Cloud Security

Internet Gateway Selection Feature on CloudConnexa

Easily control where internet traffic exits from your network with CloudConnexa.

You’ve deployed internet gateways. Now, you need a way to route the traffic — securely, from your networks, hosts, groups, and users with the flexibility to control where the exit takes place. This is all possible with Internet Gateway Selection, a new feature of CloudConnexa, that lets you configure how internet traffic is routed from your hosts, groups, and users.

In this post we look at how efficient gateway selection helps:

  1. Optimize security processing of traffic. 
  2. Ensure load balancing over multiple gateways.

Use Case: Pre-programmed Internet Routing

As a rule, CloudConnexa optimizes internet routes based on 1) the Region being used by the remote user, and 2) the Regions that connect the Network serving as an Internet Gateway. We took the complexity out of configuring routing logic with our automatic smart routing. This uses insights based not just on geographical proximity, but also network performance to enhance your secure connectivity.

We took the complexity out of configuring routing logic with our automatic smart routing.

For example, one Network configured as an Internet Gateway has one Connector using the San Jose Region. The same Network has another Connector using Chicago. In this case, traffic from a remote worker connected to Los Angeles will be routed via San Jose, and traffic from a remote worker connected to Ashburn VA will be routed via Chicago.

The routing logic is not based on geographic proximity alone. It also takes network characteristics into account. The scenario described above is sufficient for general internet access. But what if you want to use a configured relationship between the preferred Gateway Network and a specific User Group, Network, or Host?

An example of this would be if one of the networks serving as an Internet Gateway has an inline CASB (Cloud Access Security Broker) that only applies to a User Group using SaaS applications. To reduce the load on the appliance only that User Group can be configured to use that specific Network. At the same time, other User Groups that don’t have or need additional security control can be configured to use other Networks for Internet Gateway functionality.

The OpenVPN team developed this to meet the need of customers who want to override smart routing and set up a relationship between User Groups, Networks and Hosts and a set of Networks that serve as Internet Gateways. If more than one Network is chosen, or if the chosen Network has multiple Connectors connecting to different Regions, smart routing will still be used. In this case it will route among the multiple Networks and Connectors chosen as Internet Gateways for specific User Groups, Network, and/or Host.

Getting Started with CloudConnexa is Easy — and Free

Remote and hybrid workforces are the new norm. Your employees need internet access from anywhere at any time — and each demands different access controls. CloudConnexa optimizes routing traffic, making it easier to manage a hybrid global workforce accessing data and applications within your network and from the internet.

CloudConnexa users can learn how to override smart routing, move away from a one-size-fits-all security approach, and reduce the load on your network to save your business time and money here.

Don’t have an CloudConnexa account yet? Get your three free connections now.

Share this story: