Our company offers, IT Virtualization consulting services for customers seeking to interconnect their on-premise environment to AWS/Azure/Office 365 Network.
Our company works with different types of server virtualization solutions, ranging from AWS RD Gateway Implementation solution, AWS Workspaces, Azure and Office 365.
What type of Desktop Virtualization Solutions Our Company Offers?
Our company DBA Binary Fusion, subsidiary of Alpha Technologies, can help you integrate your existing application connectivity needs with desktop virtualization technology. Helping critical business applications get connected to your remote employees.
Site To Site Tunneling consulting connectivity from your on-premise environment to AWS. Types of Connectivity we can help customers accomplish.
- Routed Based DMVPN to AWS
- Routed Based through BGP between on premise vendors.
- Policy based site to site IPSEC routing.
- OpenVPN
- Strongswan
- Dockerized VPN
Our company offers, connectivity consulting services and solutions for your on premise employees, whether they are located in the office or remote using AWS Workspaces.
AWS Workspaces allows users from high latency networks be able to connect to a virtualized desktop, where instead of actual data being transferred only image pixels are being transferred to the users, making the connection a lot faster.
With AWS workspaces we can help you connect your high latency applications helping your employees stay closer to their applications.
With RD Gateway solution, we can help businesses similarly get connected to their applications just like with Workspaces or Azure AVD or Office 365 virtualization techniques, creating virtualized desktop environments on EC2 instances and proxying users through Native Windows RDP client.
This is different method of providing virtualization, and in some cases more preferred over AWS Workspaces. Due to some limitations in AWS Workspaces, or cost contributing factors.
Industries we service:
- Manufacturing
- Financial
- Professional LLCs
- Restaurants
- Construction
- Law
Azure AVD is another type of desktop virtualization technology that our company can help you integrate within your existing environment.
Note rendering speed is much faster for Windows native based systems when accessing applications while using Azure AVD solution. Plus it allows multi access level of communication across SMB file shares.
We can help your small or medium company leverage this virtualization technology as well, in some cases it’s more preferred than Workspaces.
Similarly we can help you integrate Office 365 virtualized desktops that also have their own advantages.
Challenging Types of AWS environments that we can help you navigate
AWS Environments with existing VPCs
- If you already have your environment setup, and happen to have bunch of EC2 instances hosting all sorts of applications, but not sure what changes to make and how to make them while providing capability for users to connect remotely, then worry no more, with our help we can evaluate your existing environment and provide concrete recommendations for what to change, when to change it, and how to do it with minimum impact.
- Our goal is to help your employees and consultants, get together in order to improve productivity, connectivity and security of your environment.
On premise to AWS using AWS Workspaces
Our company offers the following services.
- Creation of Virtual Private Gateways in AWS cloud.
- Creation of ACM certificates.
- Creation of Simple AD, or integrating with your existing AD.
- Maintaining and building your AWS Workspace images.
- Distributing AWS Workspace clients to the users.
- Monitoring AWS Workspace usage.
- Modifying Security Groups to allow access.
- Assisting your employees with AWS Workspace installation, troubleshooting.
- Level 2 Support
- Level 3 Support Engineering and Architecting your environment.
- Integrating your environment with your existing networks, DNS, Proxies, Load Balancers, Kubernetes clusters.
- Testing your environment and a lot more.
Virtualization Troubleshooting
Here is what we help customers with when it comes to making any of these virtualization solutions or VPN tunneling technique work for your environment.
When Troubleshooting AWS Workspaces
- We Verify if users have TCP and UDP connectivity.
- We verify entire Layer 1 through Layer 7 connectivity.
- We obtain Elastic IP Addresses and ensure that these IP addresses are allowed proper access.
- We debugging connectivity issues with ISP in the event session drops.
- We run Traceroutes, gather packet captures.
- We test out applications when logged into Workspaces.
- We troubleshoot MFA related issues.
What was just described is a partial list,
AWS Desktop Virtualization Management Servcies
Here are the services that we offer from AWS perspective.
