After-Sales Teams in China Remotely Supporting Overseas Customer Sites: How to Connect Reliably to Authorised Maintenance Entry Points?

Using customer-designated VPNs and bastion hosts or connecting cross-border paths to approved entry points

When an overseas customer requires external equipment vendors to enter the maintenance environment through its existing enterprise VPN, remote access gateway, or bastion host, we connect a gateway over existing broadband at the vendor's domestic office or server room, steering only traffic bound for the customer-designated public entry address onto our cross-border transmission channel and exiting from a PoP near the customer's country or region. Domestic engineers connect using their original client software or browser portal, reducing login timeouts, remote desktop freezes, and interrupted log pulls caused by congestion over the cross-border public internet.

If the overseas customer approves opening a dedicated, controlled remote support entry point for the project site, we configure forwarding paths and access controls strictly according to the customer-designated target applications, equipment status dashboards, log query services, or jump hosts, opening only approved target addresses and ports to avoid touching unrelated production subnets inside the customer plant.

When the overseas customer's information security team requires registering a fixed source IP address for firewall or gateway allowlists, we can plan egress addresses during solution design and confirm the actual source addresses, usage scope, and reconnection arrangements during dual-appliance or backup-path failover with both your enterprise and the customer before going live.

Split-traffic access on the support team side and bandwidth adjustments during joint debugging peaks

At domestic R&D centres or after-sales support offices, we can connect a physical gateway directly over existing broadband on the public internet, or deploy a virtual gateway in your existing virtualisation platform or public cloud, avoiding construction waits for new physical dedicated lines and achieving shorter provisioning times than traditional physical dedicated lines. Traffic is split by target address at the gateway so that only traffic bound for authorised overseas customer entry points enters the cross-border channel, while daily internet use and internal systems at the office remain on existing local broadband; if support staff work across multiple locations, your chosen third-party zero-trust application connector can also be deployed on the access appliances to control who can initiate connections alongside your existing account system and endpoint management rules.

Overseas equipment delivery often follows distinct phases: during on-site installation and joint debugging, trial production support, or scheduled customer downtime maintenance windows, multiple R&D and after-sales engineers in China need to intensively view on-site screens and operational data. Based on existing access links and available resources at domestic sites, enterprises can request temporary cross-border channel bandwidth adjustments by site and joint debugging period to deliver stable remote support during customer-opened maintenance windows, then run at regular capacity during routine maintenance periods.

We are responsible for establishing cross-border network connectivity between your domestic support teams and the overseas customer's authorised entry points so engineers can smoothly view approved interfaces and access operational logs and technical documentation; on-site equipment commissioning, parameter changes, and production line operations are performed by the equipment vendor's engineers and the customer's on-site staff in accordance with both parties' operating procedures.

Network-side connection logs and closing paths after after-sales support ends

For network connection records during cross-border maintenance, on the network transport side we support providing DNS resolution logs (including source IP, destination domain, and resolution result) and 5-tuple connection logs (including source IP, source port, protocol, destination IP, destination port, upstream and downstream data volume, and start and end timestamps) to help verify when remote connections occurred and which targets they reached. Because network-layer connection logs do not contain screen recordings, file contents, or specific operational commands, any command-level or screen auditing required by the overseas customer or your enterprise continues to be handled by the bastion host or business auditing system used by both parties.

After-sales account approvals, maintenance window activation, and account expiration deactivation are managed by the overseas customer and equipment vendor administrators within their respective systems; on the network connectivity side, when an overseas project completes handover, a single maintenance window concludes, or a maintenance contract expires, simply notify us as agreed and we will close the cross-border forwarding path to that customer entry point, decommission temporary project channels, or revoke the corresponding allowlisted egress configuration.