INSYS CONNECTIVITY SERVICE

LESSON N 01
I have advertised last week that I am going to teach you the extension of INSYS
Connectivity Service in 4 steps. I am starting with the first step today:
1. A clearer user interface
2. A licence management and a low price licence type for rare usage
3. A save access from devices without VPN client (customers PC,
smartphone, internet cafe) to web cams and web services in your VPN
4. A periodic update of VPN certificates

The user interface serves for device configuration and supplies with a quick
overview of the device state:

Colour symbols for the state: our icom colour

Functional icons to

Display the VPN address and the amount of data under

(more
information)
Compact layout for mobile screens more details are presented in the

copy,

delete,

represents online
manage and

download

manage dialog
Quick navigation for a big number of devices the Search field acts as a
filter
Password dialog in the menu Settings

Doesnt it look great? We like it!

LESSON N 02
I have presented the updated user interface to you this Monday. Today I am
introducing the new opportunities of the licence management to you.
1. A clearer user interface
2. A licence management and a low price licence type for rare usage
3. A save access from devices without VPN client (customers PC,
smartphone, internet cafe) to web cams and web services in your VPN
4. A periodic update of VPN certificates
Be assured in advance: we give you more influence and a better overview but
you only need to manage your licences if you want to use these features.
Licence Overview

You can see for each device what type of licence it is using:

You get an overview over your licences including scope, usage and validity:

In this example the device MoRoS LAN 200 is using Lizenz040 which is
valid until Novembre 2.

A usage log presents usage days and devices for each licence:

Devices Without Licences

We give you the opportunity to add 10 more devices than the number of your
licences. You can activate these devices by new licences or when you replace a
device.

Beware: Devices without licences are not accepted in the VPN. Keep in mind
that deactivated devices and devices without licence produce a big amount of
traffic if they are configured to try to log in continuously.
Low Usage Licences
If you do need to access your remote devices by default then we can offer a
discounted new type of licence to supply you with the safety to access your
devices in case of emergency.
Low usage licences are restricted to 12 usage days per year. Your discount is
60% at a minimum order quantity of 5 units.
Licence Messages
We automatically updated the state of your licences by email:
At 75% and 100% usage of low usage licences
7 weeks ahead of expiration and renewal of licences
If you do not care about the new licence management then everything
continues like in the past.
But: can you already see your benefits?

LESSON N 03
Today I am showing you how you will access web services within your VPN
safely from devices without a VPN client.
1. A clearer user interface
2. A licence management and a low price licence type for rare usage
3. A save access from devices without VPN client (customers PC,
smartphone, internet cafe) to web cams and web services in your VPN
4. A periodic update of VPN certificates
You can setup a Webproxy for any device in your VPN, which you access by a
web browser. You reach the device through the Webproxy without a VPN.
Sounds complicated not at all, it is that simple:

Webproxies are visible to any web client (Internet Explorer, Firefox, Safari,
Chrome etc.) on any device. You can access them from a PC at the customers
site or in an Internet caf, from a tablet, a smartphone or even a smart TV.
Which devices can you access?
You get access to any device with its IP address and port over the http protocol
like you would access it from a PC within the VPN. Typical applications are: live
view of a webcam, configuration of a router and status view of PLC.

But is it safe?
Yes! You only reach exactly the released service on the target device through a
Webproxy the rest of the VPN is out of scope.
The PC does not authenticate by a VPN but over the https protocol with
username and password.
To avoid that you have to authenticate twice (at the Webproxy and e.g. at web
cam) we can optionally switch off the authentication.
How much is it?
This is a good thing for free you need no licence for the PC outside the VPN.

LESSON N 04
In the end I am explaining today, how the INSYS Connectivity Service renews
certificates automatically and I am disclosing how you can test all the new
features by yourself.
1. A clearer user interface
2. A licence management and a low price licence type for rare usage
3. A save access from devices without VPN client (customers PC,
smartphone, internet cafe) to web cams and web services in your VPN
4. A periodic update of VPN certificates
Certificates are the key to a secure VPN
The INSYS Connectivity Service supplies all devices with X.509 certificates
automatically.
With huge computing power an intruder might break the certificate by brute
force. To rule this out INSYS Connectivity Service automatically creates new
certificates every 100 days. We can adjust this period of time to your individual
needs (call our support team).
Who takes the certificate to the router?
INSYS router come with an auto update function: they are looking for updates
(including certificates) once a day. We have extended the router configuration
files on the INSYS Connectivity Service to activate this.
It is your decision for automatic certificate renewal: Go through the quick start
(after factory settings) or download the configuration manually (see below). New
certificates are downloaded and installed automatically an old one remains
valid until a newer has been used successfully.
You can request a new certificate manually as well it will be loaded at the next
auto update.

Access to the development system

To test the new features before they are activated in the productive system you
can create a test account under https://dev1.connectivity-service.insys-icom.de/.
Beware:
1. The development system has no verified https certificate your browser
should warn you!
Accept it and proceed.
2. The quick start of the INSYS router is not supported in the test (the router do
not know the address of the test server)

Download the configuration manually from the web portal

Upload the configuration to the INSYS router

Your settings in the test environment are completely independent from the
productive system; they will be removed at the end of the test.

Additional options
Contact our support team (support@insys-tec.de) to enable these options:
Low usage licences
Webproxy without authentication
Schedule
We plan to introduce the new features in the evening of Monday November 4.
May I request one thing from you? Please tell me what you think of these new
features!

LAST BUT NOT LEAST !

Dear users of the INSYS Connectivity Service
We have successfully switched to the latest software of the INSYS Connectivity Service
this afternoon!
When you connect to the web portal then you can see your devices in the new
presentation:

Depending on the cache settings of your browser you may need to reload the page by
Ctrl-F5 or Shift-F5. Smartphones may require to clear the cache (iPhone: Settings
Safari More options)
You can now monitor your licences directly. The end time is set to November 2014
now we are going to reduce it in the next days. If you have purchased the licences at
different times then you can assign the licences to the right devices by yourself.
Enjoy the new features!