Secure your business. Use DIGIPASS two-factor authentication. The world s leading software company specializing in Internet Security.

Transcription

1

2 Secure your business Use DIGIPASS two-factor authentication S E C U R E D PA S S W O R D S O N E - T I M E PA S S W O R D S P u b l ic K E Y I N F R A S T R U C T U R E The world s leading software company specializing in Internet Security

3 Be smart and use DIGIPASS two-factor authentication My password is password representative for 12% of users I always use the name of my wife as my password 35% of people use a piece of personal information as password My password is fi$cd5k+wrote it down on a Post-it note 30% of users write down their passwords and hide it around their desktop VASCO addresses the security gap caused by using insecure static passwords for the authentication of users. Strong authentication refers to systems that require multiple factors for authentication and uses advanced technology to verify a user s identity. A physical device like a DIGIPASS or a DIGIPASS smart card in combination with something you know (like a PIN code) or something you are (like a fingerprint), enables you to safely identify customers and employees who are trying to access your network resources. VASCO s advanced authentication technologies are virtually impossible to hack or break. DIGIPASS Pack A DIGIPASS pack consists of all the necessary DIGIPASS hardware and VASCO software to provide you with a complete and secure strong authentication solution for a range of technology partners. The DIGIPASS pack provides strong two-factor authentication for remote access, web-based applications, local area network access, and exists for a wide range of VASCO Ready Solution Partners (please refer to the global technology partner table in this brochure). DIGPASS Pack for Remote Authentication DIGIPASS Pack for Remote Authentication is the perfect solution for SME that want to authenticate their users from remote. This DIGIPASS solution requires authorized users to demonstrate the possession of both a DIGIPASS GO 3 device (by typing the One-Time Password generated by the GO 3) and the knowledge of a secret, a unique PIN code. This two-factor authentication technology has been designed to perform seamlessly with RADIUS based remote VPN. DIGIPASS Pack for Network Authentication DIGIPASS Pack for Network Authentication is a company s best partner when it comes to remembering passwords. This DIGIPASS solution not only stores usernames and passwords on a smart card, but also fills in automatically username and password whenever a website, a portal, Windows or any other application asks for identification. This is possible by using either a DP 905 or a PCMCIA card reader. DIGIPASS Pack for Remote & Network Authentication The DIGIPASS Pack for Remote & Network Authentication combines the best of the above mentioned Packs. On the one hand the DIGIPASS 860 USB stick has the ability to remember passwords and fill them in automatically. On the other hand the DP 860 generates One-Time Passwords, used to authenticate your users from remote.

4 Client Side: DIGIPASS family The DIGIPASS family products support three major authentication technologies: Using One-Time Passwords (OTP) provided by DIGIPASS. Using DIGIPASS Secure Authentication Suite (DP SAS) on DIGIPASS smart cards or DIGIPASS authenticators. Using Public Key Infrastructure (PKI) to reliably sign and encrypt documents, s, and logon requests. All these DIGIPASS products can be combined and serve as back-ups to each other. Select and configure them to your specific security needs: BATTERY ( YEARS) Weight (grams) Applications PIN PAD DIGIPASS GO 3, GO 6 DIGIPASS Go range consists of very compact authentication devices. It features high contrast LCD displays and a single button. One push on the button and the DIGIPASS shows a unique One-Time Password on its display. cost-effective DIGIPASS, single button manipulation and compact format a normal battery lifetime of 5 years and beyond offers a very high return of investment server side PIN verification possible OATH compliant (GO 3) 5 10 OTP TIME EVENT NO DIGIPASS 260 The PIN code is entered into DIGIPASS 260 which then calculates a dynamic password. This One-Time Password enables authorized access into the network. most cost-effective PIN-protected DIGIPASS customizable to your specific applications (PIN length, number of PIN trials, type of cryptographic algorithm) 7 28 OTP TIME EVENT CHAL YES DIGIPASS 860 Two Strong Authentication Technologies in one Device. DP 860 is a universal authentication device for Public Key Infrastructure (PKI) and One-Time Password Authentication. DP 860 provides logon to your operating system, authenticate to your WebMail, electronically sign and encrypt your s and documents SSP OTP TIME EVENT NO DIGIPASS for Mobile DIGIPASS for Mobile allows users to safely connect to remote networks, e-commerce, and e-commerce applications directly using their mobile phone as a DIGIPASS. The DP for Mobile integrates perfectly with any existing VASCO product, without the need for any changes in your existing infrastructure. NA NA OTP NO Virtual DIGIPASS Virtual DIGIPASS allows users to benefit from strong authentication when they forget/lose their hardware DIGIPASS. Virtual DIGIPASS allows users to receive their One-Time Password as a text message on their portable device (e.g. mobile phone). This is the ideal secure backup solution. NA NA OTP NO DIGIPASS 905 DIGIPASS 905 is a transparent easy-to-install and easy-to-use PC/SC compliant smart card reader/writer. It is connected to your PC via the USB interface. Its modern and robust design is targeted to be used in workshop, office, and home environments. The mechanical components are designed to last more than 10,000 card insertions. The DP 905 is suitable for a wide range of applications, such as electronic banking, internet security, network security and PKI secured applications. 64 SSP NO

