NetMotion Mobility

Must use Microsoft Intune, System Center Configuration Manager (SCCM), or PowerShell to configure and manage VPN clients.NetMotion MobilityI’m excited to announce I’ve recently partnered with NetMotion to provide their secure remote access solutions to organizations looking for alternatives to DirectAccess and Always On VPN. NetMotion Mobility provides the same seamless and transparent, always on remote access with some additional important features not included in DirectAccess and Always On VPN.Broad Client Support – NetMotion Mobility can provide DirectAccess-like remote access for all versions and SKUs of Windows as well as Mac, iOS (iPhone and iPad), and Android.Enhanced Security – NetMotion Mobility includes fine-grained policy enforcement to restrict network access based on a wide range of parameters including IP address, protocol, port, application, time of day, location, and type of network (e.g. wired, Wi-Fi, wireless, etc.). NetMotion Mobility also includes integrated Network Access Control (NAC) to validate device configuration prior to connecting, ensuring the highest level of security for remote endpoints. More details here and here.Improved Performance – NetMotion Mobility client to server communication is optimized to improve reliability and performance. Network traffic is compressed and prioritized to ensure optimum performance for critical applications. Session persistence allows mobile workers to remain connected during times of poor connectivity or when roaming between different networks. More details here.Greater Visibility – NetMotion Mobility provides a wealth of detailed information to perform analysis and troubleshooting for remote connections. Performance and diagnostic information is logged in real-time and provides administrators with crucial data and insight to quickly

Mobility client policies give you flexible control over network traffic, dynamically accommodating changes in network conditions and user requirements. Policies can filter both inbound and outbound TCP traffic. A few examples of the ways you can use Mobility client policies include:•Blocking selected applications from running over a slower network interface (for example, a WWAN), but allowing them to run when the Mobility client device has a faster network connection. •Controlling user access to applications, hosts, networks, and subnets on internal and external networks.•Optimizing web downloads based on interface speed.•Setting Quality of Service (QoS) parameters to maximize performance of real-time applications, such as voice over IP or streaming video.Policy management requires a separate license in addition to the basic Mobility server license. You can create client policies on any Mobility server, but the server sends policies to client devices only if the pool has a valid policy management license. For licensing information, see Mobility Licensing.Related Information©2017 NetMotion Wireless, Inc. | NetMotion Mobility® Server v11

Mobility can optimize HTTP content requested by the Mobility client, selectively reducing the size of GIF and JPEG images for faster download. Using policy, you can configure the amount of web acceleration you want to do. For example, you can set it to fastest, as in these two examples here, based on the connection speed, or whether the connection is a metered one.Example - Set web acceleration to fastest on WWAN When the interface speed is very low (less than 11,000 Kbps) the Mobility client is probably using a WWAN. In this case you may want to opt for the maximum web acceleration; the trade-off is that optimized images have fewer colors (GIF) or a “blocky” appearance (JPEG):Example - Set web acceleration to fastest on a metered connectionIf the interface has a cost, trade off some image quality in order to save money. This policy condition is available only for users running Windows 8.1 and later; in addition they must be running v10 or later of the Mobility client.©2017 NetMotion Wireless, Inc. | NetMotion Mobility® Server v11