- Design of your entire Virtual Architecture.
- Creation of EC2 instances with correct software installed.
- Creation of auto scaling groups, creation of AWS Workspaces architecture and integrations between AWS Workspaces and your existing EC2 servers.
- Creation of VPCs and associated EC2 instances with appropriate AMIs to run your vendors firewalls in the cloud. (this is for cloud to cloud security)
- Creation of site to site VPN connections, leveraging either routed based VPN approach or policy based VPN approach. (this is for interconnecting your other offices)
- Configuration and management of your AWS routing. (this is so everything is managed centrally and every node can get to the other node)
- Security group management. (this is to ensure security)
- Permission management. (this is to ensure that only right people get access to environment)
- Cloudwatch configuration for metrics and logs. (this is to visualize your AWS environment health status)
- Transit Gateway VPN configuration. (this is to reduce mesh peering between VPCs and centralized the connectivity across transit gateways)
- Virtual Private Gateway setup for small and medium offices. (this is a cloud native AWS VPN option to connect to other on premise sites or offices)
- Certificate ACM building, helping you create certificate authority and making certificate based authentication work. (this is so your security up to date, and your users don’t get warning with certs)
Cost Analysis & Savings
When many of our customers reach out to us, rarely does every customer know all the associated costs with the solution, simply because there are many factors associated with creating Desktop Virtualization solutions and building VPN tunnels and making them work with the cloud.
As part of our solution offering, we help customers pick the most optimal cost-effective options for their connectivity needs, and part of the engagement conduct Network Assessment, making sure that whatever existing infrastructure that you already invested is factored into the solution, helping customers save money.
AWS Cost Analysis for having site to site VPN or any type of VPN solution
As part of the solution, we help customers analyze licensing costs for AWS Workspaces or Azure AVD or Office 365 or Virtual Private Gateways or Transit Gateways in AWS helping customers make informative decisions about the cost factor prior to engaging with the solution.
We also help with AWS licensing cost analysis for ACM certificate management solutions for any EC instances that you may have that require careful tracking.
- For every location we recommend customers to use multiple types of solutions and VPN tunnels for redundancy, each tunnel has a cost factor associated with it.
- In fact we tell many customers to use multi cloud based redundancy setups, simply because we seen entire cloud going down.
- For example to some customers we recommend using AWS Workspaces, while in parallel for resiliency recommend customers setup docker containerized VPN tunnels across Kubernetes/DockerSwarm clusters, using something like Strongswan.
- For others we recommend something as simple as OpenVPN solution or WireGuard to connect from on premise to cloud instances.
Docker Virtualized VPN Gateway Instances
Docker Virtualized VPN Gateway Instances
Additionally, we help customers get connected using docker instances. Some of our customers have compliance requirements where every tunnel must be separated in a form of a distinct channel. Where multiple sites or IoT need to connect to a multi cloud network, spanning across different clouds.
- To do that we recommend customers virtualize tunnels within dedicated docker instances and run these tunnels across Kubernetes clusters or other types of clusters spanning across different clouds.
- Doing this approach makes VPN solution scalable, and at the same time distinct. This approach does have advantage of relying on distinct multi cloud based architecture, not dependent to the principles of single cloud provider.
- Using for example combination of multi docker based approach plus AWS Workspaces can provided companies high level of resilience, using distinct types of architectures, minimizing business disruption possibility.
With Dockerized Virtualized approach you are not exactly virtualizing the Desktops, but rather virtualizing the VPN channels, where each channel provides access to applications directly on your cloud networks.
The Dockerized use case can be very good one to execute for IoT tin the field type of applications, that require secured connectivity to cloud.
Docker VPN virtualization using Infrastructure as a Code
With Docker based VPN Infrastructure as a code comes to play
Whether you are a start up or a medium size companies or a large size company, you may have heard of Infrastructure as a code concept.
