System and method for securing network users in an enterprise network through cybersecurity controls

A system for securely isolating access by one or more users in a group of network users to an enterprise network implementing Multi-Protocol Label Switching (MPLS), the system comprising:

• an MPLS Layer-3 virtual private network (L3VPN) provided within the network, including, an L3VPN instance, wherein the L3VPN instance is configured for the group of network users and for isolating the one or more users' access to the network from other enterprise network users;
• a remote and mobile enterprise access (RMEA) gateway provided within the network, the RMEA gateway having client-based secure socket layer virtual private network (SSL-VPN) capability;
• a two-factor user authentication system;
• and
• a de-militarized zone (DMZ), wherein the DMZ is configured to implement cybersecurity checks on data traffic between the L3VPN instance and the RMEA gateway, and
• wherein the RMEA gateway is configured establish, on top of the L3VPN instance, an SSL-VPN session between a user computing device associated with a first user of the group and the RMEA gateway,
• wherein the L3VPN instance is configured to route all data traffic from the user computing device to the RMEA gateway via the DMZ, and the RMEA gateway is configured to route all data traffic to the user computing device via the DMZ, and
• wherein the RMEA gateway and is configured to provide the user computing device access to the enterprise network, subject to establishing the SSL-VPN session and two-factor authentication of the first user using the two-factor user authentication system.

A non-transitory computer readable storage medium storing program instructions for securely isolating access by one or more users in a group of network users to an enterprise network implementing Multi-Protocol Label Switching (MPLS), the program instructions comprising the steps of:

• configuring, on the network, an MPLS Layer-3 virtual private network (L3VPN) including an L3VPN instance, wherein the L3VPN instance is configured for the group of network users and for isolating the one or more users' access to the network from other enterprise network users;
• configuring a remote and mobile enterprise access (RMEA) gateway within the network, the RMEA gateway having client-based secure socket layer virtual private network (SSL-VPN) capability and being integrated with a two-factor user authentication system;
• configuring a de-militarized zone (DMZ), wherein the DMZ is configured to implement cybersecurity checks on data traffic between the L3VPN instance and the RMEA gateway;
• establishing an SSL-VPN session between a user computing device associated with a first user of the group and the RMEA gateway, wherein the SSL-VPN session is established on top of the L3VPN instance;
• authenticating the first user using two-factor authentication;
• routing all data traffic between the user computing device and the enterprise network through the first L3VPN instance to the RMEA gateway and via the DMZ;
• providing, by the RMEA gateway and subject to establishing the SSL-VPN and the two-factor authentication of the first user, the user computing device access to the enterprise network.