TFIT CTO Pete DeFinis was selected to be an integral part in the design and implementation of a nation-wide remote access VPN consolidation project for Optum. The design including converging over 50 clinic acquisitions into a single data center, temporary routing between multiple data centers, building Active Directory trusts, implementing 2 factor authentication, and consolidating DNS. The primary VPN solution utilized was Cisco AnyConnect on existing multi-tiered Cisco ASA firewalls, that were then upgraded to Cisco FirePower Firewalls. The solution also included traffic shaping, Cisco Umbrella DNS and Cisco WSA web filtering. Additionally, Palo Alto firewalls were used in the DMZ portions of the network. The 2 factor authentication solutions utilized were Duo and PingID. The VPN requirements met are below
- -Multiple Profiles with Access based on selected profiles.
- -Profiles must be invisible to users.
- -Deployment must be automated,
- -Users from one profile must not be able to lg in with any other profile
- - Users must be able to change their passwords remotely either via VPN client or web portal
