Scribd Logo
Upload

Welcome to Scribd!

  • 2 views

    WP_Home-Office_EN

    Uploaded by

    techcreeb

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    WP_Home-Office_EN

    Uploaded by

    techcreeb
    2 views4 pages

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    2 views4 pages

    WP_Home-Office_EN

    Uploaded by

    techcreeb

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 4

    LANCOM White Paper

    Home office – working securely from home

    Digital technologies are a basis for greater flexibility


    in today's working world, and they make life easier
    for many employees: Reconciling work and family
    life, unnecessary travel to in-person meetings, the
    responsibility for remote sales regions, working as
    a sales representative for foreign companies—these
    are typical issues where the answer is a home office.
    Even in unusual situations, such as extreme weather,
    quarantine or flooding, a company that enables its
    employees to work from home puts business-conti-
    nuity management into practice and stays functional. In the same way as a company networks its sites, VPN
    However, there are still companies that continue to enables mobile employees and home offices to be
    have concerns about implementing telework, among quickly and, most importantly, securely integrated into
    other things for reasons of security and cost. This the company network. The only requirement is one small
    white paper presents solutions for implementing a software tool: A VPN client on your laptop or PC. Once
    modern, secure, and cost-effective VPN infrastructure. configured, one click is all it takes to establish a strongly
    encrypted VPN channel over the best available medium.
    VPN – extending the company network into the Mobile devices such as smartphones and tablet PCs can
    home also communicate securely with the company via VPN. An
    "My home is my office“ is no longer a distant dream, but a app is used to establish a secure VPN connection to the
    simple and economic reality thanks to today’s networking central company gateway.
    solutions. Site connectivity uses technology to completely
    integrate teleworking stations into company networks. The Home office is gaining ground in Germany too
    attraction of these solutions is that employees can work Companies have recognized the potential of teleworking.
    from home just as if they were in the office—with complete In 2014 only around 20% of German companies allowed
    access to e-mail, networks, servers, telephone, and digital employees to work from home, although that share
    services. Even the devices located at the home offices are almost doubled over the next four years: By 2018, 39%
    remotely configured by the central IT department. An of companies offered teleworking to their employees, as
    inexpensive networking medium comes with the standard reported by the German digital association, Bitkom1. 46%
    Internet line via DSL, cable or even mobile, which practi- of respondents also believe that teleworking will become
    cally every household has today. The connection is secured increasingly common in the next five years—although a full
    by a virtual private network (VPN). 50% do not expect any increase at all.
    1 https://www.bitkom.org/Presse/Presseinformation/Vier-von-zehn-Unterneh-
    men-setzen-auf-Homeoffice
    WHITE PAPER

    The kind of concerns that companies raise about using With the support of both IPv4 and the increasing number
    home offices can be resolved with clear rules with regard to of IPv6 connections, smooth workflows are assured. And
    home-office working. Concerns about data security (22%) thanks to seamless roaming, VPN connections remain intact
    and the costs for equipping home workplaces (12%) are even when changing the connection medium. For example,
    also named. However, modern VPN solutions offer secure this keeps VPN connections alive even when traveling by
    encryption and are also quite inexpensive. train and moving between mobile phone cells. Likewise,
    users in buildings roaming from cellular to Wi-Fi or Ethernet
    The solution for the secure home office – enjoy an “always on” experience.
    ­LANCOM Advanced VPN Client
    The LANCOM Advanced VPN Client for the operating Especially in hotels or public hotspots, firewalls often block
    systems Windows and macOS provides users with a secure IPsec communication (ports 500 or 4500). However, by
    VPN tunnel to access the company network with a single initiating the connection via the IPsec-over-HTTPS (based
    click. Whether the user is in the home office, abroad or on on the NCP VPN Path Finder technology), the IPsec VPN is
    the train is immaterial. Equipped with a stateful inspection encapsulated in an additional SSL header (port 443, as with
    firewall, the software VPN client automatically detects HTTPS).
    secure and unsecure networks for protected communi-
    cation over the Internet at all times. Furthermore, the company network is relieved of load
    if Internet traffic can be routed directly to the Internet,
    VPN tunnels are established using state-of-the-art such as when an employee is in a trusted network. Data
    encryption technologies such as the modern and efficient intended for the company network is still routed through
    VPN protocol IKEv2. Also, the LANCOM Advanced VPN the VPN tunnel (split tunneling). However, if the employee
    Client supports the latest encryption algorithms including is in an open, unencrypted Wi-Fi, i.e. with an unsecure
    AES-CBC or AES-GCM, the signature functions SHA-256, connection, all data is securely encrypted by the VPN tunnel
    SHA-384 or SHA-512, and current Diffie-Hellmann groups. to the central office, and from there it is securely routed to
    the Internet (full tunneling).
    The VPN handshake between the VPN gateway at the
    company and the software VPN client takes place in
    different ways—depending on the company’s size and
    requirements:
    A For small to medium-sized companies, this is very easy
    to set up and operate by entering a password (authenti-
    cation by pre-shared key – PSK)
    A For larger scenarios with higher security requirements:
    The use of IKEv2 with digital certificates
    A For large-scale scenarios with Windows server infra-
    structure: IKEv2 EAP for authentication via the Windows
    server by means of user name and password
    A For large-scale scenarios with central user administration:
    Direct and inexpensive authentication via a RADIUS server
    WHITE PAPER

