image of celndar

Network Service Descriptions

Private Ethernet Service

We offer customized private ethernet services (also known as virtual private network, VPN). CEN's VPN service provides a managed service, your traffic is secured and separated from other members' traffic on the network through the use of VPN tunneling. Speeds range from 10 Mbps to 10 Gbps. The utility of these depend on your needs and can be used for example, for disaster recovery, as a remote storage option (hosting data off site), to establish a dedicated port (port fee separates) to host this connection or as required by certain applications to provide functionality you wouldn’t have otherwise.

Depending on your needs/ application we can offer:
Layer 2 “Point-to-point” E-LINE circuit “Virtual Wire” offers a secure connection between specific points.
Layer 2 “Full Mesh” (Point-to-multipoint) E-LAN circuit “Virtual LAN” allows for more connections with the same network.

Managed WiFi

CEN offers end-to-end wireless network solutions to ensure WiFi connectivity. We will design and configure your wireless network to meet modern demands of high capacity usage and good coverage. This modern managed WiFi solution allows you to measure performance in that coverage space and monitor usage (number of people online) at any given time. Our inclusive service is fully installed and monitored to ensure reliable coverage.

Optical Transport

CEN offers dedicated transport services on our optical network connecting 19 locations around the state.
We are able to provide dedicated transport via optical transport network (OTN) providing Layer 1 point-to-point connectivity with 50ms restoration from path failures. These can be either 1G, 10G, or 100G handoff, single mode or multimode.

Dedicated ITU-T G.698.1 DWDM channel between locations on CEN's optical network. We are able to transport member information at a pure light wave level and is protocol-agnostic. This requires optics that are tuned to match specific frequencies.

Cloud Connectivity

CEN is actively working with NEREN on a connection into New York City. This summer, the RFP to replace the existing optical network between Hartford, Storrs, Rhode Island, Cambridge and Springfield was awarded to Cisco. In terms of CEN upgrades, we are working on a 100G ring from 300 Bent Street in Cambridge to Storrs, to 155 Locust Street/55 Farmington Avenue, down to New Haven and 60 Hudson Street in New York City, and back through Albany, New York, to Springfield, Massachusetts. Besides boosting capacity and reducing our overall costs to members, these upgrades will position CEN closer to big cloud providers such as Amazon, Microsoft, and Google. This will allow CEN to expand our ability to directly connect our members with big cloud providers.

Domain Name System Service

CEN provides a fully managed Domain Name System (DNS) hosting service to our members free of charge.

The DNS service can provide your primary record management and authoritative source for domain zones or act as a secondary/tertiary authoritative source for your zone. CEN is able to provide delegated access to your zone file so that you can leverage our service in managing your domains. The DNS service consists of highly available and fault tolerant DNS services spread out geographically across our backbone.

CEN is the administrator for the K12.CT.US

  • IPv6 Support
  • DNSSEC Support
  • Anycast configuration for Highly Available
  • Secure

High Performance Computing/Researcher Solutions

The Connecticut Education Network (CEN) is the regional education network that reaches from Boston to New York and we leverage Internet2 to expand that reach nationally and internationally. Our core mission is to serve educational needs in CT and this includes researchers needs for high performance computing.

Web Filtering

CEN provides centralized filtering services to all members. This service is included as part of our base ISP service offering for public K-12 members and libraries that use CEN as their ISP. The filtering platform is a CIPA compliant system which can be used to keep your organization in compliance with E-Rate requirements. CEN has contracted with iboss security to provide a cloud solution hosted within multiple CEN’s data centers. Members have the ability to log into a portal dedicated to their organization to manage filtering policies. Members also have the ability to purchase their own filter appliance, minus the cost of licensing which is covered by CEN currently through August 2018. Leveraging an internal district appliance allows for integration with the members domain server and more granular control over individual users.

Firewall Services

CEN is able to offer managed or unmanaged cloud hosted firewall as an on demand, customized service.

Why use a CEN Firewall? A basic firewall controls the traffic that goes in and out of your network to protect you from hacking. CEN’s firewall service goes beyond this to offer Unified Threat Management covering Network Intrusion Prevention, Gateway Antivirus, Gateway Antispam, and Data Leak Prevention (DLP).

