UltraSurf Or A VPN For Remote Access?


Companies looking to improve their remote access security, reduce their long distance phone bills, do away with 1-800 numbers and refrain from opening their all-in-one RASs to install additional modems are making the move to Internet-based client VPN. IPSec remote access replaces the RAS by moving incoming remote access-ors to the router. Rather than calling the company, teleworkers or roadwarriors dial-up to a local ISP and connect to their company's Intranet via the Internet. IPSec also allows companies to continue to use RAS solutions that do not secure transmitted information. Operating transparently to the LAN and remote user, an IPSec device can be placed between the RAS and the telecommunications uplink, securing all dial-up connections as they occur.

For companies looking to replace their RASs, the cost savings that IPSec VPN remote access provides are immediate and significant. According to recent research by BancBoston Robertson Stephens, a company with 100 remote users absorbs monthly remote access charges of $12,000: 100users X 20hrs/month X ($0.10/min X 60min/hr) = $12,000/month. That same company using the Internet to link its remote users would pay $2,000: 100users X $20 fee/user to connect to ISP = $2,000/month. IPSec VPN remote access reduces costs per month by $10,000, and even when the initial costs of VPN implementation are taken into account, the savings remain clear, with return on investment taking place after only two months. download ultrasurf

IPSec VPN remote access is also advantageous from a management perspective. With traditional remote access, increasing the number of remote users in a company's network requires the addition of new modems to the RAS. And, if the RAS becomes saturated, then the RAS itself must be replaced. Adding new users to an IPSec VPN requires no more than including new definitions to the VPN's management software, and with the ability of IPSec VPN gateways to support thousands of remote users, IPSec VPN does not affect the future growth potential of the network.


The example is of a European food goods manufacturer, needing global connectivity for its international sales group. The remote workers need immediate connectivity to the company's main network in order to use Lotus-Notes and SAP databases. The company's remote access solution was RAS-based and involved exceedingly expensive costs, including international and transatlantic phone calls.

Looking to reduce costs without compromising security, the company replaced its RAS with an IPSec gateway, although keeping its RADIUS server for strong user authentication. The company also distributed IPSec client software to its teleworkers and roadwarriors. Rather than calling the company directly, the employees dial up to local ISP points of presence (POPs) and connect via the Internet.