Ameya, the cloud VPN service "Verona" new version, local breakout and IDAAS cooperation

Ameya's "Verona" is an Internet VPN service that supports both the base connection and the base access from the VPN client software.The feature is that VPN access can be accessed to bases where global addresses are not fixed IP, and the IP address system (for example, "192" (for example, "192" is the same as the VPN connection destination base at the time of connecting a base..168.1.0/24」）を採用していても利用できることである（図1、関連記事：網屋、専用ルーター機器で拠点間接続を容易にするクラウドVPN「Verona」を機能強化）。

When using Verona, a dedicated router device "V-EDGE" is required for each base.V-edge can be introduced by purchase or rental.Verona's cloud service plays a role in distributing the information necessary for V-Edge to communicate between bases to individual V-EDGE.He also plays the role of teaching V-EDGE IP addresses to the VPN client software "V-Client".

When connecting to the base, V-EDGE first accesses Verona to report his IP address (dynamic IP address) and internal LAN IP addresses.On top of this, the information reported by V-EDGE of other bases is obtained from Verona.With this mechanism, VPN tunnels can be set up between bases even without a fixed IP address.It has a unique NAT (address conversion) function, so it can be used even if the IP address of the in -house LAN is duplicated by the base.

Apart from the base connection between V-Edge, it can also be connected to an office network using VPN client software (V-Client).The PC (Windows, Mac OS) and smart devices (iOS, Android) with V-Client installed the V-EDGE IP address from Verona cloud services, accessed it, and set up a VPN tunnel.。

In the new version, the local breakout function was enabled when using V-Client (Fig. 2).For access to specific cloud services (specified in FQDN or IP address), access directly via the Internet without via a VPN connection to the office.As a result, the line load in the office can be reduced.In the new version, it can also be linked with external IDAAS such as Azure ID.User management can be unified by synchronizing user information with external IDaaS.In addition, the user authentication of the Verona standard client certificate can be used for the user authentication at the time of VPN access.

V-edge has three types depending on the application and performance.The performance of the entry model "Basic Type" is 120Mbit/s for VPN throughput, the simultaneous number of V-Client used for remote access is up to 10, and the limit number of V-Client licenses is 10.The size of the housing is 16 width.5 x depth 10.55 x height 4.3cm.The price (excluding tax) is the initial cost of 98,000 yen, and the service cost is 2450 yen per month.When renting, the initial cost is 5,000 yen and the service cost is 8,000 yen per month.

The price of V-Client is 500 yen per client per client for 10 to 100 licenses, which are the highest unit price.