Setting up docker containers with VPNs running inside of them across different clouds and executing changes in each of these tunnels, maybe difficult thing to do without relying on some type of CI/CD pipeline.
- Our company can help you scale your existing connectivity whether it’s from on site offices or from mobile devices, or from IoT devices in the field.
- We have created CI/CD pipelines in the past that can help us orchestrate complex VPN tunneling connectivity needs across multiple geographic regions running across multiple cellular networks, helping customers maintain connectivity to their IoT devices or offices.
Bringing together multiple in office or remote users, Endpoints, or IoT devices in order to satisfy your company’s business case is precisely what we can help you with.
Desktop Virtualization technique is only one part of the puzzle. Many of our customers have many different integration needs and puzzles to solve, including network & desktop virtualization needs.
- Imagine bridging desktop virtualization technology with other facets of your business connectivity needs in order to improve security, connectivity and visibility.
- Imagine running less risky network.
- Imagine having less headaches with integration puzzles.
You do not need to imagine anymore, contact us to help you with your use case. Helping you take your connectivity needs under control, while minimizing costs.
Licensing cost Analysis
When purchasing any type of desktop virtualized solutions, equipment or software relevant to firewalls, or VPN termination devices there are always licensing fees.
We can help you analyze these licensing fees and pick the right partner for your connectivity needs.
We are vendor agnostic
It doesn’t matter with which vendor you are dealing with, we are vendor agnostic.
- Some vendors may be better than others when it comes to individual solution needs.
- Our role is to recommend the best vendor to help you save money
- Regardless if you are looking for firewall in the cloud solution, Desktop Virtualization or Zero Trust type of solution, we can help you integrate it.
Our Alpha Technologies team don’t speak the vendor language, but rather speak the protocol language.
Think of it this way, every vendor who builds some type of solution is relying on some type of protocol to make the solution work.
Our company has specialized IT Network & Security Consultants who are well versed with both on-premise and cloud types of Network and Desktop architectures, regardless if it’s AWS, Azure, Google.
Why use Virtualization Connectivity solution?
Problem
Connecting over high latency networks can be problematic for some business applications.
Many small businesses rely on VPN to connect to some of their in cloud or on premise applications. However, some applications such as Quickbooks for example doesn’t behave well when it comes to using VPN to connect to a Quickbooks server.
Mainly due to CIFS SMB protocol being too chatty and Quickbooks application not being able to pass multi access traffic from client to server.
OpenVPN over port 443 or IPSEC does not solve the problem either. Quickbooks company file can become corrupt when accessing over VPN.
What about Integrating Virtualized solution with other parts of the network?
We realize that customers run many different applications that may already exist in the cloud and that may require additional integrations in such a way that for example AWS Workspace or RD Gateway solution makes it possible for application servers to communicate with Active Directory, while allowing users to leverage Multi Factor Authentication when connecting through AWS Workspaces.
Which is precisely the reason why we created this service. Navigating across complex heterogenous networks that makes it possible for customers to connect with one another, while bridging the boundaries of remote employees and in office employees is not exactly a walk in the park.
Any wrong move and you are at risk of either exposing the wrong port to the internet or increasing risk without even knowing it.
Luckily our company is not just an infrastructure integration company, but also security eccentric type of company helping your network stay secured and connected.
Solution
Use Virtualization Technique to solve Quickbooks problem
AWS | Azure AVD or Office 365 or Citrix
The answer to solving the problem with Quickbooks or any type of non CIFS/SMB friendly application is to use some type of virtualization technique that can help your client application be closer to the server application.
The idea is to place the Quickbooks client on the same subnet as the Quickbooks server. To do that you will need to construct either AWS Workspaces or AWS Remote Desktop Gateway topology within your AWS environment.
Where users technically will have AWS Workspace client and can connect to AWS Workspace jump box server, with Quickbooks client installed. Then from that Quickbooks jump box server within the virtualized desktop be able to open Quickbooks server and view company’s file.
