Avtec Inc Virtualization Securely Moving to the Cloud

Avtec Inc Virtualization - Securely Moving to the Cloud

Background Avtec, Inc is a fastest growing companies, Avtec was ranked 19 th in the listing. provides true Internet Protocol (IP) Avtec provides internet send off console products for public safety, interest government, transportation, and business markets. the leading provider of mission-critical radio console systems in North America For more than 30 years, customers have chosen Avtec’s award-winning technology for their missioncritical send off station.

The Issue Because Avtec is switching to Saa. S platform which will allow virtualization of Scout (Avtec’s pure VOIP console system) so that customers can log into software remotely, Avtec needs to establish security measures to keep the environment secure. Currently Scout Communication console Software is deployed and maintained on-site at a customer’s location. Amazon Web Services ● Less expensive to deploy than traditional physical security ● Provides Identity and Access Management (IAM) ● Provides protected, monitored, and secured facilities where your data is stored* increase your data security while moving to the cloud*

Option 1 - Overview ● All Systems Housed on AWS Cloud Service o SCOUT Virtualized with Citrix Xen. App o Radio Endpoints Connect via VPN o Remote IP PBX Systems Connect by VPN ● Processing Power to Run SCOUT in AVTEC AWS Environment ● Secured by User Based Authentication o Login Requires a Username and Password o Additional Two-Factor Authentication Requirement o Access Fully Controlled by AVTEC Security Operations § Security Logging and Intrusion Detection § Identity Based Alerting Possible

Option 1 - Citrix Benefits ● Consistent User Experience o Citrix Xen. App Delivers Content in a Seamless Window o AVTEC Provides a Thin Client or Customer Provides PC o AVTEC Peripherals will Require Citrix Hardware Certification and Quality Assurance. ● End-to-End Security using Avtec AWS Cloud o Secure Network for each Customer o Shared Web-Tier Citrix Infrastructure o Automated Deployment Potential

Option 2 - Overview ● All communication routed to private network hosted on AWS. o SCOUT & Outpost devices will connect to AWS Cloud § Private VLAN on customer network routed to AWS § Individual endpoint hardware VPN devices. § Software VPN (SCOUT Consoles only) o VPN Secured by Encryption o Isolates Vo. IP traffic ● Private network helps reduce latency and jitter ● SCOUT PCs use Device Level Authentication

Option 2 - VPN to Cloud Benefits ● Easy Transition for Customers o Existing Scout Consoles Continue to Work o VPGate Server Moves to Cloud ● Low Technical Expertise Gap o Limited New Technologies o Minimal Changes to Existing VPGate Deployment o Extensive Training for Existing Staff Not Required o Inexpensive Hardware Upgrade for Customer

Common Benefits ● Centralized Management o East and West Availability Zone o All VPGate Servers can Leverage a Central AVTEC Management network for Security and Patching. o Existing AVTEC Employees Manage o Software and System Patching Maintained by AVTEC in a Non. Intrusive Way for Customers. o All Servers on Amazon Cloud Removing Infrastructure Lifecycle Management. ● AVTEC Provides Backup & Recovery Management via AWS

Decision Making Process Reasons why using a VPN would be better than using Citrix: ● Cost less to implement and no Hardware Quality Assurance would be needed ● Easier to monitor and secure while moving to cloud ● Able to implement a wide variety of software instead of just having one solution

Sourcing Decisions Outsourcing/Cloud Computing ● Scalability ● Deployment of software ● Speed & Agility Insourcing ● AVTEC employers are able to manage AWS ● Scout connected to AWS

Policies and Procedures Policies ● Each customer has an individual private network ● Administrators have access over secure VPN ● Use Amazon 2 Factor Authentication Service Procedures ● Internal Systems and Network Administrators will Attend Training Prior to Roll-Out to Become Familiar with using AWS. -$650 1 Day Training in Virginia along with traveling expenses

TCO to Implement Yearly Infrastructure Expense to Live on the Cloud: -----$63, 121. 28 Management Servers, Patching, and VPN Costs First Year Implementation Cost: -----------------$175, 120. 00 Project Lead, Design Consulting, QA Year 1 Total: $238, 241. 28 Second Year Implementation Cost: ----------------$79, 820. 00 Project Lead, QA Year 2 Total: $142, 941. 28 Year 3+ Total: $63, 121. 28

ROI Conversion of Existing Customers Next 5 Years. Average of 6 VP Gates Hardware Savings: $3, 000 Per VGate: $30, 000 Total Customers: Per Customer: $4, 500 Total Customers: VPGate, OS, Shipping, Maintenance Repairs Labor Savings: $450, 000 On-site Install, Travel Cost, Insurance & Risk, Staff Availability New AWS Cost: $656, 500 Per VGate: $6, 565 Total Customers: On-site Install, Travel Cost, Insurance & Risk, Staff Availability 3 Year Migration: Customers: $952, 900 Per VGate: $9, 529 Total

Rollout and Testing Methods ● External Cloud and Network Architects to Review and Plan Deployment to meet AVTEC requirements. ● Test Environment will be deployed for internal testing. Quality Assurance Testers will Simulate Customer Load and Actions. ● New Customers will Immediately Begin Cloud ● Existing Customers Offered, but forced at end of current VPGate Generation. Rollout can work in tandem with Physical VP Gates. ● Recommend Keeping QA Analyst Long Term to Collate Customer Operational Issues.

Recommendations to Senior Management ● Option 2 - VPN Solution is the Recommended Solution o The VPN solution provides for a fast implementation at a low cost. Existing staff will require little training with no training for the end-users accessing the systems via SCOUT consoles. ● Better for Avtec’s Business and Customers o Lower cost to implement and less on-going AWS cost o Transparent to Customer End-Users o Does not Impact Avtec Peripheral Sales

References http: //www. avtecinc. com/products/scout/outpost/ http: //www. avtecinc. com/products/scout/new-release-scout-2 -4/ http: //www. citrix. com/products/xenapp/overview. html https: //aws. amazon. com/marketplace/pp/B 00 EV 8 VXG 2/ref=ads_dd 9 b 7202 -6716 -1429660058 http: //www. emc. com/security/rsa-securid/rsa-authentication-manager. htm https: //aws. amazon. com/marketplace/pp/B 00 AA 00 Q 7 W/ref=ads_dd 9 b 7202 -6716 -1429660120 http: //www. salary. com