Skip to content
ControlIT

ControlIT Overlay Network: Encrypted Private Connectivity

The encrypted overlay under ControlIT Secure Access connects users, branches and servers peer to peer, with no VPN appliance, public IP or inbound port.

How the connection works

Architecture flow: endpoints, Domain Controllers and file shares inside your network open one encrypted outbound path to the control plane, hosted by us or on infrastructure you nominate. Attempts to connect inward from the internet find nothing listening.

What this actually does

The connectivity layer the whole family rides on. Endpoints dial out, nothing listens on the internet, and access follows identity rather than subnet.

  • Encrypted peer-to-peer connectivity with NAT traversal and device identity verification.
  • Outbound-only endpoints, with no published services, no port forwarding, and no public IP requirement.
  • Site-to-site and user-to-service access governed by one policy model.

What changes as a result

  • No VPN concentrator to size, licence, or replace
  • A materially smaller external attack surface
  • Direct paths instead of gateway bottlenecks

Design your overlay with Computer Port

Bring us your directory, your remote access and your sites. We will map what the overlay changes before anyone signs anything.