November, 2008 Aladdin etoken Product Overview

Transcription

1 November, 2008 Aladdin etoken Product Overview

2 Legal Notice Copyright 2008 Aladdin Knowledge Systems Ltd. All rights reserved. Aladdin, Aladdin Knowledge Systems, HASP, etoken TM and esafe are only a few of Aladdin Knowledge Systems Ltd s ( Aladdin ) proprietary trademarks. The Aladdin Knowledge Systems logo is also proprietary to Aladdin. The information contained in this presentation is protected by international copyright laws. The copyrights are owned by Aladdin or the original creator of the material. The information contained herein is provided to you for informational purposes only, and except and to the extent specifically permitted, no portion of this presentation may be copied, reproduced (or the like), distributed or used in any way whatsoever whether directly or indirectly. In addition to Aladdin s trademarks, logos, content and information, this presentation may contain references to trademarks and/or logos owned by other entities. Aladdin expressly disclaims any proprietary interest in trademarks and/or logos owned by other entities and makes no representation of any association, sponsorship, affiliation, or endorsement with or by the owners of such trademarks and/or logos. This presentation may contain references and use of third party web sites for purposes of providing examples relevant to this course. Aladdin assumes no responsibility and/or liability for any content and/or information contained in such third party web sites. Aladdin further does not endorse the companies or contents of any referenced sites. Aladdin does not assume any responsibility or liability for the accuracy of the information contained in this presentation. The information contained in this presentation is provided "as is" and does not constitute a warranty of any kind, either express or implied. Aladdin disclaims all warranties, expressed or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, and non-infringement.

3 Topics Covered In This Presentation Two factor authentication Requirement Aladdin etoken Solution Token Management System PKI Client Single Sign-on Solution One Time Password Customer Reference & Summary

4 Founded: 1985, publicly traded since 1993 Headquarters: Tel Aviv, Israel Global Presence: and China Employees Worldwide: 432 Sample Customers: USA, UK, Germany, France, India, Italy, the Netherlands, Spain, Japan Adobe, Canadian Department of Defense, Exxon Mobil, NBA, Siemens, Hewlett Packard, Cisco, IBM

5 Aladdin Vision and Product Lines Our vision is to be the leading provider of security solutions to: Protect Digital Assets Enable Secure Business Create, Sell, Distribute and Use Digital Content Hardware or softwarebased protection and licensing solution for software vendors Device for two-factor authentication, password and digital identity management Gateway-based antivirus protection, antispyware, content security, web browsing security and proactive security

6 Strong Authentication A Business Enabler

7 Passwords Are Not Enough! Can we rely on passwords to protect our valuable digital data and communications? Passwords are easily compromised Passwords are difficult for people to manage Passwords are expensive to organizations With identity theft running rampant, corporate data and networks being compromised everyday, authentication and identity management solutions have become a must have technology for all those storing, accessing, and disseminating sensitive data including governments, enterprises, and online consumers. Source: Janney Montgomery Scott, Solving the World s Identity Crisis, November 2005 Each call to the IT help desk costs between $25 and $50, and typically 35% to 50% of help desk calls in an organization are password related. Source: Burton Group, Enterprise Single Sign-On: Access Gateway to Applications, Phil Schacter, 22 September 2005

8 Drivers for Implementing Strong Authentication Enable more services Enable your employees, customers, and partners to access enhanced services and applications Comply with regulations Comply with industry related regulations (SOX, HIPAA, FERPA, Basel II, and others) Increase productivity Save costs Attract customers Enable your users to spend more time doing value-added activities Reduce password administration costs and losses from security breaches Address the demands of security-conscious customers

9 What Is Strong Authentication? Authentication the three what s User Name: Password: x What you know What you have What you are Strong authentication means using two or more authentication methods

10 Authentication Method for Choice PIN + PIN + + Without PW With PW Password weaker Security Level stronger

11 Which Authentication Devices Should You Use? OTP Tokens USB Tokens Hybrid Tokens Smart Cards Security Usability Portability Flexibility Light Infrastructure

12 etoken Solution and Product

13 Aladdin etoken Aladdin etoken is the world leader in USB-based authentication. It provides strong user authentication and cost-effective password management solutions enabling organizations to easily and effectively: Expand business opportunities with secure network access Improve data security through enhanced encryption and digital signing Reduce costs and vulnerabilities through superior password management

