Optimization over Inmarsat Products

Digital Ship Korea 2012 Howard Hughes

31st October 2012

Three important questions:

How fast is it?

What is the coverage?

How reliable is it?

Bandwidth

Speed offerings on FleetBroadband

Flee

tBro

adba

nd 1

50

• Upto 150K • No

streaming

Flee

tBro

adba

nd 2

50

• Upto 284K • Streaming:

8 – 128K

Flee

tBro

adba

nd 5

00

• Upto 432K • Streaming:

8 – 256K

Bandwidth

Speed on Ku-Band with XpressLink

Bandwidth is the important factor, on both systems

Upload Speed Download Speed Burst* CIR** Burst* CIR**

Basic 128 32 128 32

Pro 256 64 256 64 128 32 384 96

Premium 512 128 512 128 256 64 768 192

More on this later…

Managing the overall process

Phase 1

Equipment Installation of Satcom equipment Configuration – what must be known beforehand How much Bandwidth? Survey the network

Phase 2

Protection Don’t just leave as an open connection Plan what to allow Consider web site access

Phase 3

Maintenance Easy configuration

Must be simple to maintain or will fail

Three stages

Configuration options

Configuration possibilities on FleetBroadband terminals often overlooked or not understood

Network User Groups

MAC Address filtering

Firewall configuration

Restricted dialing

SMS Activation

Remote Maintenance

FleetBroadband

Essential Communications

Crew Communications

Browsing GSM

Simple Control/Management

CS NAV/Chart

How much Bandwidth?

Does extra bandwidth equal optimal performance?

Quality not quantity?

How to view your vessel

Is it a standalone network? - Often the default view

- Each vessel may have its own software

- IT Policies would be unique/harder to standardize

Will it be an extension of the owners office? - A common approach

- Can be easier to secure

- IT policies can be carried over

Providing

What do you want to provide?

If Crew Welfare: - What is acceptable?

- Is there a “light” site

- Compression?

Social Networking

For legal downloads – no problem

Premise is logical

Not so logical for Per M/Byte plans!

Not so logical for any communication network!

All that glitters is not Gold!

Peer 2 Peer

Skype

A very effective program

Free

Not very effective at bandwidth management

Costly on resources

Being asked more and more…

Restrictions through UT configuration

FleetBroadband Do I need Streaming?

Some applications may require dedicated connections from time to time

Firewall What is important to consider? •Cost? •Control •Ease of configuration •Failsafe

Bypass security... What is important to consider? •How easily can it be done? •Securing •Failsafe

•Consideration of punishment

Another way to restrict access…

DNS

DNS

Management of data

Management

Threat: Any activity that has the potential to damage your computer and/or network

Vulnerability: A weakness than can be exploited

Attack: A deliberate attempt to bypass security

Threats, Vulnerabilities & Attacks

IT Security

Policies, Procedures & Awareness

Physical Access

Lock away

Sensible precautions

Network Security

Internal threats

Application/Data Security

Prevent propagation of unwanted files (Virus’s)

Defences

IT Security

Keep it simple

What should you concentrate on!?

Firewalls

User awareness

Corporate IT Policy

Physical Security

The list is endless…

Maintenance

Keep users aware…

True or false?

False

True or false?

