Apoyar Infrastructure Security
We have 2 ESX host, 1 Disk array these provides access to VM’s
We have separate server Vcentre, which is a physical server and provides
- management over vpshere
- access to VM’s
We have firewall called Juniper (2 firewall), if one fails other starts
Also we have Clavister, which has same level as Juniper. Clavister has better support for different types of VPN
It supports 3 types of VPN
- L2TP
- IPsec (used to connect customer’s)
- OpenVPN
Connecting any of Apoyar server
Weather we are connecting through OpenVPN or L2TP, we always getting through Clavister.
For connecting using OpenVPN, we just need AD logins
If we are connecting as L2TP user, it uses passphrase
If we are connecting from any AWS console VM, it uses certificate
Certificates on AWS RMG server
Login to rmg.aws.apoyar
• Cd /etc/isakmpd
• cd ca
• ls
ca.crt (this is the certificate authority of mother or father certificate)
It is only saved on clavister (one copy)
Also on each AWS console machine, its only get compared not sent
To see certificates
• openssl x509 –in ca.crt –text –noout
To check local certificate
• Cd ../certs/
• openssl x509 –in local.crt –text –noout
these certificates contain the information related to
• Issuer
• Customer
• Expiry
• DNS