Interconnections

Cegedim.cloud hosts more than 300 customer interconnections. We ensure the implementation of a secure and private interconnection between your environments and Cegedim network.

Site-to-site VPN

These different interconnection media can be combined and deployed as primary and/or backup interconnection to ensure high availability of the links.

Managed supports

End-to-end interconnection management: deployment of own hardware/router, hosting of the solution, intervention of RUN teams, incident management.

• Managed Dedicated Link Interconnection + Service Provider Link: Managed interconnection to the DC via dedicated physical link
• Managed VPN Site to site 

Non-managed supports

Cegedim.cloud does not intervene on your equipment – unless specifically requested by the customer. We guarantee the availability of our equipment.

• Unmanaged Dedicated Link Interconnection: Unmanaged interconnection to the DC via a physical link; the operator link is at the customer’s expense. Cegedim.cloud provides a secure interconnection to its network via VLAN, and the customer is responsible for bringing back his or her hardware.
• Unmanaged VPN site to site

VPN for user

The VPN Ipsec user solution allows you to have a remote and secure access to your network. You can access all your resources from any remote location through a private, isolated and secure network.

User Ipsec VPN provides the following features:

• Managed service: the deployment, management and maintenance of the platform are ensured by our teams
• Secure TLS connections
• High availability
• Active Directory-based customer authentication 

Domaine name and certificates

Certificates allow you to secure your applications and sites exposed on the Internet by ensuring the encryption of data in transit between a user and a website. The certificate establishes a secure connection between the web server and the browser. Visitors then access your site through a secure connection indicated by a padlock icon and a URL beginning with the “https” protocol.

Cegedim.cloud deploys and manages SSL/TLS (Secure Sockets Layer/Transport Layer Security) certificates and offers several types of certificates:

• Standard: issued for a single url
• Wildcard : allows to secure an unlimited number of urls of a domain or sub-domain of your choice
• Multi-Wildcard : unlimited number of urls for several domains and sub-domains on the same certificate
• Extended Validation: offers the highest level of authentication
• Let’s Encrypt: certificates generated by Cegedim.cloud and self-managed. These certificates are infinitely renewable.

Cegedim.cloud provides a managed service, from domain name provisioning to SSL/TLS certificate management:

• Domain name rental
• Purchase of certificates from certification authorities
• Deployment and lifecycle management, including certificate renewal

Elastic Secured Endpoint

Exposed on the Internet, your applications are particularly exposed to the risks of cyber attacks: botnets, denial of service attacks (DDoS), intrusion, data leakage, etc. Through Elastic Secured Endpoint, Cegedim.cloud provides a complete set of technologies for securely exposing your applications on the Internet.

Elastic Secured Endpoint is a fully managed service by our team of security experts. We ensure the deployment, management and reporting of the solution:

• • Security and Performance of your applications :
    • Encryption/decryption of HTTPS streams
    • Intelligent traffic management and load balancing
    • Compression and cache management for maximum performance
    • Web Application Firewall (WAF) in option
• • Security Monitoring:
    • Real-time Cyber monitoring of exposed resources on the Internet
    • Weekly vulnerability audits
  • DDoS Protection:
    • Detection and protection against denial of service attacks

• Security and performance

Cegedim.cloud load balancers (F5 BIG-IP LTM) provides a deep understanding of the network application traffic and control over how it is managed.
It transforms the chaotic volume of network traffic into logically assembled data flows. Then makes intelligent traffic management decisions, selecting the right destination based on server performance, security and availability.

BIG-IP LTM is a full-featured reverse proxy which allows to inspect, manage and report on your network application traffic. From basic load balancing to complex traffic management decisions based on client, server, or application status, BIG-IP LTM gives you precise control over application traffic.

The SSL acceleration achieved by BIG-IP LTM offloads servers from HTTPS encryption and frees up resources to improve application performance.

Optimized compression and caching management improves interactive application performance, data loading times, and bandwidth utilization.

• Optimization of application speed and reliability
• Improvement of infrastructure performance
• Optimization of the user experience

Features:

• Web Application Firewall

BIG-IP Application Security Management (F5 BIG-IP ASM) enables organizations to be protected against the 10 greatest OWASP threats, application vulnerabilities and zero-day attacks. With the combination of Layer 7 DDoS defenses, advanced detection and mitigation techniques. As well as dynamic learning, virtual patch execution, and accurate attack visibility, BIG-IP repels even the most complex threats before they reach your servers.

Benefits:

Features:

• Cyber monitoring

XMCO Serenity is a non-intrusive service for detecting attack attempts and leakage of sensitive information. The service covers all resources associated with the company: IP addresses, domains, brands, names, etc. and detects vulnerabilities in a preventive way. Before they are exploited by hackers: image damage, identity theft, uncontrolled exposure of the IS, data theft and leakage, etc.

Features:

• Vulnerability audits

Qualys Vulnerability Management is a cloud service that provides immediate and global visibility into the vulnerabilities of your IT systems. And protects you from them. You can identify threats and monitor unplanned changes to your network before they become vulnerabilities:

• Scalable solution that provides comprehensive security coverage for all networks and equipment (internal network, remote or mobile sites, elastic virtual environments)
• Low impact on IT teams in terms of deployment, management and use
• Precise and prioritized results
• Automated weekly scans
• Ongoing supervision and analysis of reports

Features:

• Detection and protection against DDoS attacks

Cegedim.cloud integrates into Elastic Secured Endpoint a detection and protection solution against DDoS attacks, including very high-capacity attacks, before they reach your network. This service provides multilayer protection (L3-L7), with cloud scanning technologies to detect, identify and prevent threats in real time. While routing legitimate traffic to your site. The fully managed solution is deployed and managed by our security experts.

Connectivity operator

Cegedim.cloud guarantees an Internet access that is always available thanks to our CBox offer already deployed in thousands of pharmacies.