Skip to content
ControlIT

ControlIT Secure Access: Your Enterprise Network, Over the Internet

ControlIT Secure Access turns the internet into your enterprise network: branches, clouds and remote staff on one private overlay, with no VPN or inbound ports.

One private network, over the internet

Access architecture: remote users, branches and cloud workloads dial out to one private overlay, ControlIT Secure Access. Private traffic reaches Active Directory and internal applications directly. Internet traffic leaves through ControlIT Web Gateway, where policy allows it out to the internet or stops it at the gateway.

What this actually does

Turn the internet into your secure enterprise network.

  • Overlay Network

    a private network over the internet links you already have, across ISPs, cities and clouds. Works behind NAT, broadband routers and 4G or 5G, with no public IPs and no port forwarding.

  • Zero-Trust Access

    access decided by user, device, group and destination, with separate segments for staff, administrators, vendors and servers.

  • Site-to-Site and Cloud

    branches, data centres, public and private cloud on one private network, added without redesigning the physical network.

  • Application Access

    staff and vendors reach only the applications they are approved for, such as ERP, file servers, RDP, SSH and intranet apps.

Vendors reach one application. Nothing else.

A vendor's laptop joins the overlay in its own segment and reaches the one application it is approved for. File servers, Domain Controllers and finance systems stay out of reach, and there is no VPN account to hand over.

Vendor access: a vendor laptop outside your network joins the ControlIT overlay in a vendor segment and reaches one approved application, the ERP. File servers, Domain Controllers and finance applications stay out of reach behind the segment boundary.

What changes as a result

  • Secure work from anywhere, with no VPN concentrator
  • Branches, data centres and cloud on one private network
  • Vendors limited to the applications they need
  • Fewer public IPs and port forwards to manage

Plan a Secure Access rollout

Bring us your directory, your remote access and your sites. We will map what the overlay changes before anyone signs anything.