This topic describes how to add the NetMotion Mobility (RADIUS) app and then assign it to groups. Before you begin Ensure that you have the required common UDP port and secret key values available. Add the app In the Admin Console, go to . Click Browse App Catalog. Search for and select NetMotion Mobility (RADIUS), and then click Add Integration. Enter a unique app label, and then click Next. Select the Sign-On Options tab, and then do the following actions:Select the Okta performs primary authentication checkbox.UDP Port: Enter a port number, like 1812. The UDP port values of the app and the client gateway must match.Secret Key: Enter the secret key that's used to encrypt the user password. The secret key for the app and the client gateway must match.Application username format: Select an appropriate username format from the dropdown list.Update application username on: Determine when the username is updated in the app. You can update it when it's created, or when it's created and updated. Enable an authentication protocol:Scroll to the Authentication Protocol section of the Sign On tab.Click Edit. Select an authentication protocol:Use EAP-TTLS authentication: Upload the server certificate chain and entity private key. See About certificates. Enter the password used to protect the certificate and key. Okta recommends password-protecting certificates and keys. Select the Transport Layer Security (TLS) version.Use PAP authentication: Select this option to use Password Authentication Protocol (PAP) authentication. When you select this option, the Require Message-Authenticator for incoming client requests checkbox appears. Select this option to require and verify the Message-Authenticator attribute and create a more secure authentication process.Click Save. Enable authentication with Active Directory (AD) UPN or the AD SAM account name:Scroll to the Advanced RADIUS Settings section of the Sign On tab.Click Edit. In the Authentication section, select Enable UPN or SAM Account Name Login.Set the usernames for users who are assigned to this app to the AD user principal name before you assign the RADIUS app to them. The SAM account name must have the same prefix as the UPN.Click Save. Scroll to the Settings section of the Sign On tab.Click

Absolute Secure Access - Built from ground up for mobility and the modern edge Beginning with version 12.70, NetMotion Mobility is rebranded as Absolute Secure Access. Software and documentation reflect the new naming, including graphics, icons, fonts, and color schemes. The Absolute Secure Access product portfolio provides resilient network connectivity for users to securely access critical resources in the public cloud, private data centers, and on-premises. These products allow users to transition from traditional VPN to a resilient Zero Trust approach, without impairing productivity or administrative controls.Absolute VPN provides security and confidentiality for data in motion by means of encryption and access controls. It also offers benefits to the end user, such as making tunnel and network sessions resilient and optimizing streaming video and audio.Absolute ZTNA provides a software-defined perimeter via Zero Trust Network Access, creating a context-based, logical access boundary around an application or set of applications – wherever they're hosted. It shields applications from the Internet, making them invisible to unauthorized users. Access policies are enforced at the endpoint, avoiding latency and any data transgression.Absolute Insights for Network offers diagnostic and experience monitoring capabilities across endpoints and network, allowing organizations to proactively monitor, investigate, and remediate end user performance issues quickly and at scale, even on networks that are not company-owned or managed.All clients require a licensed server to work.

Front of servers to gate access to them. They connect two network domains together and perform networking functions such as routing, network-address translation, and load balancing to direct traffic from one user or application to another, Arras says.In micro-service contexts, the proxy may be integrated into the micro-service fabric, such as in the case of the envoy proxy, an open-source edge proxy used in micro-services. In an Istio service mesh, for example, the envoy proxy can be used to connect micro-services so that mini-apps can securely communicate with each other in an open-source service mesh that layers transparently onto existing distributed applications, Aras says.Zero Trust Network AccessBecause of its strict authentication and tightly restricted network access, SDP is a vital part of Zero Trust Network Access (ZTNA), which is based on the premise that no device is ever really secure. “There’s no safe perimeter anymore due to workforce changes, microservices-based applications that can scatter components virtually anywhere, and the increasingly collaborative nature of business processes,” Skipper says, “There is no device that’s safe: no smartphone, no desktop—period.”Addressing ZTNA requires tightly controlled network access and limited authorization, and SDP is a good place to start. “SDP helps users to properly authenticate before access is provided, and only to applications to which those users have been granted access,” Henley says.Henley estimates that there over 20 vendors currently offering SDP products, including Akamai (Enterprise Application Access),, Cisco (Duo Beyond), Ivanti (Ivanti Neurons for Secure Access), McAfee (MVISION Private Access), Netmotion (NetMotion SDP), Verizon (Verizon Software Defined Perimeter), and Versa (Versa Secure Access Client).Deploying SDP also doesn’t free enterprises from the responsibility of maintaining existing security practices. “No matter which security technologies your organization implements, or what it may be called, knowing what your important data is, and where it’s located, is the key for knowing how to protect it,” says Steve Jaworski, supervisor with audit, tax, and consulting firm RSM US.Remember, too, that deploying SDP is not a once-and-done deal. “It’s important that organizations actively monitor and upgrade SDP software as required,” Jaworski advises. “In addition, tests should be conducted to ensure the