In addition, we can provide Network Address Translation, converting the limited amount of public IP addresses you have to a larger number of private IP addresses to give you network flexibility. We can help you transition to IPv6 from IPv4. Currently many users have an IPv4 address. IPv6 was designed to eventually replace IPv4 and allows for more Internet users to communicate with each other and utilize IPv6 only sites.

DDoS Mitigation

CEN has recently included distributed denial of service (DDoS) mitigation as part of our core service offering to all members. DDoS attacks can cripple your internet connection by overloading the pipe to CEN, and this service helps maintain business continuity as we work to defend against what has become a new reality in the digital threat landscape. We currently mitigate multiple attacks per week, sometimes multiple per day. We also provide detailed mitigation reports to affected members. As one CEN member attests, "As a result of the work you guys did in mitigating the attacks, we never saw a performance impact to our connectivity. My assumption is, the student(s) [who perpetrated the attack] gave up as there is no fun with no payoff."

Private Ethernet

We offer customized private ethernet services (also known as virtual private network, VPN).  CEN's VPN service provides a managed service, your traffic is secured and separated from other members' traffic on the network through the use of VPN tunneling.  Speeds range from 10 Mbps to 10 Gbps.  The utility of these depend on your needs and can be used for example, for disaster recovery, as a remote storage option (hosting data off site), to establish a dedicated port (port fee separate) to host this connection or as required by certain applications to provide functionality you wouldn’t have otherwise.

Depending on your needs/ application we can offer:

Layer 2 “Point-to-point” E-LINE circuit “Virtual Wire”  offers a secure connection between specific points
Layer 2 “Full Mesh” (Point-to-multipoint) E-LAN circuit “Virtual LAN” allows for more connections with the same network.

Contact us for more information.

IPV 4/6

CEN’s fiber network across CT has been built with a high level of redundancy, which means we can offer an ISP with a high level of resiliency.  Our core fiber optic hub has connections in more than twenty different locations around the state.  This means that we can sustain multiple, different fiber optic breaks and still ensure that your data is transmitted.

As part of your ISP connection to CEN, you get /29 allocation of CEN IPv4 addressing and a / 48 of CEN IPv6 addressing.  We also offer options for additional IPv4 addressing for use on your CEN connection (on a monthly rental basis).  Contact us if interested.  We encourage CEN members to start taking steps to move to IPv6.  This checklist highlights what you need to get IPv6 fully implemented.  With the number of devices that need network connectivity growing every year, the time to get IPv6 going is now!  There are not enough IPv4 addressing to support the ever-growing list of network-connected devices.  CEN can enable IPv6 for you and will work with you to answer any questions you may have on enabling IPv6 on your CEN connection.

Data Center Colocation

CEN members have colocation options as our network has connections to CyrusOne (Cervalis was purchased by CyrusOne) and Digital Back Office's Data Centers which members can leverage for their colocation and disaster recovery needs.

CyrusOne Data Center: Norwalk CT

cyrus one logo
Space: Total of 75,000 sq./ft of DC space and 50,000 of disaster recovery seating space in total.
Power: Three diverse feeds from two separate power companies.
More information available here.

Digital BackOffice: CT

digital back office logo
Space: Two data centers within Connecticut with sufficient space for physical server co-locations or virtual servers (MS HyperV only).
Power: Two alternate commercial power grids.
Please contact us if you are interested in colocation. 

Virtual Hosting

Virtual Colocation & Server /Application Hosting

CEN members have virtual hosting options with CCAT (Connecticut Center for Advanced Technology)/ CRCOG (Capital Region Council of Governments) based in East Hartford, CT.

CCAT/CRCOG have blade servers with hybrid storage SANs in two different Connecticut datacenter locations. These replicating clusters have the ability to host thousands of virtual servers, virtual desktops, virtualized applications, or operate as redundant backup and DR locations for towns, schools, and nonprofits on the CEN.

In addition, CEN members have access to a broad range of applied services to accompany their virtual colocation & hosting needs. The CCAT clusters can be self-provisioned and managed by clients through an intuitive self-service portal or be fully provisioned and managed by CCAT’s datacenter services team.
CRCOG logo

Telepresence – Video Conferencing

CEN offers video teleconferencing services to its members through its Cisco TelePresence Video Core. This service provides an easy way for multiple parties to connect through a high quality, modern, high definition real-time videoconference.  If interested, please contact us