Cost efficiencies
As ADSL technology is supplied primarily as a consumer technology, it is significantly more cost-effective to deploy. By utilising multiple links and a gateway access infrastructure, Qualica delivers an enterprise-class solution at a cost-effective rate. Additional capacity and scalability can be added to a branch easily and cost effectively.

 

Connectivity management
The EBM solution performs load-balancing over multiple ADSL lines at a site. Should one or more of the links become unresponsive, it is removed from the load-balancing configuration. The connectivity management system is able to effect traffic shaping rule-sets based on business priorities. All connectivity management functions are centrally accessible and managed.

 

Monitoring
Qualica proactively monitors each gateway server and failures are reported to EBM clients. Full gateway and line status information is accessible from the Gateway Management Portal. Alerts can be sent via SMS or e-mail to designated contacts when gateways or individual lines fail.

 

Asset management
Each time a personal computer connects, an inventory check is conducted and reported back to the management server for interrogation. Information gathered includes operating system update status, versions, software installed, anti-virus status as well as hardware details.

Centralised authentication
Qualica EBM offers services that are similar to Active Directory and are fully compliant with Microsoft User Authentication Module. They allow a full single sign-on environment for Windows applications, Internet and mail authentication. The authentication is centrally managed, allowing IT administrators to control access to Internet sites and Web-based applications for each user or for whole user groups.

Reporting
The solution enables all gateways to send network utilisation and notification information to a central management server. A reporting interface on this system is able to provide usage and activity reports, down to a per-user level.

 

Corporate wide-area private network
Using the EBM architecture, companies can host applications (e.g. SAP) in an environment that looks and works like a secure managed high-end VPN, delivering the benefits of an private network at a more cost-effective rate.

File library and distribution server
The Qualica Gateway Management server acts as a file distribution server, providing a single point that allows IT administrators or support staff to:

• Upload files via web, FTP or fileshare, that will be automatically distributed to all remote servers.
• View the status of file replication globally or by site.
• Manage priorities for file distribution (for example, to ensure that a small but important file is replicated first).

Caching proxy
A caching proxy allows for more efficient Internet usage at each branch. The proxy server uses the Microsoft User Authentication Module for user authentication and activity tracking.

Internet access control

EBM enables administrators to centrally configure the following access rules:

• Sites that do not require the users to authenticate themselves at all (e.g. software updates)
• Whitelists, i.e. sites that are always allowed
• Blacklists, i.e. sites that are not allowed to any user
• Automatic blacklist, e.g. from a third-party URL blacklist provider

Screen sharing and remote support
EBM maintains a user database that includes user IP addresses. This enables administrators to locate any user at any branch and initiate a remote desktop session on the user's machine using the VNC or RDP protocol. Access to gateways and users behind gateways is available to roaming support technicians via the corporate wide-area private network.

Branch security and intrusion detection
EBM provides firewall functionality for the client sites. One set of firewall and proxy rules are applied to all the sites deployed, allowing a regular configuration at all branches. A centrally-configured intrusion detection system is installed on each EBM server. Alerts generated by the intrusion detection system are managed through the Gateway Management Portal, where they can be displayed and alerts can be sent to IT staff. Security updates are centrally managed and distributed, helping to guarantee that all systems are running the most secure configuration.

Secure remote access for support
Remote access to each EBM server is via secure channels designed to be only accessible via the corporate wide-area private network. In the event that connectivity is not available at a branch, dial-up functionality can be made available to access a branch and diagnose the problem.

Centralised configuration of Internet service provider accounts
Strict controls are enforced as there is no access at branch level to Internet service provider accounts, thereby preventing abuse.

EBM facilitates an infrastructure on which additional user services can be deployed such as PC backup and restore.

Because the service is fully managed, a full solution can be deployed in short timeframes with low level skills. Qualica has rolled out these services to 130 branches within six weeks.