optimization over inmarsat products - digital ship · 2014-01-23 · optimization over inmarsat...
TRANSCRIPT
Bandwidth
Speed offerings on FleetBroadband
Flee
tBro
adba
nd 1
50
• Upto 150K • No
streaming
Flee
tBro
adba
nd 2
50
• Upto 284K • Streaming:
8 – 128K
Flee
tBro
adba
nd 5
00
• Upto 432K • Streaming:
8 – 256K
Bandwidth
Speed on Ku-Band with XpressLink
Bandwidth is the important factor, on both systems
Upload Speed Download Speed Burst* CIR** Burst* CIR**
Basic 128 32 128 32
Pro 256 64 256 64 128 32 384 96
Premium 512 128 512 128 256 64 768 192
Managing the overall process
Phase 1
Equipment Installation of Satcom equipment Configuration – what must be known beforehand How much Bandwidth? Survey the network
Phase 2
Protection Don’t just leave as an open connection Plan what to allow Consider web site access
Phase 3
Maintenance Easy configuration
Must be simple to maintain or will fail
Three stages
Configuration options
Configuration possibilities on FleetBroadband terminals often overlooked or not understood
Network User Groups
MAC Address filtering
Firewall configuration
Restricted dialing
SMS Activation
Remote Maintenance
FleetBroadband
How to view your vessel
Is it a standalone network? - Often the default view
- Each vessel may have its own software
- IT Policies would be unique/harder to standardize
Will it be an extension of the owners office? - A common approach
- Can be easier to secure
- IT policies can be carried over
Providing
What do you want to provide?
If Crew Welfare: - What is acceptable?
- Is there a “light” site
- Compression?
For legal downloads – no problem
Premise is logical
Not so logical for Per M/Byte plans!
Not so logical for any communication network!
All that glitters is not Gold!
Peer 2 Peer
FleetBroadband Do I need Streaming?
Some applications may require dedicated connections from time to time
Bypass security... What is important to consider? •How easily can it be done? •Securing •Failsafe
•Consideration of punishment
Management
Threat: Any activity that has the potential to damage your computer and/or network
Vulnerability: A weakness than can be exploited
Attack: A deliberate attempt to bypass security
Threats, Vulnerabilities & Attacks
IT Security
Policies, Procedures & Awareness
Physical Access
Lock away
Sensible precautions
Network Security
Internal threats
Application/Data Security
Prevent propagation of unwanted files (Virus’s)
Defences
IT Security
Keep it simple
What should you concentrate on!?
Firewalls
User awareness
Corporate IT Policy
Physical Security
The list is endless…
Maintenance
And the old favourite…
(URGENT BUSINESS ASSISTANCE STRICTLY CONFIDENTIAL) COMPLIMENTS OF THE SEASON Good Day! I am the manager of bills and exchange at the foriegn remittance department of the (ABN AMRO BANK AMSTERDAM ). I am writting you this letter to ask for your support and co-operation to carry out this transaction. We discovered some abandoned sum $15,500,000(FIFTEEN MILLION, FIVE HUNDRED THOUSAND U.S DOLLAR ) in an account that belongs to one of our foriegn customer who died along-side his entire family in march this year in a terrorist train bomb blast in Spain some few months ago.Since this development,we have advertised for his next of kin or any close relation to come forward to claim this money,but nobody came yet to apply for the claim. To this effect,i and other official in my department have decided to look for a trusted foriegn partner who can stand in as the next of kin of the deceased as we cannot do it only ourselves and claim this money.We need a foreign partner to apply for the claim on our behalf because of the fact that the customer was a foreign and we don't want this money to go into the treasury as unclaimed fund. Every document to effect this process will emanate from my table and i will perfect every document to be in accordance with the banking law and guideline,so you have nothing to worry about and we have agreed that 30% of this money will be for you,while 10%will be for any expenses incured on both sides wihile 60% will be for my colleagues and me. If you are willing to help us,please indicate by replying this letter and putting in your name, private telephone number,fax and permanent residential address via my private email address below.I awaits your immediate response to enable us start this transaction as soon as i recieved your reply,i will send you a text application form for immediate APPLICATIION OF CLAIM. Please contact me even if you are not intrested in my proposal to you to enable us scout for another partner in the event of non-interest on your part. Thanks for your co-operation E-MAIL :[email protected] Mr Piet Van Jan
A managed solution with scalability
Seamless switching/One IP address
Fully Managed
On-board – The G5
On-shore – Trench & Unified Threat Management (UTM)
XpressLink
XpressLink
Seamless and managed switching
Based on Thresholds rather than “no reply”
One Public IP*
Individual IP to POP also available
Seamless switching
* Same public IP is dependant on which port on the switch user equipment is connected to. Only one port is configured to offer same public IP
XpressLink IP Solutions
Select home POP close to Office HQ
Internet Access
Optional VPN Access
Optional MPLS Access
Benefitting from VSAT (iDirect) and FleetBroadband built in TCP Acceleration
On-board Corporate and Crew/Client LAN
* Same public IP is dependant on which port on the switch user equipment is connected to. Only one port is configured to offer same public IP
XpressLink XpressLink VSAT VoIP
Optimised G.729 Codec
FXS and E1(ISDN) interface available
Connection to on-board PBX (via optional E1/T1 int.)
Standard 4 FXS
Option – 8 FXS or more
QoS and MPLS in place to guarantee high quality
To ensure high quality – Latency, Jitter and Mean Opinion Score (MOS) monitored
Multiple numbers and locations
XpressLink XpressLink Group QoS
Powered by iDirect GQoS
Differentiate priority of traffic - Corporate
- Crew
Prioritize applications, ports and IP addresses based on customer request
XpressLink
Full automated management
Automated Power-down/up sequences
Intuitive touch screen interface
Permission based – restrict access
On-board – the G5 Controller
G5 Video goes here. Once I see the video I can create a narrative to go along with it
Fully managed On-shore – Inmarsat
Fair Access Policy applies for the XpressLink Basic, Pro and Premium products
This does not apply to customers who have dedicated bandwidth service (XpressLink Custom)
Use of voice service delivered by others than Inmarsat Maritime over this system is not allowed (i.e. Skype)
Use of file-sharing, streaming audio or video content is not allowed. Any attempt of altering the way of transfer streaming audio/video content is not allowed, (i.e. download and transfer audio/video files via other protocols like ftp, email or other applicable transfer methods)
Use of WAN accelerators or optimizers or other techniques requiring more than 50% continuous utilization is not allowed
Fully managed Unified Threat Management (UTM)
Onshore Firewall at Inmarsat POP’s
Application filtering
Web filtering
• Category filtering
• Black/White listing
• Web reputation
• More than 75 web content categories, and more than 47 million rated websites - all continuously updated
Data history reporting
Maintenance
How can you keep control while you’re not on the ship?
What are my options?
Are you alone in the world?
Keeping Control - Remote Access
Recommended on Static connections
Dynamic no issue
Allows access to Dashboard only
SMS Activation
Remote connection activation
No need to get crew involved
Simple maintenance
Keeping Control - Remote Access
Single Public IP
Always-on connection
Free service. Not chargeable to the end user
XpressLink
Keeping control – JRC, Satlink, Furuno and failsafe
Go “Old School”
Remember 3.1Khz
IP Access
Bandwidth