Features and benefits of secure remote access
Secure remote access requires more than an encrypted VPN connection. NCP solutions combine secure connectivity, endpoint protection, centralized management, and flexible deployment capabilities to provide reliable access to corporate networks and resources across different devices and IT environments.
Explore the key features and technologies behind NCP’s remote access solutions and see how they help organizations strengthen security, simplify administration, and maintain reliable connectivity.
Connectivity and networking technologies
Before establishing a connection, the NCP Secure VPN Client checks the available connection methods and automatically selects the appropriate network connection based on a predefined priority. Users can also select the connection manually if required.
Home Zone allows users to securely access local devices while working from their trusted home network. Once the home network has been configured, the NCP Secure VPN Client recognizes it automatically and applies the predefined firewall rules, for example to allow access to a local printer or scanner. When the user leaves the Home Zone, the previous firewall rules are automatically restored and reapplied when the user returns.
Seamless Roaming enables the NCP VPN Client to switch automatically between different network connections, such as LAN, Wi-Fi, and cellular networks, without interrupting an active session. The VPN tunnel is dynamically rerouted in the background without requiring any action from the user. An up-to-date NCP Secure Enterprise VPN Server is required as the remote gateway.
VPN Path Finder enables secure remote access from networks where standard IPsec communication is restricted, for example when port 500 or UDP encapsulation is unavailable. Using IPsec/HTTPS fallback, the NCP Secure VPN Client can establish the VPN connection via HTTPS port 443, allowing the tunnel to pass through many firewalls and proxies that would otherwise block IPsec traffic. This functionality requires an up-to-date NCP Secure Enterprise VPN Server as the remote gateway.
Security and access protection
NCP VPN solutions support strong encryption algorithms and key lengths designed to meet modern security requirements, including elliptic curve cryptography (ECC). New cryptographic methods can be introduced through software updates, helping organizations adapt their security infrastructure as requirements evolve. NCP is also working to implement post-quantum cryptography (PQC) across its products, with completion currently planned by the end of 2027.
The integrated personal firewall protects the device against attacks from the internet, Wi-Fi networks, and LAN connections. Protection is active from system startup, with firewall rules adapting dynamically to the current network environment.
Friendly Net Detection (FND) automatically identifies whether the device is connected to a trusted or untrusted network and applies the appropriate firewall rules. This helps maintain the required level of protection as users move between corporate networks, home networks, and public Wi-Fi.
The integrated personal firewall is available for NCP Secure VPN Clients for Windows. Availability on macOS depends on the operating system and product version. An integrated personal firewall is not available for iOS or Android.
The NCP Personal Firewall includes:
- IP Network Address Translation (IP NAT)
- Stateful packet inspection
- Application-specific filter rules
- Protocol-, port-, and address-based filter rules
- Friendly Net Detection
- Automatic hotspot detection
- Connection-dependent filter rules
- Extensive logging options
Endpoint Security checks security-relevant properties of a device before access to the corporate network is granted. Depending on the configuration, these checks can include antivirus software status, running services, certificate contents, and installed software versions. Administrators define the security requirements centrally, preventing users from changing them. If a device meets the defined security policies, access is granted. If it does not, access can be denied or restricted to a quarantine environment.
Secure VPN access should not rely solely on a username and password. NCP VPN solutions support multiple authentication methods that can be combined for multi-factor authentication, including one-time passwords (OTP), digital certificates, and biometric authentication. Support for PKI-based authentication, elliptic curve cryptography (ECC), and multiple certification authorities also enables integration with complex certificate and PKI environments.
Parameter Lock allows administrators to define and lock client settings centrally so that users cannot change security-relevant configuration parameters. Options that users do not need can also be hidden, simplifying the client interface and helping prevent misconfiguration, tampering, and unwanted connection attempts.
Centralized management and availability
NCP High Availability Services use load balancing and failover mechanisms to increase the availability of NCP Secure Enterprise VPN Servers. Multiple gateways can be combined to distribute VPN connections and maintain remote access if an individual gateway becomes unavailable. For more information, see the NCP High Availability Services data sheet.
