Designed the path around native Windows-compatible SSTP, keeping the employee-side connection simple while maintaining a controlled corporate network entry point.
Network engineering | Temporary access
Temporary access VPN with SoftEther SSTP.
A short-term VPN path for remote employees to work through an authorized corporate IP during urgent client setup windows, helping meet SLAs and avoid operational delays without turning the solution into a permanent broad-access tunnel.
Problem
What needed to be solved.
During urgent remote setup situations, employees needed a controlled way to connect through a corporate-authorized IP so client onboarding requirements could be completed on time. The goal was to reduce delays, protect SLA commitments and keep the access path temporary and documented.
Engineering approach
Design decisions and execution path.
Mapped the network path from Telmex corporate modem to Cisco ISR 1100, Palo Alto PA-440, Aruba switching and the SoftEther VPN host.
Used firewall-controlled access for the temporary window instead of leaving a broad permanent exposure in place.
Documented the runbook, validation checks and evidence needed so the process can be repeated quickly during time-sensitive setup windows.
Value
Operational value and proof points.
Helped keep urgent client setup work moving without waiting for normal network availability.
Supported SLA-sensitive situations with a repeatable and documented access process.
Kept the public-facing explanation focused on business continuity, temporary access and operational control.
Photos and evidence
Project media and evidence.
Architecture, firewall and service screenshots that show the temporary access flow and validation points behind the solution.
Architecture diagram
Public-safe diagram of the Telmex → Cisco ISR → PA-440 → Aruba → SoftEther access path.
Windows VPN profile
Client-side evidence showing native SSTP VPN configuration for the temporary access path.
Firewall control
PA-440 console evidence showing controlled firewall and NAT handling for the access window.
VPN service status
SoftEther Server Manager evidence showing the VPN service and listeners operational.