Our Services
What we Offer
SXi CyberCare Access™
Maintaining and optimizing Cybersecurity via NSA Approved Commercial Solutions for Classified Inspired technologies
Allowing remote access to your installations IT resources can be risky… Whether cloud based, on-premises, or hybrid deployment. SecureXperts CyberCare Access provides password-free credentialed access to your staff using Department of Defense approved methods for securing access to your environment from any geographic location seamlessly and securely.
Despite its benefits, most IT admins and Cyber Risk Management are wary of remote access. To address these concerns, the SXi CyberCare Access™ service use immutable encryption and trusted devices giving authorized third-party vendors, contractors, and administrative personnel auditable permission to enter secured networks through secure access points.
Using a de-centralized solution, CyberCare Access™ ensures strict separation between your and networks and outsiders using Private cellular LTE network technology.
Our US based personnel have security clearances up to and including Top Secret. We work vigilantly to protect you and our nation’s most critical assets 24/7/365.
SXi CyberCare Access™ is rigorously tested to safeguard against unauthorized penetration and meets regulatory requirements to include NIST 800-53 as well as proposed Department of Defense mandates for Safeguarding Controlled and Unclassified Defense Information.
Our on-premises and hosted options are comprised of flexible engagement models able to meet your needs ranging from localized on premise solutions to enterprise commercial and other high-risk critical computing environments.
SecureXperts CyberCare Access™ can be integrated into your Systems Development Lifecycle Plan seamlessly without replacing existing components.
“Your Mission is our Focus”
Typical Configuration Models
- Client VPN
- Site-to-site VPN
- Ad Hoc-Remote
Users are authenticated by two-factor authentication consisting of a Smart Card and PIN. Dual Encryption tunnels provide secure access using privatized cellular network connections not accessible to traditional wi-fi or wired access.
CyberCare Remote Access Architecture
Configuration method 1:
Client Virtual Private Network
Client (VPN) in the virtual workstation within the remote access network. The virtual workstation is accessed via a web browser using the secure HTTPS communication protocol through a Smart card with secure digital certificates bound to the individual user. A virtual session is then used to access those services in the customer network managed by your IT staff. The virtual workstation is isolated and is only permitted to communicate with a specified customer’s network. Communication with the customer’s network is only permitted once the SecureXperts support engineer successfully authenticates himself/ herself via the two-factor authentication portal.
Configuration method 2:
Site-to-site VPN
This method involves configuring a site-to-site Virtual Private Network (VPN) link between the remote access system and a customer network. A virtual session is created via virtual machine via a web browser using the secure HTTPS communication protocol. Using a double encrypted tunnel, it uses a zero-trust network configuration to connect to those services in the customer network managed by your company. The virtual session is isolated and is only permitted to communicate with a specified customer’s network.
Configuration method 3:
Ad-Hoc Remote
Communication with the customer’s network is only permitted through the isolated virtual workstation once the user successfully authenticates himself/herself via the two-factor authentication portal. The support engineer authenticates himself/herself with a username, password and a one-time password.Following successful authentication, the SecureXperts support engineer is presented with a portal containing links that connect exclusively to the specific systems for which authorization has been granted.
When the SecureXperts support engineer accesses one of the links, the support engineer is granted access by the portal to the virtual machine uniquely set up for the specific customer. The audit logs are captured for each customer and provided as needed to identify trusted connections and activities (without capturing any client data).