NCP Secure Enterprise VPN Server – Scalable VPN Gateway for Secure Remote Access
As the number of remote employees, locations, and VPN connections grows, so do the demands on your central VPN infrastructure. NCP Secure Enterprise VPN Server is designed for high-performance, scalable remote access and can adapt as your requirements evolve.
As part of the NCP Secure Enterprise Solution, it securely connects remote and office-based employees, branch locations, and other sites to the corporate network. Its modular, software-based architecture integrates easily with existing IT environments and supports a wide range of deployment scenarios—from standard enterprise installations to large, highly available remote-access infrastructures.
NCP Secure Enterprise ClientsNCP Secure Enterprise Management
What is the NCP Secure Enterprise VPN Server?
NCP Secure Enterprise VPN Server is the gateway component of the three-part NCP Secure Enterprise Solution. As a software-based IPsec VPN gateway, it authenticates incoming connections, establishes encrypted VPN tunnels, and provides integrated routing, firewall, and access control functions.
The NCP Secure Enterprise VPN Server is designed for businesses, government agencies, and service providers that require a powerful, scalable VPN gateway for large-scale remote access infrastructures. Support for multiple VPN gateways and high-availability configurations allows organizations to scale their VPN infrastructure as user numbers grow and performance and availability requirements increase.
The VPN infrastructure can be centrally managed through NCP Secure Enterprise Management or a web interface. Compatibility with NCP Secure Enterprise Clients and third-party IPsec VPN clients gives IT teams greater flexibility when designing and managing their VPN architecture.
Who is the NCP Enterprise Server designed for?
- Product Type: Software-based IPsec VPN gateway
- Use Cases: Secure remote access and secure connectivity for employees and company locations
- Target Audience: Businesses, government agencies and service providers with centrally managed remote access infrastructures
- Deployment: Windows Server, Linux and virtualized environments
- Scalability: Scalable number of remote users and VPN tunnels
- High Availability: NCP High Availability Services for multiple VPN gateways
- Multi-Tenancy: Support for up to 1,024 domain groups
How does NCP Secure Enterprise VPN Server work?
NCP Secure Enterprise VPN Server receives connections from remote access clients and provides secure access to authorized resources on the corporate network. Connections are established using the standards-based IPsec protocol. The server supports both NCP Secure Clients and compatible third-party IPsec VPN clients.
When a connection request is received, the VPN gateway authenticates the user and establishes an encrypted VPN tunnel. Integrated routing and firewall functions, together with Network Access Control, help ensure that users can access only the resources they are authorized to use.
For user management and authentication, the VPN server can integrate with existing back-end systems such as RADIUS, LDAP, and Microsoft Active Directory. Alternatively, users can be managed locally on the VPN gateway. Configuration and administration are handled centrally through NCP Secure Enterprise Management or the web interface.
The benefits of NCP Secure Enterprise VPN Server
NCP Secure Enterprise VPN Server combines strong security with scalability, high availability, and flexible integration.
Its software-based architecture allows your VPN infrastructure to grow with your organization and integrate with existing IT, identity, and authentication systems.
- Integrated firewall: Stateful packet inspection, IP NAT, and port filtering provide granular control over network traffic.
- Strong authentication: Support for certificates, one-time passwords, and other authentication methods helps protect access by users and end devices.
- Network Access Control: Endpoint Policy Enforcement checks end devices against defined security requirements before granting access to the corporate network.
- Modern cryptography: Support for powerful encryption methods, including Elliptic Curve Cryptography, helps protect sensitive data and communications.
- VPN Path Finder Technology: Enables VPN connections in networks where standard IPsec communication is restricted or blocked.
- High scalability: Multiprocessor and multicore support allow the VPN infrastructure to scale as performance requirements increase.
- High availability Multiple VPN gateways can be combined in load-balancing or failover configurations.
- Load balancing: VPN connections can be distributed across multiple gateways to balance workloads and make effective use of available resources.
- Seamless Roaming: When used with NCP Secure Clients, the VPN tunnel can remain active as users move between different network connections.
- Use existing back-end systems Integrate user management and authentication with RADIUS, LDAP, or Microsoft Active Directory.
- Flexible administration: Configure and manage the VPN gateway through NCP Secure Enterprise Management or the web interface.