Alpha Technologies can help you construct such type of AWS solution, alternatively we can help you do this is Microsoft Native environment such as with the help of Azure AVD or Office 365.
Typical Example of what our customers ask us to do
Quickbooks remote users need to connect to open up Quickbooks app
We get some customers who reach out to us and ask us to figure out how to connect their CIFS/SMB applications such as Quickbooks to their remote employees.
- Problems that we instantly see with customers is the fact that solutions that rely on VPN do not exactly work with the Quickbooks.
- To solve this problem, we advised the customer to bring the data closer to their Quickbooks Server.
- In this case we explored several solutions initially we tried Sophos Firewalls with site to site IPSEC VPN tunnels from office where users were residing to AWS using routed VPN tunnels.
- That approach worked for some applications, but only was relevant for in office users and not exactly for out of office users, and this approach wasn’t working with Quickbooks.
- In simple words, users were able to open up file shares, but Quickbooks was too sensitive to limitations of CIFS protocol being too chatty, as a result of that chattiness, Quickbooks file simply couldn’t be opened.
- Traditional IPSEC VPN tunnels didn’t do the trick.
- Then we tried OpenVPN which basically uses port 443, slightly similar concept, and although this helped remote users to connect to all sorts of other applications that customers had in AWS cloud, Quickbooks application still had the issue.
- At this point we knew that unless we make Quickbooks client reside on the same network as Quickbooks server, our chances of success would be slim to none.
- Customer was happy with his OpenVPN solution since it did provide alternative method of architecture for his remote work from home users and in office users as oppose to using Sophos, but not happy about not being able to open up Quickbooks.
- Explaining limitations of CIFS protocol to typical customer, is not exactly easy thing to do. In customer’s mind they think application should be able to open regardless where it sits.
- Several approaches were researched to address customers problem, these approaches included AWS RD Gateway and AWS Workspaces.
- Upon trying to use AWS Workspace to connect to existing EC 2 Quickbooks server instance, surprise, surprise, even with AWS workspaces access to the Quickbooks server wasn’t possible to achieve.
- We did end up using other type of solution with RD Gateway to achieve it, with specialized load balancers and auto scaling groups.
- We also helped customer integrate Simple AD with his users.
Whatever the case is for every problem there is a unique solution.
Whatever the case is for every problem there is a unique solution.
- In the case of this situation perhaps easier solution could have been to add Quickbooks Server on the same subnet as Workspace client…. but customer wasn’t willing to do that… and preferred another approach instead.
- At the end of the day, customer was happy with all approaches that we iterated through.
- This type of engagement just shows you how many different POCs and iterations we go through.
- For something that we have done before we can gladly do POC for your company, before engaging into actual solution to help you gain degree of confidence.
- However, if it’s something new completely new and application is home brewed or highly sophisticated and running on incompatible with network protocol such as SMB/CIFS, that POC will not exactly be free of charge.
- For the simple reason of complexity and different variables as what you just seen in this use case.
If you have an existing start up company or small company or medium size company and seeking to construct some type of solution to help your business connect. Then don’t hesitate to reach out to us for your assessment, customized presentation, demo and POC free of charge prior to engaging with us.If POC is outside of our comfort zone, then there will be fee associated with that, depending on the level of complexity and research that would need to do.
Additional Services for Identity Validation and Network Monitoring
In addition to offering Desktop-Network and Application Virtualization services our company also offers multi factor level of validation across either certificates or other validation characteristics helping your networks stay secure.
We also can help companies visualize their entire environment in tools like New Relic,DataDog, LogicMonitor, SumoLogic, AppDynamics, Zenoss or Splunk, Solar Winds.
For more info visit our monitoring services.
- Connecting through VPN is one thing, but ensuring that the person who connects to your VPN is legit company’s employee is another.
- Imagine being able to visualize your configuration changes on switches, routers or firewalls, as well as changes within your infrastructure environment ranging from actual physical infrastructure as well as cloud, whether it’s Kubernetes clusters or Serverless Microservices.
