Z-Net Application VPN

Swift, safe collaboration

 

 

Mecury Z - Z Net Application VPN

Historically, enterprise data security has focused on creating protected zones in which applications were housed in a corporate data center and only operated by controlled PCs. This model used traditional VPNs to create protected bridges for site-to-site and remote access capabilities. Such measures have proven effective as long as the protected zones were not compromised.

Security becomes a bigger issue when users visit sites outside of these protected zones. Securing communication in this case can drain IT budget and time as security equipment, including firewalls, web-filtering systems and intrusion detection, piles up and requires constant updating. Even worse, malware can leak into the protected zone and launch attacks from once-trusted devices. IT personnel must also consider physical security of data center components. Finally, server virtualization and cloud services are evaporating security further as applications and data reside in a common operating environment in which an enterprise’s network health is only as good as its neighbor’s.

To solve the problem of security, Mercury Z introduces Z-Net Application VPN, a valuable tool that enables the creation of a real-time, secure network. Employees, partners, vendors, or other invitees can collaborate anytime, anywhere with this enterprise- and carrier-class solution, which secures data from a remote device all the way to the server rather than terminating security at a WAN/LAN concentration device.

Z-Net Application VPN offers the speed, versatility, and security necessary for companies to collaborate, respond to emergencies, and communicate more effectively than ever. As with all of Mercury Z’s solutions, Z-Net Application VPN includes all necessary support, design, training, and implementation services.

 

 

Benefits of Z-Net Application VPN

Z-Net Application VPNs are built on the assumption that no trustable network infrastructure exists anywhere; therefore, trust must be established and maintained on a node-by-node and connection-by-connection basis by the end systems themselves. In this manner, security can be controlled by an enterprise no matter where their applications, data, and users reside at the moment.

Z-Net Application VPNs features include:

Endpoint-Based: Every end system (user devices, servers, etc.) participating in a Z-Net Application VPN runs hardened and secure software.

End-to-End Security: Connected end points communicate with one another over end-to-end encrypted tunnels.

Network Overlay: Z-Net Application VPNs operate transparently over any underlying network media, through firewalls, across VPNs and corporate networks, and across clouds. The system never collides with existing addressing because it uses its own address space for internal addressing.

Inherent Mobility: Connectivity and end-to-end security is maintained as devices move.

Agility and Flexibility: Nothing is pre-provisioned. Endpoints are given the configuration information after both ends have been authenticated. Using a highly secure out-of-band connection, addresses, keys, filtering tables, encryption algorithms, etc. are all established at initiation.

Hidden Applications: Servers and services don’t have to enter their IP address into DNS. No packet that contains their true physical IP address ever crosses the network. Their tunnel outer address (that routers operate on) can be changed regularly, creating a tiny and ever-changing attack surface on the application.

Simple Migration: Participants can be brought into a secure Z-Net Application VPN environment with no impact on other application or network usages.

Massive Scale: Z-Net Application VPNs do not involve deploying new boxes. Traffic flows directly from end device to end device.