Woncloud Access Gateway

The Access Gateway (AG) is a critical component of an organization's cybersecurity architecture, providing a secure entry point to the internal network infrastructure, ensuring that only authorized users can access sensitive information and resources.

To implement AG, an additional Linux host installation is required, functioning as the gateway to manage inbound and outbound traffic. Through AG, CBS gains access to essential resources within the internal network, including the local area network (LAN) and virtual private cloud (VPC) environments.

When the Cloud Bastion Service (CBS) requires access to assets within the internal network, it does so through the AG proxy. This controlled interaction ensures that cloud-based services remain protected from unauthorized access and potential threats.

AG offers several advantages that enhance security. Firstly, it eliminates the need for assigning public IP addresses to internal systems, reducing the attack surface targeted by attackers. Additionally, AG hides the ports used by internal services, adding an extra layer of protection against potential vulnerabilities.

The elimination of public IP address assignment and port concealment reduces the network attack surface, making it more challenging for malicious actors to exploit vulnerabilities. AG prioritizes data security and integrity, ensuring that even if compromised, it poses no threat to internal network data.

Moreover, AG is resilient and easy to restore. In the event of failure or disruption, it can be swiftly rebuilt within minutes, minimizing downtime and ensuring continuous secure access to the internal network infrastructure.