5 Server Side: VACMAN Middleware The VACMAN family of integrated software products enables the DIGIPASS products to actually authenticate their users. VACMAN Middleware is a software for organizations of all sizes. It is used to authenticate remote users when accessing enterprise networks and its applications. Since remote access is one of the most valuable - and most vulnerable - features in a corporate network, you cannot afford to leave your systems and valuable corporate data unprotected. This state-of-the art VASCO product is used to verify authentication requests and to centrally administer user authentication policies. VACMAN Middleware and VASCO s DIGIPASS authenticators provide affordable strong authentication and secure access to web applications, business applications and virtual private networks. It is the simple and cost-effective solution to help you authenticate remote users requesting access to your network. Key features and benefits Microsoft Management Console Administration (MMC) Integration with Microsoft Active Directory or ODBC repository Online Audit Console User web-based self-management Built-in deployment features such as self-assignment and bulk operations reduce Total Cost of Ownership (TCO) Support for the complete range of DIGIPASS devices Support for Virtual DIGIPASS (SMS) Integrated Solutions VASCO offers a range of fully integrated solutions for Novell NMAS, Lotus Domino, AEP (Netilla), IAS, Linux Enterprise, Imprivata and Juniper (FUNK). No additional server is needed. Native integration drastically reduces the cost and complexity of deploying two-factor authentication solutions. The plug-in inherits all the native features of your existing system or application (scalability, load-balancing, delegated administration, ). Server Side: axs GUARD axs GUARD is VASCO s line of Authentication Appliances. Build around VASCO s solid and proven VACMAN core technology, axs GUARD offers strong user authentication for Remote Access to the corporate network or web-based in-house business applications. The stand-alone, dedicated Authentication Appliance comes in a standard 19 rack mountable form factor for easy integration into existing IT-infrastructures. The axs GUARD offers a solution with focus on ease of installation and ease of use while maintaining the robust and secure protection that enterprises expect. Optional modules, to be released in the future, enhance the usability and application field by adding more security functions, thus allowing the appliance to grow towards a Unified Threat Management solution. Access type: Local Area Network (LAN) Web http / https DIGIPASS one-time-passwords Client SSL VPN VACMAN Middleware Dial-up Radius Access type: Remote Access Radius + WEB Terminal Services / Windows Server Logon LAN DIGIPASS Smart Card or ID-Token Client Connected PC Windows Client Logon Unconnected PC Windows Client Logon Active Directory + Server / GINA / Windows Terminal Server or Citrix Presentation Server Logon DIGIPASS Client