- Integration with existing IT environments: Standard interfaces facilitate integration into existing remote access environments.
- Vendor-independent integration: In addition to NCP Secure Clients, the VPN server supports compatible third-party IPsec VPN clients. It can also operate in IPsec environments that include VPN gateways from other vendors.
- Multi-tenancy Manage different customers, companies, or business units separately within a shared VPN infrastructure.
- Resource sharing: Allow multiple organizations to use the same VPN gateway while keeping their environments separate.
- Up to 1,024 domain groups: Configure authentication methods, filter groups, IP pools, bandwidth limits, and other settings separately for each domain group.
Two versions for different requirements
The NCP Secure Enterprise VPN Server is available in two versions.
While SES integrates into existing server environments as VPN gateway software, vSES combines VPN server functionality with a hardened operating system in a virtual all-in-one appliance.
| NCP Secure Enterprise VPN Server (SES) | NCP Virtual Secure Enterprise VPN Server (vSES) | |
|---|---|---|
| Deployment | VPN server software | Virtual all-in-one appliance |
| Operating system | Installation on Windows Server or Linux | Includes a hardened operating system optimized for VPN operation |
| Virtualization | Can be installed in existing server and virtualized environments | Designed for deployment in supported virtualization environments |
| High Availability | Can be implemented using NCP High Availability Services* | Includes an integrated HA server for load balancing and failover* |
| Updates | Updates to the NCP VPN server software | Integrated update functionality for the VPN server, HA server, and operating system platform |
| Suitable for | Organizations that want to integrate the VPN server flexibly with their existing server and IT infrastructure | Organizations that prefer a preconfigured virtual VPN appliance with an optimized operating system |
* A separate subscription license is required to operate the HA server included with vSES.
The Next Steps
Are you interested in centrally managing your remote access workstations and simplifying administrative processes?
We provide expert advice and support during the planning phase, along with tailored assistance when integrating the solution into your existing infrastructure. Our team offers technical support throughout the entire process, right up to the full deployment of your NCP Enterprise VPN environment.
Frequently asked questions
Find key information about the deployment, integration, scalability and high availability of the NCP Secure Enterprise VPN Server at a glance.
A VPN gateway is the central connection point between remote devices or locations and the corporate network. It authenticates incoming connection requests, establishes encrypted VPN tunnels, and controls secure access to authorized network resources.
NCP Secure Enterprise VPN Server, or SES, is VPN gateway software that can be installed on Windows Server or Linux and integrated with an existing server and IT infrastructure.
NCP Virtual Secure Enterprise VPN Server, or vSES, combines VPN server functionality with a hardened Linux-based operating system in a virtual all-in-one appliance. It also includes an HA server for load balancing and failover. A separate subscription license is required to operate the HA server.
The best option for your organization will depend on your existing infrastructure and operational requirements.
NCP Secure Enterprise VPN Server is designed to support scalable remote-access infrastructures. Multiprocessor and multicore support allow it to adapt as performance requirements increase. For larger environments, multiple VPN gateways can be combined using NCP High Availability Services. VPN connections can then be distributed across the available gateways.
Yes. Multiple NCP Secure Enterprise VPN Servers can be combined in a high-availability cluster using NCP High Availability Services. The gateways can be deployed in load-balancing or failover configurations to distribute workloads and maintain service availability.
Yes. NCP Secure Enterprise VPN Server can be integrated with existing IT systems and supports RADIUS, LDAP, and Microsoft Active Directory for user management and authentication. In addition to NCP Secure Clients, it supports compatible third-party IPsec VPN clients. SES can also operate in IPsec environments that include VPN gateways from other vendors.
Yes. Multi-tenancy allows different customers, companies, or business units to be managed separately within a shared VPN infrastructure. This means that multiple organizations can use the same VPN gateway without their environments being combined.
The server supports up to 1,024 domain groups. Authentication methods, filter groups, IP pools, bandwidth limits, and other settings can be configured separately for each group. These capabilities make NCP Secure Enterprise VPN Server particularly suitable for service providers and managed service providers.
Do you have questions?
Our team will be happy to advise you personally.
Dombuehler Str. 2, 90449 Nuremberg
+49 911 9968 333
sales@ncp-e.com