14 Secure Network Access etoken secure network access solution includes: VPN security (secure remote access) Secure web access Secure network logon Key etoken advantages: Support for multiple authentication methods: PKI, OTP, password Support for multiple platforms and technologies Single robust management system for the entire solution With employees working remotely all over the UK, we require an extra level of security to authenticate users accessing the system; Aladdin's etoken authentication device was an easy choice for us." - David Walker, ITS manager at Newell & Budge

15 Data Security etoken data security solution includes: PC security/boot protection, file & data encryption Secure Digital signing (non-repudiation) Key etoken advantages: Fully integrated solution with many solution partners Highly secure on-board key generation and cryptographic operations Single robust management system for the entire solution etoken provides the technology and flexibility we need from a token for strong authentication plus added benefits of S/MIME and document signing. Barry Ribbeck, Director of Systems Architecture & Services at Rice University

16 Password Management etoken password management solution includes: Simplified sign on for Windows and Web based applications Secure Windows (GINA) logon Key etoken advantages: Simple and secure token-based approach to SSO Intuitive and transparent Single robust management system for the entire solution A password reset call to the helpdesk costs an estimated $25. Some enterprises have estimated that helpdesk password reset calls cost twice as much it turns out passwords aren t free Burton Group, Reduced Sign-On, Gerry Gebel, September 2006

17 etoken Devices etoken PRO USB, reader-less smartcard High level of security for strong user authentication and credential storage etoken PRO Smartcard etoken PRO in traditional smartcard form factor etoken NG-OTP First-ever USB smartcard token with One-Time Password generation capabilities etoken NG-FLASH USB smartcard token with Flash memory for portable mass data storage etoken PASS Compact and portable OTP token

18 Customized etoken

19 Token Management System

20 The Challenge The management of an authentication solution in an enterprise involves a number of interrelated elements: - Users The identities in the organization - Organizational policies Access rights for user groups; required security measures - Security devices Authentication devices provided to users - Security applications Applications to be used by each user (e.g. SSO, network logon, disk encryption) How does a management system help? To illustrate, let s see the example of a new employee

21 Life Without a Management System Active Directory 2. Administrator enters user to AD 6. Sets user Network Logon Credentials 3. Sets and uploads VPN Certificate 9. Employee can start working 1. New employee arrives 7. Assigns token to user 4. Sets user credentials in ERP system 8. Gives token to employee

22 Life With a Management System 1. New employee gets token upon arrival 2. Employee performs token self-enrollment 3. Employee starts working Organizational Policies Token Management System ERP System And that s just the beginning VPN Network Logon

23 Additional Life-cycle Stages Without a Management System Hurray! Employee Gets Promoted Administrator manually updates token certificates and credentials Has he forgotten anything? User must contact the IT/helpdesk for password reset How much time and resources have you just lost? User Forgot Password??! Token was Stolen Administrator must manually revoke or recover the user credentials and keys Did he make a mistake? Can you afford it? The user cannot access data, administrator cannot help Will he still win the deal? Can you risk it? No Token while on the Road

24 And With a Management System Hurray! Employee Gets Promoted User can update her token based on her Administrator manually updates token new role certificates and credentials No errors, users continue working Has immediately he forgotten anything? User must enters contact the self-service the IT/helpdesk website for and password resets the reset token password How much time and resources have No helpdesk costs, no productivity loss you just lost? User Forgot Password??! Token was Stolen Administrator User administrator must manually can immediately revoke or recover disable the or revoke user credentials the token and keys Did he make a mistake? Can you System afford remains it? secure The User user enters cannot a secured access website data, and administrator enables a temporary cannot help virtual token Will he still win the deal? No productivity loss, can close the deal Can you risk it? No Token while on the Road

25 TMS Framework View Organizational Policies Auditing Reporting Tokens and Users Centralized Personalization User Repository Group Policies Active Directory Token Management System WEB/LAN Token Inventory Backup/Restore Profiles MS CA OTP Authentication Network Logon More Security Applications

26 TMS Key Features Supports all etoken devices and applications Integrated with Microsoft Active Directory Web-based user self-service, help desk, and administration tools Open architecture Supports security applications with configurable connectors Solutions supported include: network logon, VPN, web access, secure , data encryption, boot protection, SSO, certificate management, IdM, and more Robust SDK to integrate even more applications etoken Virtual Solution for employees on the road who lost/forgot their tokens enable them to continue working

