Connectivity

Leased-line Connection

Management of leased-lines and local connectivity, to provide the customer with reliable connectivity to UNGSC, including:

• Hosting in UNGSC for service provider equipment
• Management of circuit and liaising with service provider (optional)
• Connection to SGITT infrastructure if required
• Access to other Catalogue services
   

Internet Connection (ISP)

Provision of Internet connection with two service options, enabling external access to applications and services hosted in UNGSC datacenters:

• Secure Internet Access: Internet access secured by the UNGSC security layer, which ensures compliance with InfoSec policy and protects customer access with multi-layer Next-Generation Firewall security stack, including access-based rules, Intrusion Prevention and Detection (IPS/IDS), and URL Filtering
• Direct Internet Access: Unfiltered Internet access without the UNGSC Security Layer; customers must use their own infrastructure to implement the security layer and ensure compliance with InfoSec policy

Satellite Connection

Satellite connectivity with global access through the global UN System contracts for transponders and geographical redundant teleports in Brindisi and Valencia using bandwidth and frequency allocation over leased satellite capacity:

• Access to all UN services from anywhere
• 24/7 monitoring by the redundant UNGSC Network Control Centers in Valencia and Brindisi
• Technical support to liaise with national authorities for frequency licenses and operation authorization if required
• Remote technical support during the antenna satellite pointing and satellite modem configuration

VPN Site to Site

- A requirement for secure connectivity to UNGSC datacenters, enabling the customer LAN to communicate with the UNGSC network through a secure encrypted channel over the Internet, with two options:

• Business-to-Business VPN, using customer-managed VPN gateway/firewall to the UNGSC firewall
• Corporate VPN, from the UNGSC-managed IWAN “border router”

- Secure communication links using the Internet with IPSEC and SSL technologies for data encryption, in accordance with UN security policies

VDI Client Access

- A secure connection (using VPN or MFA authentication) to a Virtual Desktop in the UNGSC premises, enabling customers to securely access their servers deployed in the UNGSC Datacenter

- Access to the UNGSC network using a Windows virtual desktop

- Multiple monitors:

• Access to USB devices and other peripherals in the local computer
• User two-factor authentication to log in
• SSL/TLS tunnel to ensure end-to-end encrypted connection
• Patches and updates to virtual desktops without affecting user settings, data, or preferences
   

Network Connectivity

- Secure network connectivity enabling customer servers in the UNGSC Datacenter to be connected to the local network 

- An underlying service to server hosting that can also be used by customers when installing their own servers in the rack space offered by UNGSC

- Network connectivity is provided with two options:

• Data Network – the network used to connect servers and network appliances for customer applications and services using high capacity, resilient connections
• Out of Band (OOB) Network – an isolated network used by system administrators for infrastructure management

Load Balancing

- Layer 4-7 load balancing with the following options:

• Geo-redundancy with Global Site Load Balancing (GSLB)
• Traffic compression
• Object caching
• Content switching
• SSL offload
• Publication on the Internet
• Customized features

- Improved availability, response time, and security of applications

Intelligent WAN (IWAN)

- Deployed on top of different types of network connections that link the customer with UNGSC (Satellite, Leased line, VPN, etc.)

- IWAN enables customers to connect the services in UNGSC to UN offices and data centers worldwide, with benefits including:

• Transport independence
• Intelligent path control
• Application optimization
• Secure connectivity
• Service management framework

Cloud Based Management for Network Devices

- Remote administration for cloud based managed network devices (CISCO Meraki)

- Benefits include:

• Dashboard for central management
• Devices owned by customers
• Management
• Support to ensure a homogenous configuration across all clients
• Monitoring of devices' availability

Digital Radio Service (TETRA)

- A global digital radio standard for vital communications through the Terrestrial Trunked Radio System(TETRA)

- Centralized administration and control

- Redundancy, offering:

• Economies of scale
• High availability and operational resilience
• Scalability and ease of expansion
• Improved service delivery

Firewall Federation

- Implemention of Checkpoint Multi-Domain Security Architecture

- Federation of local checkpoint deployments recommended for information security

Identity Service Engine (ISE)

- Provision of Cisco Identity Services Engine (ISE), a comprehensive network security service that enables dynamic policy enforcement, network access control, and device management

- Simplification of identity management, enhancing network security

- Risk reduction associated with unauthorized access and potential data breaches across diverse IT environments

Video Conferencing

Comprehensive video conferencing services to UN entities, enabling remote communication and support for peacekeeping operations and international security efforts: 

• Multi-site conferences, compatibility with various platforms
• Participation in external organizations' events 
• Options for large webinars with up to 3,000 participants
• Remote simultaneous interpretation
• Full event management support from organization to post-event activities

Voice Communication

- Centralized voice switching infrastructure for intermission and international calls

- Cost-effective solution, eliminating the need for complex individual telephony infrastructure in field missions

- High availability and geo-redundancy, with competitive international call rates through global PSTN Telco contracts 

- Intermission calls among UN entities and international calls via PSTN providers

- Flexibility to choose one or both services, according to client needs