Link your offices, branches and properties into one private network, and give staff secure access to office systems from anywhere - on WireGuard and IPsec, set up and managed by iberry.
A permanent encrypted tunnel between the routers of two or more sites. The head office, branches, warehouses or hotels share one private network: files, cameras, the accounts server and printers reachable between them, with nothing exposed to the internet. It replaces a leased line or MPLS link for most small and mid-sized businesses.
Staff laptops and phones connect to the office from home, a hotel or a client's site, and reach the file server, Tally, ERP or remote desktop as if they were at their desk. Each person gets their own key, which can be revoked the day they leave.
Modern, fast and simple to keep running. Clients for Windows, macOS, iOS, Android and Linux. Our default for both site-to-site and remote access.
Where the other end needs it - another vendor's firewall, a partner's network or a cloud provider's VPN gateway.
Only office traffic over the VPN, or everything, per person - whichever your policy needs.
Accounts can reach only what they need: the accounts team to the accounts server, the camera vendor to the cameras.
On sites with two internet lines, tunnels move to the surviving line automatically. See internet failover.
Who connected, when and from where, kept and available to you.
Opening a port on the router so staff can reach remote desktop, the camera recorder or the accounting server is the most common way small businesses get broken into: the service is visible to everyone on the internet, all the time. A VPN keeps those services invisible from outside. Only devices holding a valid key can reach them at all.
Office VPNs that drop or will not connect usually come down to a few causes: the office line changing its public address, a second internet line taking over without the tunnel following, an ISP router in front of the firewall blocking the VPN port, or an old protocol that phones no longer support. We find which one it is, fix it, and move you to WireGuard if that is the cleaner answer. MikroTik routers already in place can usually be kept - see MikroTik services.
Site-to-site VPN joins whole networks - two offices - permanently, router to router. Remote access VPN connects one person's laptop or phone to the office when they need it. Most businesses with a branch and remote staff use both.
Yes. WireGuard uses modern cryptography, has a small, heavily reviewed code base and is built into Linux and supported by major router platforms, including MikroTik RouterOS. Each user and site has its own key.
Yes. The official WireGuard app runs on iOS and Android as well as Windows, macOS and Linux. We send each person a configuration, often as a QR code to scan.
For most small and mid-sized businesses, yes: two ordinary internet connections and a site-to-site VPN cost far less than a leased line or MPLS link, and with a second line at each end they keep running when one provider fails.
Yes. The tunnels run over the internet, so the distance does not matter. We configure both ends remotely; a local partner installs hardware where needed.
Site-to-site and remote access VPN are set up on iberry's firewall plans (from ₹30,000 one-time in India, ₹15,000 yearly maintenance). Projects with several sites or outside India are quoted individually.
Tell us how many sites, how many remote users and which systems they need to reach. Published firewall plans in India are ₹30,000, ₹50,000 and ₹99,000 one-time, each with ₹15,000 yearly maintenance; DNS Hosted Security is ₹9,000 a year. Outside India every project is quoted on its own. The MikroTik hardware is usually supplied through a local vendor in your country, so there is no import; it can also be shipped from India.
Ask for a Quote