EMnify provides two VPN options to protect the communication between your devices and your application server.
Option 1 OpenVPN
OpenVPN is an open-source software that utilizes the security protocol SSL/TLS. It has strong features and is known for its ease of implementation. It allows customers to authenticate each other using a pre-shared key.
OpenVPN works in a client-server mode, meaning OpenVPN users connect to the OpenVPN server and from there have full access to the internet. It is recommended by EMnify for most use cases from start-up through medium-sized businesses who require a high level of security, but are comfortable with the flexibility of an opensource software. Users of OpenVPN can have either dynamic or static IP addresses, and the software is increasingly becoming available on most operating systems.
Option 2 IPsec Tunnel
Internet Protocol Security (IPSec) sets up a tunnel from a remote device to a central business server. It is designed specifically for internet traffic and ensures private, secure communication over the public internet by cryptographic security services.
IPSec is recommended for large, global enterprises, especially when multiple peers and security layers are used. IPSec requires a static IP address, and technical resources to be implemented.
Larger enterprises are more enclined to have the needs and resources to overcome these barriers. A harder technical set-up also makes this VPN option the only one that EMNify charges to implement and maintain.
The other strong case for IPSec exists when dealing with data of a very sensitive nature such as the transfer of personal identification information.
Differences between them:
|- Very good level of security (medium - high)||- Highest security level VPN|
|- Recommended for start-up and medium size businesses||- Recommended for large enterprises|
|- Open source Software||- Use for sending highly sensitive data|
|- Easy to set up||- Requires an implementation team (one person per end)|
|- Available for most operational systems||- Requires IPsec capable router or software solution|
|- Dynamic/static public IP addresses||- Use a static public IP address|
|- No cost of implementation||- It has a monthly maintenance fee of 150€|
VPN use cases
Using a VPN with the EMnify solution, no matter if it is OpenVPN or IPsec, allows you to:
- Perform connectivity tests (ping)
- Access a specific device and remotely change configuration parameters (SSH/telnet)
- Secure data transmission
- Download firmware update file