Multiple remote access coexist for information sharing and overtime

Yusen Travel has been using the remote access environment since 2005. It was used to use internal bulletin boards and e-mails from overseas sites not connected to the company network, and to share information with employees on long vacations such as maternity leave. Aside from that, a mechanism was also provided to enable remote control of the desktop of a PC in the company after authentication using a USB key. According to YUSEN TRAVEL CO.,LTD., Ltd.'s Executive Officer and general manager of information systems, it is possible to ensure a work environment equivalent to that of the company wherever you are, so it is possible to respond quickly even outside business hours.

“It is not uncommon for it to be difficult to resolve issues such as flight cancellations and hotel troubles on the spot during business trips. We are also trying to create a system that can respond as much as possible with a single phone call.There are travel agencies that outsource after-hours support, but if we can handle it ourselves, we will be able to respond more quickly and at a high level.”

Although the service quality was improved, issues remained in terms of management and cost. For remote access using a USB key, a third-party service was used, and charges were based on the number of IDs. According to YUSEN TRAVEL CO.,LTD., Ltd.'s information system department, the cost burden for users who use the service infrequently has become an issue.

“There are users who have applied for use because they might use it in an emergency, but they actually do not use it. We couldn't make full use of our business applications, so we couldn't ask them to migrate to us.

The impetus came in 2011. The maintenance period for the remote access product, which was introduced for browsing purposes earlier, will expire in December 2011. In line with this, a review of the remote access environment began.

Adopted the MAG series that supports both web applications and remote desktops

The purpose of the review is to optimize costs by introducing a product that satisfies both existing two types of remote access functions. The essential requirements for this were the ability to use web applications from outside the company, as before, and the ability to access the desktop of the company's PCs from outside the company. Furthermore, product selection was carried out with a view to responding to smartphones and tablet terminals, which are becoming more popular, and to optimizing the overall cost related to remote access.

"I compared several SSL VPN products, but there were many that only supported web applications, and there weren't many that covered the functions I wanted. Among them, the one that covered the requirements I wanted was , Pulse Secure's MAG series.It has a variety of functions that can cover the requirements so far with a single unit, and I felt that it is a product that can meet various requirements."

By choosing a product with abundant functions, there is no need to purchase additional security products for each individual requirement, and additional costs are not incurred when supporting new terminals such as smartphones. As for operating costs, he continues to say that costs are expected to be lower than before.

"I'm happy that while remote access using a USB key was charged by ID, the MAG series charges by the number of simultaneous connection licenses."

These points were the decisive factors, and we decided to introduce the MAG series. It was the fall of 2011.

Flexible settings improve user convenience and reduce costs

In November 2011, the MAG2600 Junos Pulse Gateway was installed in the server room of Yusen Travel, and full-scale operation began. Even when two units are installed side by side in a redundant configuration, the compact case fits into a 1U rack, so there is no need to worry about installation space. With detailed support from Macnica during the implementation stage, the introduction went smoothly. It is now possible to simply use web applications, or to access the desktop and perform the same tasks as if you were in the office, and remote access requirements have been consolidated into one unit. In addition, a network connect function is provided for remote locations and small locations that are not connected to the internal network, such as overseas locations. The head of the information systems department had this to say about how to utilize the network connect function:

“Using the Network Connect function, as long as you have an Internet connection, you can use any TCP/UDP application in the same situation as if you were connected to the company network. As a result, the use of business applications had to be complicated, but with the introduction of the MAG series, it is now possible to use them with the same operations as on a PC connected to the company network."

The existing Active Directory was used for ID management, so there was no need to prepare a new user registration mechanism. In addition, by utilizing the realm management function to control access operations for each user, it is designed to improve user convenience and keep the number of simultaneous connections low. Users who use only web applications, users who are automatically connected to the desktop of their PC, users who connect to the company network so that they can freely use TCP applications, etc. It reduces the burden of access. In addition, the time until the connection times out is different for users who expect to use for a long time, such as access from overseas bases, and users who use it for a short time from outside, so that licenses for simultaneous connections can be used efficiently. It is said that it is being adjusted so that it can be used for general purposes.

"We can easily issue an ID to a user who may use it someday, and the cost burden can be kept to an amount that matches the actual usage situation. There is a time difference between domestic and overseas sites, and the usage time zone is different. Therefore, it was in line with the actual business situation of keeping the number of simultaneous connections low.”

The person in charge of the information system said so, and told me that the effect of reducing operating costs was also apparent. Three months after the introduction, all remote access users for browsing and some remote access users using USB keys have migrated, and nearly 100 licenses have been issued, but the number of simultaneous connection licenses is limited. Using a USB key for authentication has the advantage of not being able to choose which terminal to access from, so it is expected that some users who move around a lot will remain as they are, but the total operating cost can be considerably reduced. It is expected.

Equipped with linkage and visualization functions, infrastructure for future development

“In the previous remote access, there were problems such as conflicts with security software, but with the MAG series, there are no such problems. We have heard that the speed is fast and the remote desktop operation response is good and comfortable. We can issue IDs in-house, so it's very popular that it can be used in a short period of time after applying."

The person in charge of information systems introduced the evaluation from the users. Regarding the use of smartphones and tablet terminals, we are investigating compatible terminals, etc., in order to respond to requests from users as soon as they become available. In the MAG series, not only iPhone/iPad, but also Android terminals will support full access to all resources from Android 4.0 or later, so they are also considering using tablet terminals for business. In addition, when I asked the information system manager about future developments, he told me about the following plans. “Since the core system will soon be replaced, we are considering updating it to a system that allows for remote access. In addition, we will issue IDs to all employees at the manager level and above, so that they can use the system in the event of a pandemic or disaster. We are also considering incorporating remote access into our BCP.Even if we issue a large number of IDs, the cost burden is the license for the number of simultaneous connections that matches the actual use, so this kind of response is easy."

Yusen Travel's business environment is likely to continue to evolve with the new foundation of a flexible and highly functional remote access environment.

User Profile