Network Separation
Logical Network Separation
A User can have two or more computing environments; one local and the other virtual. Highly secure logical network separation is made possible with Softonnet’s desktop virtualization solution.
Physical network separation often time requires extra PC connected to the different network, but with logical network separation, intranet and internet connection can be managed even on a single computer. This logical separated network connection enables maintaining higher security level in users computing environment by efficiently preventing the unauthorized resource access and data transfer.
Data - View - Control Separation Overview
- Integration of Desktop Virtualization and Storage Virtualization provides logical network separation.
- Data is managed by network attached storage, memory is controlled by the virtual machines on the server, and the users can access the view by the virtualized desktop environments.
- This configuration remarkably increases the security of the computing environment by exclusively separating networks used for data, memory, and view management.
Data Storage Separation
 |
Data storage operates in different network with extra high security. Granting access and modification privileges to employee boosts up the efficiency and productivity of the work, but at the same time increase the risk of confidential data leak. Network attached storage solution on different network greatly reduce the security thread, and in the mean time give flexible accessibility to the users and modules. The central management and monitoring of data flow enables better computing environment. |
Memory Control Separation
|
In the process of computing, data in storage are temporarily copied to the memory for computational use. The data in the memory are volatile, and are only used for that moment of processing. Separation of actual non-volatile data and processing units of these data enables efficient, secure management of computing resources. Moreover, since the processing unit works on the separate intra-network, possible modification of data by external invasion is impossible. |
 |
Desktop UI View Separation
 |
Networks for data storage and processing unit are logically separated. Now in order for the end-users to access the computing environment, desktop screens of the virtual machines in the server are provided by the provisioning engine. this screen accepts the user input and returns output on the screen. On a typical network separation configuration, the end-users computer are in both intranet and Internet networks. For licensed application or confidential data access end-users use these screens, and for external data access, end users use their own environments. |