I’m currently working on introducing a device which will fulfill the following requirements.
– First here is the current scenario:
We are a medium size telecoms company and we provide mobile data and voice service. To provide VAS (Value Added Services) (e.g. SMS, MMS, and Pre-paid) services we use third party applications and servers which require outside access from those parties for maintenance and service upgrades. Currently those parties access the network servers through a VPN connection. We would like to implement a mechanism that will enable us to authenticate users who access the systems at our data center.
*Our requirements are as followed:
– Mechanism to authenticate users who access servers for maintenance and service upgrades
– System to implement access control for e.g. we would like to give access to only a specific server (e.g. only to MMSC). Currently the VPN gives access to the whole subnet, which has all the VAS applications.
– System to give access to only specific services. E.g only Telnet or SSH connection is to permitted to a specific system.
– Mechanism to monitor and log all user activities they perform in the system. E.g log of all the commands executed in UNIX systems.
Please suggest a system that would provide the above mentioned requirements. Any comments or suggestions are much appreciated.