Ground Control Logo 19 Years of Satellite Communications | U.S. - 800.773.7168 | International +1.805.783.4600
BGAN Network Security Banner
Home >  Products > Portable & Carry Systems > BGAN Main Page  > BGAN Security
BGAN Main Page
All BGAN Terminals
BGAN Service Plans
BGAN Coverage Map
Compare All Terminals
BGAN Photo Gallery
BGAN Firewall Rules
BGAN Launchpad
BGAN In-Motion Terminals
BGAN Link Service
BGAN M2M Service
BGAN Security Options
BGAN Video Streaming
BGAN Optimization
BGAN Portable Broadband - Remote User
BGAN Can be used while in a moving vehicle
MCD-4800 On a Ship
BGAN Satellite Internet Vehicle Use
Construction Use of BGAN Terminal
BGAN Network Security
BGAN Service Provided by Ground Control
Ask A BGAN Network Expert

Ground Control offers several ways to secure your BGAN network connection:

1. BGAN Firewall Controls - free custom rules for each BGAN SIM card - more
2. IPSec VPN to one of the Inmarsat SAS IPSec points worldwide - more
3. Co-Location customer owned VPN hardware at an Inmarsat SAS point worldwide - more
4. Point-to-Point VPN end-to-end VPN using customer equipment - more
5. A Private BGAN Network
via MPLS to an Inmarsat SAS points - more

BGAN VPN - Security Services

1. BGAN Firewall Controls - Free
Included with all Ground Control BGAN Subscriptions. $0 setup and $0 per month
Firewall rules, or a whitelist of IP addresses, protocols and ports can to limit what incoming or outgoing traffic is permitted over the BGAN network. The firewall rules are placed at the Inmarsat teleport and they can effectively block all unauthorized traffic not defined on the whitelist. Implementing a firewall is easy and there is no cost. Firewalls if used properly can reduce a service bill by thousands of dollars since there will be no unauthorized or background traffic occurring. Here are details on BGAN Firewall Controls.

2. IPSec VPN to Inmarsat - Avoids Public IP Costs
SAS BGAN Teleports at New York, Hawaii, Hong Kong, Italy, Netherlands, Amsterdam

$525 setup fee - $149 per month per VPN tunnel to Inmarsat IPSec router.
Requires IPSec capable router at subscriber headquarters. 12 month minimum term.

Use your IPSec VPN capable routers to connect to our IPSec routers at one of the above Inmarsat BGAN teleports. Since the VPN does not go over the satellite link (which is itself highly secure), VPN performance is excellent and the overhead VPN data does not add to the cost of using the BGAN network. VPN performance over the BGAN network takes a tremendous hit in performance since latency is 1200 to 1700 milliseconds. Also VPN adds significantly to the total amount of data transferred over the satellite link, and with the cost of BGAN charging by the Megabyte transferred, it makes sense to terminate the VPN at the nearest SAS teleport. One great advantage to using a IPSec VPN is that individual BGAN terminals do not need to be issued public-static IP addresses at a cost of $20 to $25 per SIM per month. Included in the cost are Private IP addresses which in effect pays for IPSec VPN if 5 or more terminals are deployed. Please email for more information

3. Co-Location VPN at Inmarsat - Avoids Public IP Costs
SAS BGAN Teleports at New York, Hawaii, Hong Kong, Italy, Netherlands, Amsterdam

Please call or email for pricing
Similar to IPSec VPN, Co-Location lets your firm install your own VPN hardware at one of the Inmarsat SAS locations. Like IPSec VPN, Co-Location VPN terminates at one of the Inmarsat SAS locations, so there is no performance drop common with VPN over a high latency satellite link. Second, there is no need to configure individual remote equipment with a VPN since all remote traffic is privately routed through the Inmarsat network to your Co-Located VPN hardware, thus avoiding the $25 per SIM monthly charge on Public IP addresses. Also, the monthly cost does not change if you have 1 or 100 remote sites. Please email for more information

4. Point-to-Point VPN
- Free - Requires no permission to implement
You may use your own VPN at the remote site and connect it over the satellite link to your home server at no added cost to your existing service. There no need to inform Ground Control that you are using a VPN over your BGAN network link. Please note that VPN over satellite will increase the amount of data transferred and there will be a negative performance hit. It is advisable to test a solution to confirm it operates within required specifications. Most VPN solutions today can work with the latency inherent with a satellite connection.

5. Private BGAN Network
Please call or email for pricing
Ground Control can establish an MPLS connection from the Inmarsat SAS to your organization's network. Any solution can be discussed, and applications are integrated by a specialized Inmarsat IT engineering team. To ensure that if you are developing an efficient worldwide network, we will offer you the best and most cost effective solution. If your organization requires MPLS, we highly recommend using IPSec VPN for initial implementation and switching to MPLS for a long term connectivity .Please
email for more information

BGAN Service to Consider

BGAN Terminal Web Portal - Monitor and Control
$19 per month per terminal plus one-time activation fee per Hughes 9502 terminal.
This web portal allows you to see the mapped GPS location of your BGAN Terminal(s), see the live usage totals (7 minute delay) of any terminal from any selected time range, wake-up or put to sleep any terminal, give it geo-fenced boundaries of operation, and have a detailed historic list of all actions. Track, monitor and control your BGAN Terminals for $19 a month, and there are no terms contracts. Cancel anytime. More

Helping You Choose
To facilitate the process of determining which connectivity solution best fits your organization and existing network, we have a number of ICT experts, including specialists at Inmarsat available for consolation. Please call or email us at and we'll start the process with the specialist that can aid you in a decision.


Copyright © 2002-2021 Ground Control. All Right Reserved.