- Imagine being able to visualize business transactions as it pertains to generic health score of your entire application or business service, or being able to visualize unique business processes not just from metric standpoint, but from logs.
- Imagine being able to visualize distributed tracing patterns as users navigate through different types of business transactions and how overall health of your application depends on the infrastructure components, application components and other dependencies.
- Imagine being able to visualize even complex recurring events that need to be factored into alerting, but require intelligent logic adjustment.
- Imagine being able to suppress alerts and tackle seasonal type of data, in order to minimize risk of not being alerted when you needed vs when alert is not really needed.
- Imagine being able to have predictive and forecasting monitoring that can combine previous cyclical data in combination with other factors that are relevant for your environment and be able to get alerted on that.
- Imaging having different types of dashboards for compliance, operational level and many other levels, in combination with repots being sent to you or other team members helping your team minimize risk and look like a super hero.
Imagine being able to see when failover happened, at what time, when the VPN tunnel failed, and be able to see it all in the same screen with the business services that were impacted around the timeframe when connectivity was down.
Imagine being able to visualize your Virtual Private Gateways their connectivity status, what tunnel is up, what tunnel is down, as well as other statistics, from your on premise firewall and be able to see health of your environment.
Well with so many imaginative points... described above, you do not have to imagine anymore.
Simply reach out to our DBA Binary Fusion company tell us your use case and we’ll hit the ground running supplementing your existing IT Staff with super charged monitoring and cyber security expertise, that can help your organization reduce risk and best of all tackle complicated tasks that otherwise would not be possible to tackle without a strong IT Security and Network/Application monitoring expertise.
When contacting us, simply let us know the use case you are working on, what you are trying to integrate, what you need monitored, how you are trying to integrate, what tools you already invested and need help with. Or simply describe the challenge you are facing. Our company is very agile and flexible in the way we conduct business. If interested in our services feel free to reach out to us, so we can share with you some of our service offering demonstrations and see if we can do POC or POV for you.
We work with financial organizations as our core expertise, but also service other types of industries ranging from real-estate, manufacturing, professional LLCs, accounting firms, health/medical dental, entertainment industries and other types of industries.
In Summary
- Desktop Virtualization configuration can be very challenging and almost impossible to configure without advanced knowledge in security and networking protocols.
- Our company makes the complexity fade away.
- Picking DBA Binary Fusion subsidary of Alpha Technologies as your company’s IT resource for advanced type of networking integration will help you save tons of time, doing it yourself.
- Reach out to us, let us know your use case, we can get together analyze what you have, and provide your recommendation on how to move forward with what tool, what to monitor, how to monitor it and can also provide you presentation for some of the services that we did for our other customers in the field of Machine Learning, Certificate LifeCycle Management, Network Monitoring and beyond.
- If interested send an email to [email protected] and simply let us know your name, company name, phone number, and what you are looking for, or alternatively contact us by the phone number shown on the top right corner of this website.
- Thank You for taking your time to read about our Logic Monitoring Services and Solution Integration services.
Industries We Service and help customers integrate Multi Factor Solutions
Travel and Aviation
Consulting
We help companies monitor Airport Networks and ATM devices, as well as wireless access points.
Financial Services
Consulting
Our company helps Loan Processing firms, Banks, and other financial institutions monitor combination of both on premise and in cloud resources.
Education
With Entuity we can monitor Campus networks for real time changes on infrastructure such as firewalls, routers, switches, SDN controllers.
Law Firms
We also work close with Law Firms and other types of legal organizations seeking to monitor their cloud and on premise resources.
Manufacturing
Our company can help customers add foam spray pumps, or any other types of manufacturing devices, or IoT devices into Entuity monitoring software.
Accounting and CPA firms
Our company helps CPA accounting firms monitor their network for newly discovered devices, and changes in data.
VPN Firewall and Router Vendors we can connect to AWS
We can help customers with their UTM and Sophos XG or other firewall models get connected to AWS cloud.
