LANCOM Trusted Access supports not only classic full network access as a VPN client, but also the migration to a zero-trust security architecture with comprehensive network security—from small commercial businesses to large enterprise customers. Up to 3 devices are supported per network user.

Granular access control based on the zero-trust principle

By assigning access permissions according to the zero-trust principle “as much as necessary, as little as possible”, the Trusted Access Client protects networks from threats and their propagation. What this means is: Successful network authentication is not the same as blind trust. The LANCOM Trusted Access Client verifies each user and grants access only to dedicated applications that are specifically enabled for a user group. This minimizes the potential for attack and prevents security threats from spreading laterally in the network.

Cloud-managed VPN client

For full access to a network, the LANCOM Trusted Access Client can also be used as a cloud-managed VPN client for the secure and central management of VPN connections of mobile employees.

Cloud management for reduced operating costs

In all operating modes, the roll-out of security profiles, client configuration, and monitoring is performed via the LANCOM Management Cloud, which is a central instance that manages all LANCOM network components centrally. Changes to the configuration are easy and efficient, and new users can be easily added or removed without requiring the IT administrator and the end device to be physically on site. This convenient management, coupled with transparent user monitoring via the LANCOM Management Cloud, reduces operating costs by making all clients on the network centrally accessible in an instant.

Endpoint security and multi-factor authentication

Before a user is granted access, the endpoint security can also be checked in terms of operating system version, virus protection, and local firewall. Further, each user must verify their identity and have the necessary authorization before being granted access to any application or resource. Applications and resources are not displayed across the whole network, making them invisible to attackers. Also, multi-factor authentication by means of fingerprint, face recognition, or a smartphone-based authentication app can be required when logging in.

Integration of existing user databases

Network user authentication runs via a central user database (an identity provider, e.g. an Active Directory such as Microsoft Entra ID, formerly Azure AD). As an alternative for smaller companies that do not have a central user database, the LANCOM Management Cloud offers its own integrated user management.

Full integration into the LANCOM Management Cloud

The LANCOM Management Cloud offers fully integrated management of all LANCOM network components (routers/gateways, firewalls, switches and access points) including the LANCOM Trusted Access Client. The underlying security policies for all network users are also managed centrally via the LANCOM Management Cloud. Administrators can use the LANCOM Trusted Access Real-Time Dashboard for comprehensive diagnostics and troubleshooting.

100% digital sovereignty, 100% GDPR compliant

The LANCOM Trusted Access Client and also the LANCOM Management Cloud are developed in Germany, and all cloud data is also hosted at data centers in Germany. The only data exchanged with the LANCOM Management Cloud is that required for user authentication, all other traffic data runs directly between the LANCOM Trusted Access Client and the LANCOM Trusted Access Gateway—without break-outs through an external cloud. The LANCOM Trusted Access Client stands for maximum data security and data protection. It is subject to and complies with European legal standards, making it a GDPR-compliant IT-security solution “Made in Germany”.

The LANCOM Trusted Access Client will be available for Windows 10/11 from November 2023. Licenses are available over various terms (1, 3 and 5 years) and in different volumes (1 / 10 / 25 / 100 / 250 / 1000 users). Service providers have the option of a pay-as-you-grow model with monthly billing. A 1-year license costs EUR 74 RRP excl. VAT.

Notice:

The LANCOM Trusted Access Client requires the LANCOM router acting as the central access gateway to operate the firmware version LCOS 10.80, and the LANCOM R&S®Unified Firewalls to operate LCOS FX 10.13.

Further information is available from the LANCOM web site, web site: https://www.lancom-systems.com/products/router-sd-wan/remote-access/lancom-trusted-access-client.

Screenshots can be found here:

https://i13.mnm.is/anhang.aspx?ID=0ae287f78545439233