Multi-tenant VPN for MSPs & MSSPs: Remote Access at scale
Managed service providers (MSPs) and Managed Security Service providers (MSSPs) delivering secure remote access at scale need VPN infrastructure that supports multiple customer environments without multiplying operational overhead.
NCP’s Secure Enterprise solution runs as either a shared platform where each customer operates as an isolated tenant on common infrastructure or a dedicated platform, where each customer gets its own NCP environment hosted and operated by the provider. Both models scale from SMB to enterprise client networks with no architectural ceiling on size or complexity, backed by high-availability clustering for uptime and flexible pay-per-use pricing for transparent cost management.
Core capabilities for provider deployments
Software-based and virtualizable
Allows for easy integration with other service providers (e.g., storage providers)
Infrastructure compatibility
works well within SASE, SD-WAN, SSE, and Zero Trust architectures
Rapid implementation
getting secure remote access up and running quickly, with minimal downtime, thanks to software-based, centrally managed, one-click deployment that fits your existing infrastructure
Multi-tenancy
isolated customer environment on shared or dedicated infrastructure, with no limit on network size or complexity
High scalability
supports growth from SMB to large enterprise client bases without re-architecture
Endpoint security
integrated Network Access Control (NAC) and dynamic firewall enforced per tenant
Central management
single console for configuration, certificate management, and policy enforcement across all customer accounts
High availability
gateway clustering and load balancing
Cloud and security stack integration
interoperates with existing cloud services and security infrastructures
Cost transparency
pay-per-use pricing with individual customizable terms per customer account
Flexible licensing options
pay-per-use, subscription, purchase with maintenance agreement
How NCP powers Aryaka’s Secure Remote Access
Aryaka is a pioneering leader in Unified SASE as a Service, delivering high-performance, fully managed connectivity to fast-growing, distributed workforces. To power the remote access layer of its SmartSecure Private Access solution, Aryaka partnered with NCP engineering, building its secure remote access on NCP’s flexible cloud-ready VPN technology.
The Challenge
Aryaka needed a remote access solution that could integrate into its customers’ complex, often highly customized network environments without adding implementation time or cost.
This was particularly relevant during the COVID-19 pandemic, when Aryaka needed to onboard large numbers of remote users almost overnight.
Beyond speed, Aryaka had very strict requirements:
The Results
By building on NCP’s flexible and secure remote access, Aryaka has been able to:
- Onboard large volumes of remote users quickly and securely, even under rapid-growth conditions
- Extend Zero Trust and SASE-aligned security to remote branch users without added operational complexity
- Offer a highly flexible, fully managed remote access solution that scales with customer growth while isolating each tenant’s network resources
FAQ’s
This FAQ covers how NCP's Enterprise VPN supports managed and multi-tenant deployments for MSPs and MSSPs.
NCP Secure Enterprise is a centrally managed VPN solution that MSPs use to deliver remote access as a self-hosted or resold service to their own customers. It’s built for multi-tenant environments, high-bandwidth data center use, and integration with multiple cloud services.
An enterprise deploys VPN for its own employees on infrastructure it owns end-to-end. An MSP deploys VPN as infrastructure it operates on behalf of multiple client organizations, so the platform has to support multi-tenancy, per-customer segmentation, high scalability, and flexible authentication across customers with different requirements in addition to the requirements of a single-tenant enterprise VPN needs to do.
NCP supports two models: a shared platform, where each customer runs as an isolated, autonomous client on common infrastructure the MSP operates, and a dedicated platform, where each customer gets its own separate NCP instance hosted and managed by the MSP. MSPs can mix models across their customer base depending on size, compliance needs, or budget.
Yes. NCP offers a flexible pay-per-use pricing model designed so MSPs can align their VPN costs to actual customer usage and manage margins transparently, rather than committing to fixed licensing regardless of how many client seats are active.
NCP remote access solution for MSPs includes central management, endpoint security, high availability, and cost transparency, with the ability to customize settings individually per customer account. This lets an MSP apply consistent policy management across its book of business while still tailoring configuration where a specific client needs it.
MSPs typically start by contacting NCP’s sales team directly to scope a shared vs. dedicated deployment and pricing under the pay-per-use model; NCP also offers a live demo on request and/or a guided installation as a proof of concept in your environment.