We can work with Cradlepoint IBR routers and other types of cellular routers to help you create SDN solution with direct access to the cloud over OpenTLS.
We can help your company have secondary level of remote IPSEC access directly to Pulse Secure Appliances installed in the form of AMI in AWS cloud.
We can help customers get integrated with Zscaler as primary method of communication for remote access VPN, with combination of some other vendor like Pulse Secure in AWS as secondary vendor.
We can help customers create VPN tunnels through transit gateways to CSRs hosted in AWS cloud from the remote branches and we can help run EIGRP over DMVPN tunnels or even OSPF.
We can work with GAIA R77 and up version appliances helping customers get connected to the cloud in either routed or policy based routing way.
We can help customers with Cisco ASA connectivity to AWS cloud, using active and standby type of fail over methods.
We can help with Edgerouter connectivity from behind the NAT devices.
We also work with customers who have FortiNET environment and seeking help to interconnect their on premise networks to AWS cloud either through built in native features of AWS using virtual private gateways or to Fortigate Appliances in AWS cloud.
Problems and AWS VPN Tunneling Solutions
With our AWS VPN tunneling solutions we can reduce the amount of complexity to minimum, helping you take control of your cloud based network, and assisting you with creating secure inter-connectivity.
Our company can help you dissect cost factors and provide you with recommended cost optimal VPN solution.
We can help you manage both of your environments, document your entire cloud based architecture as well as on premise architecture and also help you monitor it.
We can help you manage your VPN endpoints with certificate based authentication. We have dedicated solutions for CLM and PKI management, making certificate renewal easy to do.
Indeed, with new applications come and go, it can be tricky managing security groups. Our company can help with AWS Security management as well.
We have dedicated scanning and patching solution just for the vulnerabilities, and not only for the firewalls that terminating your VPN tunnels, but for other devices as well.
If you have DMVPN tunnels that needs integration with AWS we can help you integrate them helping your offices be directly connected to the cloud through DMVPN.
Other Integration and IT Services Similar to AWS VPN Tunneling Solutions that we offer
-
AlphaCICE & Alpha FusionView Service Details
Read moreMinimize false positive, duplicate alerts with AlphaCICE central intelligence correlation engine. AlphaCICE and unify all of your tools AIOPS events in a single pane of glass with Alpha FusionView. See how Alpha FusionSmart Enterprise Monitoring service that Alpha Technologies offer ties it all up together in context of multiple ITIL best practices phases.
-
AlphaCICE – Central Intelligence Correlation Engine
Read moreMinimize false positive, duplicate alerts with AlphaCICE central intelligence correlation engine. AlphaCICE is a custom solution and service offered by Alpha Technologies that is specifically designed for financial industries seeking to take control of their incident management process. Incident Managers can maximize their operational effectiveness through streamlined operationalized workflows, by relying on correlated supervised and unsupervised AIOPS classified intelligence fetched from your already existing monitoring tools. AlphaCICE is explicitly designed to reduce multiple events into a single actionable event that matters most, by empowering data owner operators with prescriptive & AI & ML driven recommendations
-
Alpha Digital Transformation of Applications & Tech Stack
Read moreAlpha Digital Transformation solutions for all size businesses seeking to secure their legacy application in order to minimize risk, while in parallel migrate the application and tech stack into modern API invokable and event driven ecosystem helping data owners get closer to their data.
-
Alpha AWS | AVD | Office 365 Virtualization Solutions
Read moreAWS Desktop and Network Virtualization solutions and services for small, medium & large size companies seeking to solve high latency connectivity related problems, while maximizing security.
-
Alpha FusionChain Innovative Solution for BlockChain Database and Monitoring
Read moreMigrate Your Legacy applications to Blockchain faster and safer without disruption of the existing workflow. With our tool kit we can help companies build, deploy maintain and manage Blockchain architecture helping you revolutionize your microservices and decentralized architecture. We can build Blockchain networks for multiple use cases ranging from NFTs, Crypto, MetaVerse and beyond.