Mobile office project of the headquarters of a commercial bank

Project background

The mobile office project of the headquarters of a commercial bank is expected to enable borderless access of various employee terminals to the bank's internal network and hence realize highly efficient, flexible and secure mobile handling of work.

1. High degree of data encryption: SSL VPN equipment performs data encryptions with SSL VPN protocol that is based on the application layer.

2. Secure release of applications: use SSL VPN to release internal network applications. Utilize the SSL protocol embedded in the browser to create a safe channel between single-point access users and internal application systems.

3. Authority division: SSL VPN bundles user, user group and application resources together through “role” setting.

4. Combination of multiple authentication modes: SSL VPN supports the combination of “and” and “or”, including SMS authentication, CA authentication, LDAP, RADIUS, dynamic token card, etc.

5. Client terminal security check: SSL VPN supports client terminal security test strategies.

6. Private cloud virtual desktop: deploy enterprise-level private cloud virtual desktops to realize the virtualized remote access of mobile phone and tablet computer (e.g. IPAD, Android).

Project scale:

The equipment applied in the project includes:

Two firewalls isolating the Internet function zones

Two firewalls for Internet SSL VPN gateway, embedded with IPS module

Multiple virtualized application servers

Multiple tandem access switches