Company
Support
Login
Book a Demo
Contact Us

IP Tunnel
A Zero Trust Alternative to VPN

Create a Zero Trust network without VPN Tunneling or exposing any endpoints to the Internet.

Remote Access as it should be

Book a Demo

Point-to-Point IP communication to critical infrastructure

Bifrost IP Tunnel is a secure way to access private endpoints and applications without a VPN or Remote Access Software. Our innovative approach is based on an adaptive trust model that grants access on a "need-to-know" basis, defined by granular policies. Combining hardware and Zero Trust principles, BifrostConnect adds an extra layer of protection to safeguard your highvalue assets.

User Experience
VPN:
VPN:
VPNs often lead to user frustration and dissatisfaction due to their complicated setup processes, challenging configurations, and inconsistent performance.
Bifrost IP Tunnel:
Bifrost IP Tunnel:
Ensures fast and easy implementation without extensive setup, configuration, or expert knowledge — no static public IP is required.
Security​
VPN:
VPN:
When granting application access, users are connected to the network, and network IP addresses are exposed to the internet via VPN concentrators that listen for inbound pings.
Bifrost IP Tunnel:
Bifrost IP Tunnel:
Isolates application access from network access, reducing attack surfaces and preventing lateral movement. This approach only grants endpoint and application access to authorized users, ensuring trust is never implicit.
Management​
VPN:
VPN:
VPN management is resource-intensive for IT teams, requiring time and effort to maintain, troubleshoot, and ensure optimal performance and security.
Bifrost IP Tunnel:
Bifrost IP Tunnel:
Streamlines IT management by enabling just-in-time access and granular policies at both unit and user levels, granting precise one-to-one access to endpoints and applications.

Remote IP Communication as it should be

Grant Endpoint Access
Grant Endpoint Access
Connect Users to specific endpoints without VPN or network connection.
Minimize Attack Surfaces
Minimize Attack Surfaces
Ensure IPs are not exposed to unauthorized users and the internet.
Boost User Experience
Boost User Experience
Provide easy access without extensive setup, configuration, or expert knowledge.
Support IP Communication
Support IP Communication
Establish secure Point-to- Point IP communication to any type of device.

Experience Zero Trust IP Access

Hasslefree Point-to-Point Access without extensive setup or expert knowledge.

Step 1: Connect
Step 2: Authenticate
Step 3: Configure
Step 4: Access
Step 5: Disconnect

Endpoint

Image link
User:
On-site Staff
Action:
Prepare the endpoints for Remote Access by connecting the devices to the Bifrost Units via LAN.
Result:
The Bifrost Unit appears on the endpoint’s local network but does not interact.

MFA Interface

Image link
User:
Admin or Privileged User
Action:
Authenticate via Multi-Factor Authentication (MFA).
Result:
The Authenticator service validates the User's right to enter the Interface or Manager.

The Authenticator service validates the Users’ right to access and configure the specific Bifrost Unit.

IP Tunnel Interface

Image link
User:
Admin or Privileged User
Action:
Specify the IP addresses and ports enabled for remote Access during the session.
Result:
Endpoints connected to the Bifrost Units will be on a closed network and can communicate with the defined IPs and ports.
Image link
User:
Privileged User or Remote Operator.
Action:
Use applications to communicate or transfer data through the local network.
Result:
Users with access to the destination endpoint have application access on IP and Port levels.

Session Terminated

Image link
User:
On-site Staff or Privileged User
Action:
Terminate the session upon completion.
Optional: Disconnect the Bifrost Unit
Result:
If the Operator wishes to reconnect, a new session with valid authentication is required.

Discover How You Can Establish Zero Trust Access to Your Equipment

Get in touch with one of our experts today.
Contact Us
Image link

Empower privileged users with Just-in-time IP Tunnels

A Bifrost IP Tunnel enables a direct end-to-end encrypted connection between two Bifrost Units. These Point-to-Point tunnels are created on a per-session, on-demand basis, and all session data is transitory and will not be stored on any server.

Bifrost Units can utilize the Internet In-band or through the integrated Out-of-band connection. A Bifrost Unit does NOT share the Internet connection with the endpoints during an IP Tunnel Session. Advancing upon Least Privilege principles, IP Tunnel Sessions can only be initiated by Users or Admins with the required privileges. Additionally, privileged users must specify the IP addresses and ports enabled for remote Access during the session.

Combined with Bifrost KVM Access, privileged users can establish Remote Access without using software while configuring an IP Tunnel Session. This enables the privileged user and the Bifrost Units to be in three different locations during Remote Access.

Book a Demo

How it works

Image link

Site A: Position the Bifrost Unit you wish to define as IP/Port forwarding Destination.
Site B: Position the Bifrost Unit you wish to define as IP/Port forwarding Source.

As the Master/receiving end, Site A will always initiate the Pull or Push requests during sessions. This can be selected dynamically.

When initiated and configured, endpoints connected to the Bifrost Units at Site A and Site B will be on a closed network and can communicate with the IPs and Ports defined by the privileged user. Other Users with Access to the device at Site A can now operate the equipment without requiring any vulnerable credentials that can be exploited after Session Termination.

To maximize safety, equipment at both sites can be Offline, enabling Air-gapped Remote Access. If a user wants to access another private endpoint simultaneously or from another device, privileged users can spin up different IP Tunnels.

When devices are offline or behind a firewall, inside-out connectivity masks the network from the internet while enabling application access to individual endpoints within the network.

Talk to an Expert

A Unified Remote Access Platform

Together as a suite, the BifrostConnect Solution gives you unmatched flexibility in tailoring your Zero Trust Access and scaling up your existing setup.

Secure

  • Air-gapped Remote Access
  • Out-of-band LTE connectivity
  • End-to-End Encryption
  • Transitory Session Data
  • Multi-Factor Authentication
  • SAML integration
  • Access Management
  • Audit Logging

Versatile

  • Support all platforms
  • IP Tunnel Sessions
  • KVM Sessions
  • Terminal/Serial Sessions
  • SSH Sessions
  • File Transfers
  • BOOT/BIOS Access
  • Portable/On-demand

Plug and Play

  • Offline Remote access
  • Hassle-free implementation
  • No software installs
  • No network configuration
  • Out-of-the-box commissioning
  • No on-site configuration
  • Easy to use
  • Hosted Private Infrastructure

Explore related resources

Zero Trust Access Test
Whitepapers
Zero Trust Access Test
 February 15, 2020

Is your organization equipped with the necessary tools to ensure your perimeter security remains intact during remote access?

Read more
Solution Brief: IP Tunnel
Whitepapers
Solution Brief: IP Tunnel
 May 1, 2023

How to take critical OT infrastructure offline while boosting remote access capabilities through air-gapped IP communication.

Read more
Discover BifrostConnect
Brochure
Discover BifrostConnect
 May 1, 2023

Zero Trust Access boosts remote work, expands market reach, saves resources, and prolongs technology lifespan.

Read more

Remote IP Communication
as it used to be

Conventional firewalls, VPNs, and Remote Access Software provide a considerable attack surface.

Externally exposed endpoints are vulnerable to cyber threats, allowing attackers to see and exploit them.

VPNs, in particular, can give attackers easy access to sensitive data by putting users directly on the network.

Traditional network security approaches often fail to prevent free lateral movement, leaving your network vulnerable to cyber attacks.

Legacy devices not designed with contemporary security standards are susceptible to cyber threats.

Connecting Legacy equipment to a VPN could inadvertently expose the entire network to attack.

Image link