Configuring a VPN Connection to BEEM

BEEM offers an optional VPN service for secure data transfers from your internal network, databases, or data warehouses to your dedicated BEEM cloud environment.

When You Need a VPN

Your data sources are behind a firewall
You have on-premises databases or warehouses
Your security policy requires encrypted point-to-point connections

Gather Your Network Information

Prepare these details about your infrastructure:

Requirement	Details
ISP information	Provider name and connection speeds
External gateway IP	Static or dynamic
Routing preference	Static or BGP dynamic routing
VPN device	Vendor and model (Fortinet, pfSense, Palo Alto, etc.)
Firmware/OS version	Current version running on the device
On-premises CIDR range	Your internal network address range

🚧
Reserved address range
The 192.168.0.0/16 address range is reserved and cannot be used for BEEM VPN connections. Alternative ranges are available.

Contact BEEM to Start Setup

Send your network information to [email protected] or your BEEM account manager
The BEEM Advanced Data Services team will provide:
- Endpoint configuration details
- Pre-shared keys and tunnel parameters
- Device-specific setup instructions tailored to your hardware

Implement on Your Side

Import the provided settings into your VPN appliance
Establish dual tunnels for redundancy
Verify routing connectivity between your network and BEEM

Joint Testing and Validation

BEEM schedules a validation session with your team
Together, confirm:
- Throughput and latency measurements
- Active tunnel redundancy
- Failover behavior with keepalive monitoring
Once validated, the VPN is production-ready

Key Benefits

Dual active tunnels ensure continuous operation during outages
Encrypted point-to-point connection for maximum security
Works with most enterprise VPN hardware (Fortinet, pfSense, Palo Alto, and others)

Contact [email protected] to start the VPN setup process.