And the old favourite…

(URGENT BUSINESS ASSISTANCE STRICTLY CONFIDENTIAL) COMPLIMENTS OF THE SEASON Good Day! I am the manager of bills and exchange at the foriegn remittance department of the (ABN AMRO BANK AMSTERDAM ). I am writting you this letter to ask for your support and co-operation to carry out this transaction. We discovered some abandoned sum $15,500,000(FIFTEEN MILLION, FIVE HUNDRED THOUSAND U.S DOLLAR ) in an account that belongs to one of our foriegn customer who died along-side his entire family in march this year in a terrorist train bomb blast in Spain some few months ago.Since this development,we have advertised for his next of kin or any close relation to come forward to claim this money,but nobody came yet to apply for the claim. To this effect,i and other official in my department have decided to look for a trusted foriegn partner who can stand in as the next of kin of the deceased as we cannot do it only ourselves and claim this money.We need a foreign partner to apply for the claim on our behalf because of the fact that the customer was a foreign and we don't want this money to go into the treasury as unclaimed fund. Every document to effect this process will emanate from my table and i will perfect every document to be in accordance with the banking law and guideline,so you have nothing to worry about and we have agreed that 30% of this money will be for you,while 10%will be for any expenses incured on both sides wihile 60% will be for my colleagues and me. If you are willing to help us,please indicate by replying this letter and putting in your name, private telephone number,fax and permanent residential address via my private email address below.I awaits your immediate response to enable us start this transaction as soon as i recieved your reply,i will send you a text application form for immediate APPLICATIION OF CLAIM. Please contact me even if you are not intrested in my proposal to you to enable us scout for another partner in the event of non-interest on your part. Thanks for your co-operation E-MAIL :pietjan2000@netscape.net Mr Piet Van Jan

Is that hyperlink real?

Hover before you click!

A fully managed solution

A managed solution with scalability

Seamless switching/One IP address

Fully Managed

On-board – The G5

On-shore – Trench & Unified Threat Management (UTM)

XpressLink

XpressLink

Seamless and managed switching

Based on Thresholds rather than “no reply”

One Public IP*

Individual IP to POP also available

Seamless switching

* Same public IP is dependant on which port on the switch user equipment is connected to. Only one port is configured to offer same public IP

XpressLink IP Solutions

Select home POP close to Office HQ

Internet Access

Optional VPN Access

Optional MPLS Access

Benefitting from VSAT (iDirect) and FleetBroadband built in TCP Acceleration

On-board Corporate and Crew/Client LAN

* Same public IP is dependant on which port on the switch user equipment is connected to. Only one port is configured to offer same public IP

XpressLink XpressLink VSAT VoIP

Optimised G.729 Codec

FXS and E1(ISDN) interface available

Connection to on-board PBX (via optional E1/T1 int.)

Standard 4 FXS

Option – 8 FXS or more

QoS and MPLS in place to guarantee high quality

To ensure high quality – Latency, Jitter and Mean Opinion Score (MOS) monitored

Multiple numbers and locations

XpressLink XpressLink Group QoS

Powered by iDirect GQoS

Differentiate priority of traffic - Corporate

- Crew

Prioritize applications, ports and IP addresses based on customer request

XpressLink

Full automated management

Automated Power-down/up sequences

Intuitive touch screen interface

Permission based – restrict access

On-board – the G5 Controller

G5 Video goes here. Once I see the video I can create a narrative to go along with it

Fully managed On-shore – Inmarsat

Fair Access Policy applies for the XpressLink Basic, Pro and Premium products

This does not apply to customers who have dedicated bandwidth service (XpressLink Custom)

Use of voice service delivered by others than Inmarsat Maritime over this system is not allowed (i.e. Skype)

Use of file-sharing, streaming audio or video content is not allowed. Any attempt of altering the way of transfer streaming audio/video content is not allowed, (i.e. download and transfer audio/video files via other protocols like ftp, email or other applicable transfer methods)

Use of WAN accelerators or optimizers or other techniques requiring more than 50% continuous utilization is not allowed

Fully managed Unified Threat Management (UTM)

Onshore Firewall at Inmarsat POP’s

Application filtering

Web filtering

• Category filtering

• Black/White listing

• Web reputation

• More than 75 web content categories, and more than 47 million rated websites - all continuously updated

Data history reporting

Maintenance

How can you keep control while you’re not on the ship?

What are my options?

Are you alone in the world?

Keeping Control - Remote Access

Recommended on Static connections

Dynamic no issue

Allows access to Dashboard only

SMS Activation

Remote connection activation

No need to get crew involved

Simple maintenance

Keeping Control - Remote Access

Single Public IP

Always-on connection

Free service. Not chargeable to the end user

XpressLink

Keeping control – JRC, Satlink, Furuno and failsafe

Go “Old School”

Remember 3.1Khz

IP Access

Bandwidth

In summary…

Control can be kept basic and effective

Protect your asset

Simplicity is the key

Any questions?

Thank you 감사합니다