Advenicas unique innovation, Three Domain Separation, is a true paradigm shift in VPN management. It is the only technology that eliminates the threat of unauthorised disclosure of sensitive information by a VPN administrator or a Managed Security Service Provider (MSSP).
The cost of managing VPN deployments grows exponentially without central management possibilities. The obvious benefit of central management is the possibility to rationalise the deployment, monitoring and management of VPN installations.
Central management will greatly reduce the total cost of ownership (TCO) and improve the return on investment (ROI). However, traditional central management has severe drawbacks when it comes to information privacy and information leakage. The root of the problem lies in the two domain separation. In traditional solutions, red and black domains are used to describe the transportation of user information between the secure plaintext side (RED domain) and the untrusted encrypted side (BLACK domain) of a VPN device. Traditional central management uses two domain separation where administrative personnel can access sensitive information on the protected network (RED domain) from the management site.
A true paradigm shift in VPN management, Three Domain Separation, was pioneered to address the potential insider threat from rogue administrative staff within the government, armed forces and intelligence organisations.
An aspect often overlooked in outsourcing to Managed Security Service Provider is the risk of letting the supplier manage personal information or other business sensitive information. The trust between the customer and supplier depends upon the concept of signing legal agreements that define the liability for the information being protected. Instead of relying solely on NDAs and agreements you can eliminate the risk “by design” with Three Domain Separation.
The technology is a unique innovation that prevents IT administrators from accessing sensitive information. Three Domain Separation is a high assurance technology that guarantees separation between the sensitive data traffic and system administration.
Advenicas unique innovation, Three Domain Separation, is a true paradigm shift in VPN management. It is the only technology that eliminates the threat of unauthorized disclosure of sensitive information by a VPN administrator or a Managed Security Service Provider (MSSP).
The Three Domain Separation technology is based on extending the traditional two domain separation with an administration domain. By adding a third domain, Advenicas solution provides system administrators with a tool that allows management and control of VPN devices from a central location. At the same time, administrators cannot under any circumstances access user information that passes through a VPN device or information stored inside the secure network. Users of the VPN system are thus provided increased security:
Three Domain Separation is a truly groundbreaking innovation that prevents IT administrators from accessing sensitive information. It provides unique assurance and protection against data leakage, which is crucial for Managed Security Service Providers and for customers who manage their own cybersecurity systems.
Advenica solutions have been awarded several prestigious approvals by the European Union, national certification bodies and international IT security certification bodies. We also hold US patent for our VPN technology, Three Domain Separation.
Advenica warrants that this product will be free from defects in material and workmanship for one (1) year from the date of purchase.
