Direct Tunnelling Redefined
Bring identity-based network access to critical, offline, air-gapped, standalone and legacy equipment in minutes, without exposing any endpoints to the Internet.
Remote Access as it should be
Direct IP Tunnels - without exposing your assets
IT and OT devices often require direct IP communication for configuration, diagnostics, or integration with native tools.
But how do you enable that when the device sits on an isolated, segmented, or offline network?
With Bifrost Direct Tunnel Access, you can extend a secure, out-of-band IP tunnel to any endpoint – just like running an infinitely long cable – without exposing the device to the internet.

Works with your favorite platforms
Simply install the client and log in to access your authorized connections
Legacy VPN vs Direct IP Tunnel
Why Direct IP Tunnels?
Fusing ZTNA, WireGuard®, and Bifrost hardware,
our Direct IP Tunnel brings plug-and-play peer-to-peer connectivity
to your critical infrastructure.

Hasslefree deployment

Local Control

Identity-based

Granular access control

Out-of-band Connectivity

Peer-to-Bifrost-to-Peer

Multi-factor authentication

Activity logging

End-to-End encryption
Direct Tunnel Access (with client)
Description: Establish a secure tunnel between a computer and one or more Bifrost Units, relaying access to your target endpoint(s).
Methodology: Remote operators install a lightweight client on their computer or mobile device, which manages access and enforces permissions configured by the administrator in the BifrostConnect Manager. Target endpoints are connected to a Bifrost Unit, eliminating the need for a client on the endpoint.
Purpose: This setup allows remote operators to use applications on their own devices to communicate with and control the target endpoint(s) efficiently and securely.
Direct IP Tunnel: Identity-based IPv4 connectivity to endpoints linked to Bifrost Unit(s). Access is managed through Subnet Mappings, which associate users with specific endpoint IPs or subnets.
Learn more about our security documentation on this page:
BifrostConnect Security Documentation
Want to learn more about Direct IP Tunnels?
Get in touch with one of our experts today.Explore related resources
Setting up the Bifrost unit is a straightforward process. Download the onsite connection guide here and learn more.
Download the technical specifications for the BifrostConnect unit.
Zero Trust Access boosts remote work, expands market reach, saves resources, and prolongs technology lifespan.
A Unified Remote Access Platform
Together as a suite, the BifrostConnect Solution gives you unmatched flexibility in tailoring your Zero Trust Access and scaling up your existing setup.
Secure
- Air-gapped remote access
- Out-of-band LTE connectivity
- End-to-end encryption
- Transitory session data
- Multi-factor authentication
- SAML integration
- Access management
- Audit logging
Versatile
- Direct IP Tunnel
- IP Tunnel sessions
- KVM sessions
- Terminal/Serial sessions
- SSH sessions
- File transfers
- BOOT/BIOS access
- Portable/On-demand
Plug and Play
- Support all platforms
- Offline Remote access
- Hassle-free implementation
- No network configuration
- Out-of-the-box commissioning
- No on-site configuration
- Easy to use
- Hosted Private Infrastructure


