A.05.70 HP Insight Remote Support Advanced and Remote Device Access Security Overview (October 2011, 5900-1735)

3.8.1 hpVPN
With hpVPN, HP provides a router to the customer. The router is deployed in the customer’s DMZ. HP’s VPN
router establishes an IPsec VPN connection with a so called Customer Premises Equipment (CPE) router, at
the customer’s site. HP maintains the software and router configurations on both ends. Currently, all hpVPN
connections use triple-DES or AES encryption and SHA-1 HMAC. The access lists on the CPE routers allow
only connections from authorized HP systems. HP manages and configures the hpVPN routers.
NOTE: The hpVPN solution is offered in limited areas, please check with your HP representative to determine
if this option is available in your country.
3.8.2 Customer-Owned Router (COR) VPN
With COR VPN, HP establishes an IPsec VPN with a customer-owned router. HP’s RDA VPN routers are
successfully inter-operating with ProCurve, Cisco IOS, Cisco PIX, Check Point, Juniper, and other VPN routers
at customer sites. COR VPN connections can be configured according to the customers unique configuration
requirements. The customer manages and configures their own equipment.
3.9 Connectivity Method for Integrated Service Digital Network (ISDN)
In some countries HP offers the option of ISDN connectivity. As with VPN solutions, SSH port-forwarding is
used over ISDN to provide secure remote access.
Figure 3-7 ISDN
3.10 Attended RDA via Virtual Support Room
Virtual Support Room (VSR) is a lightweight, web-hosted meeting place that enables HP support specialists
to connect to a customer enterprise covered under warranty or contractual agreement. Attended RDA is an
ad-hoc connection method that can be used without any complex configuration or hardware setup.
VSR is a lightweight version of HP Virtual Rooms and offers web collaboration functionality such as desktop
sharing, file transfer, and desktop control. Like a real private meeting room, securely locked with doors, the
3.9 Connectivity Method for Integrated Service Digital Network (ISDN) 45