most common setup is routing the administrative LAN through the VPN tunnel terminating both corporate business traffic and Internet traffic at the shore office, whilst the crew Internet traffic is terminated at the teleport. In addition Marlink offers third party secure access to vessels by routing data traffic through separate VPN tunnels, giving clients or support teams access to onboard equipment.
Limitations in access, either by computer or service, may be implemented in the VPN devices ensuring that the company’s security policies are followed and not compromised.
Additional options
• Multiprotocol Label Switching (MPLS)
• Leased Line from teleport to office on shore
• Public IP by Marlink connecting VPN device at office on shore with VPN devices on board vessels
|