6 Technology partners supporting DIGIPASS Pack Authentication Type Integration Type DIGIPASS Doc. DIGIPASS Pack or Plug-In for Remote Web Application ALCATEL - LUCENT ARRAY NETWORKS AVAYA AXS GUARD BLUECOAT CELESTIX CHECKPOINT CISCO CITRIX COMPUTER ASSOCIATES/NETEGRITY/SITEMINDER CYBER ARK CYBERGUARD EVIDIAN ENTERPRISE APPLICATIONS F GOOGLE ENTERPRISE HP Baltimore Open View Select Access IBM LOTUS DOMINO IBM RACF IBM TIVOLI ACCESS MANAGER IMPRIVATA ENA IMPRIVATA SSO IIS/APACHE WEB CONTENT JUNIPER/NETSCREEN JUNIPER /FUNK SBR MICROSOFT SYSTEM LOGON&TERMINAL SERVICES MICROSOFT IAS MICROSOFT ISA MICROSOFT OWA MOBILITY GUARD LAN Preboot&Encryption DP Pack for Remote Authentication DP Pack for Network Authentication Integrated or Plug-In DIGIPASS for Mobile GO 3 GO 6 DP 260 DP 860 DP 905 Documentation 1 Response Only 2 Secure Password Storage 3 Third Party Solution 4 Vasco Plug-In 5 Included in Partner Product 6 Challenge/Response 7 Certificates x x = multiple choices possible Define the product(s) needed: 1 Select the technology partner product 2 Select the Authentication Type 3 Select the Pack supporting 1&2 Remarks: The DIGIPASS Pack for Remote & Network Authentication combines all solutions of the two packs mentionned in the table. If a Pack does not include the required features by default, you can still choose between Vacman Middleware, an integrated solution or a Plug-in and a DIGIPASS type as shown above. NETASQ NETILLA/AEP NOKIA NOMADIX NORTEL NOVELL LINUX ENTERPRISE NOVELL NETWARE OTHER RADIUS POINTSEC/CHECKPOINT PASSGO RADIATOR SAFEBOOT SAFENET SONICWALL STONESOFT SYMANTEC RAPTOR WATCHGUARD WHALE COMMUNICATIONS UTIMACO 5 7 7

7 VASCO VASCO designs, develops and supports Strong User Authentication products for secure remote & network access, e-business and e-commerce. VASCO is the world s leading software company specializing in internet security. The authentication company has built up a strong reputation in the banking business and is now also focusing on enterprise security. Banks have high security needs, but so have enterprises. Therefore VASCO has developed the Pack strategy, allowing small and medium size enterprises (SME) to secure their remote users in an easy, affordable way. In order to address the SME market, VASCO has developed a large product range to fit their security needs. Every product is a trade-off between user friendliness versus security and price versus flexibility. Where to buy? VASCO DIGIPASS and VACMAN Products are available through any of our Authorized Channel Partners. All VASCO Partners work to address the security challenges of today: the integrity of online identities and the secure protection of information. Visit to locate your nearest reseller. P l a c e s t a m p h e r e About VASCO VASCO designs, develops, markets and supports patented DIGIPASS, DIGIPASS PLUS, VACMAN, IDENTIKEY and axs GUARD authentication products for the financial world, remote access, e-business and e-commerce. With tens of millions of products sold, VASCO has established itself as the world leader in Strong User Authentication for e-banking and Enterprise Security for blue-chip corporations and governments worldwide. VASCO, the world s leading software company specializing in Internet Security B R U S S E L S ( E u r o p e ) p h o n e : e m a i l : i n f o - e u r o p v a s c o. c o m BOSTON ( North America) p h o n e : e m a i l : i n f o - u sa@ vasco. com SYDNEY ( Pacific) phone: info- australia@ vasco. com SINGAPORE ( A s i a ) phone: info- a s i v a s c o. c o m VACMAN, IDENTIKEY, axs GUARD, and DIGIPASS are registered trademarks of VASCO Data Security. All trademarks or trade names are the property of their respective owners. VASCO reserves the right to make changes to specifications at any time and without notice. The information furnished by VASCO in this document is believed to be accurate and reliable. However, VASCO may not be held liable for its use, nor for infringement of patents or other rights of third parties resulting from its use VASCO. All rights reserved.