NCP Secure Enterprise Management includes an integrated, unlimited RADIUS server together with extensive monitoring and control capabilities. Organizations can use the integrated functionality to consolidate or replace existing RADIUS systems where appropriate
NCP VPN solutions support Single Sign-On (SSO) via SAML. Once the user has been authenticated through the SSO environment, the NCP Secure VPN Client establishes a secure IPsec VPN tunnel. Internal services can be accessed through the tunnel, while traffic to external cloud applications can be routed outside the VPN using capabilities such as NCP VPN Bypass or application-based tunneling.
NCP’s software-based VPN solutions can be deployed in virtualized IT environments, allowing organizations to use their existing data center and virtualization infrastructure. This can reduce the additional hardware, installation, and operating costs associated with larger remote-access environments while supporting flexible and scalable deployment.
NCP Secure Enterprise Management provides centralized administration of NCP Secure Enterprise Clients and gateways. Administrators can manage and distribute:
• Client configurations
• Certificates
• Security policies
• Software updates for supported Windows clients
• Endpoint security policies
• Gateway configuration changes
This enables large and distributed remote-access environments to be managed consistently and efficiently without having to configure each endpoint individually.
User experience and compatibility
NCP provides VPN clients for Windows, macOS, and Linux, enabling organizations to integrate different platforms into a consistent remote-access environment. This supports heterogeneous IT environments without requiring separate VPN solutions for each operating system.
Each NCP Secure Client uses a configuration file containing the relevant connection parameters. Administrators can define settings centrally and lock individual parameters to prevent unauthorized or accidental changes. With NCP Secure Enterprise Management, client configurations can be created, managed, and distributed centrally across the remote-access environment.
NCP Secure Clients for Windows, macOS, and Linux provide a clear graphical interface for connection and security information. Connections to the corporate network can be established automatically, while users can monitor the connection process and view relevant status information. Context-sensitive tooltips explain important information in plain language, and clearly displayed error messages make troubleshooting and support easier. Integrated language options support international deployments.
Windows Pre-Logon allows users to establish a secure VPN tunnel before signing in to Windows. This enables authentication against the organization’s central Windows domain or Active Directory through the VPN connection. Supported clients can also establish a connection through a Wi-Fi hotspot during the pre-logon phase, with the integrated dynamic firewall providing protection during hotspot authentication.
VPN Bypass allows administrators to exclude specified applications from the VPN tunnel, even when split tunneling is disabled. Traffic from these applications is routed directly to the internet instead of passing through the corporate VPN gateway. For example, video-streaming or cloud applications can communicate directly with external services, reducing traffic and load on the VPN infrastructure.
Cost-effectiveness and flexible deployment
NCP solutions support multiple operating systems, allowing organizations to integrate different device types into their remote-access environment and support BYOD scenarios where appropriate. Organizations can define their own security requirements and determine which clients and devices are suitable for access to corporate resources.
NCP Secure Enterprise Management provides a central point of administration for the remote-access environment. Rollouts, certificate management, configurations, and software distribution can be managed centrally, while changes related to new employees, departures, or changing responsibilities can be implemented in near real time. This reduces manual administrative effort and simplifies the ongoing management of large and distributed environments.
NCP VPN solutions integrate with existing identity and access management systems and support the operating systems and technologies specified for the relevant product version. This allows organizations to continue using compatible existing systems and infrastructure, reducing the need for extensive modifications or additional investment.
NCP Secure Clients are designed to simplify day-to-day use and help reduce support costs. Centrally defined client configurations and Parameter Lock help prevent intentional or accidental changes, while clear error messages make troubleshooting easier. The Support Assistant can also collect relevant diagnostic information directly from the client system, helping support teams analyze and resolve issues more efficiently.
NCP Secure Enterprise Management supports multi-tenant environments, allowing multiple organizations to be managed through a shared VPN platform while keeping organizational structures and access rights separate. Administrators can access only the tenants and users assigned to them. This makes the solution particularly suitable for managed security service providers (MSSPs) managing VPN environments for multiple customers.