    Despite the wide range of features, configuring the Summary


    LANCOM Advanced VPN Client on employee laptops is Our world is constantly changing—mobility is becoming
    easy: VPN access to the company headquarters is easily a vital factor for many companies and their employees.
    set up with a 1-Click setup wizard. The configuration is A VPN client enables employees to use their laptops to
    exported to a file and then imported to the VPN client connect to the Internet and enjoy secure access to your
    as a profile. It includes all of the information about the company network and confidential data, wherever they
    configuration of the VPN peer at the headquarters, and is are. This gives them maximum flexibility, whether they are
    supplemented by randomly generated values, such as the traveling on business or working from home. Companies
    pre-shared key. This allows multiple VPN access accounts often cite security and costs as arguments against the use
    to be created for employees and set up in the shortest of home offices. However, these turn into potential savings
    possible time—a real time saver for administrators. with a modern and efficient VPN solution from LANCOM.

    A collection of helpful instructions for the configuration are


    available in the LANCOM Knowledge Base.

    A worthwhile investment
    The investment in security infrastructures for mobile
    working is manageable. On the company side, a single
    device is all you need, namely a VPN-capable router, a
    central VPN gateway or a VPN-capable firewall. The only
    equipment you need on the employee laptops is the
    inexpensive LANCOM Advanced VPN Client—which is also
    compatible with products from many manufacturers..

    An investment that pays off—on both sides.

    Teleworking spares employees their commute, which saves


    time and fuel costs. Companies improve employee produc-
    tivity and can cut down on office space to save on rent and
    running costs. What's more: You position your company as
    flexible and family-friendly and score points in the tough
    competition for specialists and managers.
    WHITE PAPER

    Frequently Asked Questions (FAQ)

    LANCOM, LANCOM Systems, LCOS, LANcommunity and Hyper Integration are registered trademarks. All other names or descriptions used may be trademarks or registered trademarks of their owners. This document contains statements relating to future products and their attributes. LANCOM Systems reserves the right to change these without
    Can I extend my LANCOM router with additional Can I also use the LANCOM Advanced VPN Client
    VPN connections? in combination with LANCOM R&S®Unified Fire-
    With the LANCOM VPN Option, the number of VPN walls?
    channels can be extended depending on the LANCOM Yes, with the current operating system LCOS FX 10.4,
    device. For example, all LANCOM routers of the 17xx series LANCOM R&S®Unified Firewalls offer the option of setting
    are shipped with 5 VPN tunnels and can also be expanded up import profiles for the LANCOM Advanced VPN Client.
    to up to 25 tunnels. See: https://www.lancom-systems.
    com/products/software-options/lancom-vpn-option/

    Can I import my VPN profile into several end de-


    vices and apply it simultaneously?
    VPN user profiles can basically be imported into several
    VPN client installations (e.g. different computers). However,
    only one session at a time is possible per VPN profile.

    Where can I see how many VPN connections are


    active?
    Active VPN client connections can be clearly viewed via
    LANmonitor.

    As an administrator, can I deactivate VPN con-


    nections centrally?
    Selected VPN dial-up connections can be deactivated via
    LANconfig or WEBconfig if required.

    What scope of functionalities does the demo ver-


    sion of the LANCOM Advanced VPN Client offer?
    The LANCOM Advanced VPN Client offers a free 30-day
    demo version with the full range of functions. Please note:
    A maximum of three unlicensed VPN connections can be
    notice. No liability for technical errors and/or omissions 03/2020

    established to the remote VPN station.

    www.lancom-systems.com
    LANCOM Systems GmbH I Adenauerstr. 20/B2 I 52146 Wuerselen I Germany I E-mail info@lancom.de

    You might also like