27 Password Management Overview

28 etoken Reduced Sign-On (RSO) Solution Family etoken Simple Sign-On Secure storage and automatic fill-in of application logon credentials etoken Web Sign-On Secure storage and automatic fill-in of Web credentials and form data etoken Network Logon (GINA replacement) Secure storage and automatic fill-in of network logon credentials Secure and automatic access etoken provides a complete RSO solution with simple and strong authentication to enterprise IT resources

29 etoken SSO Benefits Enhances security Robust password for each application Strong user authentication Passwords are securely stored within the smartcard Increases user efficiency User needs to remember only one password Easy and fast to deploy No back-end integration Low maintenance Cost-effective Enterprise-wide solution

30 etoken SSO Architecture SSO Client The component installed on the end-user machine, and which executes all of etoken SSO end-user usage and benefits SSO Templates A set of rules and parameters relating to the particular application. For etoken SSO to support a specific application, an application template has to be created and installed on the user machine SSO Template Manager An administrator utility which allows the creation of templates for newly supported applications etoken SSO does not require any server installation and supports rapid rollout methodologies

31 etoken SSO Key Features Reduced Sign-On technology; stores user credentials on secured smartcard device Automatic fill-in of user credentials Captures logon screens for Windows applications Advanced scripting language for non-standard screen capturing Admin-configurable template management and profile ruling including wizard for rapid, intuitive creation of application templates Support for application password change Supports sharable/global values Customizable user interface Backup & restore of user credentials Automatic Fill In and submit

32 Aladdin SafeWord One Time Password (OTP) Authentication

33 The Best Solution for Windows Tailored for Windows, today and tomorrow Works on 32- and 64-bit Windows operating systems Vista and Windows 2008 Server Windows 2003 and XP-compatible Seamless Active Directory integration Installs on your AD Domain Controller Use the Microsoft tools your already know SafeWord 2008 a perfect fit when you upgrade your Windows infrastructure SafeWord is just about the easiest product to manage in this group, particularly for Microsoft-based servers. SC Magazine Group Test, Two-factor Authentication 9/2006

34 SafeWord 2008 Licensing Non-ESP Components Seamless Active Directory integration Installs on your AD Domain Controller Use the Microsoft tools you already know - ADUC Outlook Web Access (OWA) Agent Citrix Agent (Citrix 4.5 Web Interface Gateway) Internet Authentication Service (IAS) Agent ESP Components UserCenter SecureWire MobilePass SafeWord Management Console Domain Login Agent

35 SafeWord SecureWire Fully-featured, zero-footprint SSL VPN Protect Web applications, portals, and OWA with a Web Access Gateway Browser-based access to Windows File Shares, Terminal Services, Windows Desktops Single Sign On to popular Web and Windows applications Make applications, data, and network connectivity available to your employees, contractors, business partners, and customers over any Web browser Browser-based, encrypted authenticated access from across the room or around the world Full VPN connectivity for your system administrators HTTPS access to partner Web portals Unlimited users!

36 SafeWord 2008 ESP: More Features User Self Help and Enrollment with SafeWord 2008 User Center Users can help themselves via a simple, easy-to-use, easy-to-deploy Web application Access from any browser, without a call to the help desk or system admin Users can enroll themselves and their tokens, reset PINs, and test tokens SafeWord 2008 Management Console When you don t want to manage all or a portion of users in Active Directory Enterprise-wide management of users, tokens, and access rights as well as event logging and reporting Protect Internal Windows Resources User desktop login to Windows Domain resources Windows Terminal Services Windows Remote Desktop APIs PAM Agents for Unix

37 Alpine Combines a sleek new compact design Added feature of a sturdy clip for convenient attachment. Clip it on and carry your token with you anywhere for true zerofootprint user authentication Alpine tokens are compliant with OATH standards Available in either event or time-synchronous authentication modes. A simple push of a button gives you a one-time pass-code for a simple and secure login experience.

38 SafeWord MobilePass Turn your mobile device into a two-factor authenticator Works on popular platforms: BlackBerry Palm Windows Mobile J2ME-enabled devices Windows Desktop SMS/SMTP text delivery of OTP MobilePass Factory Administration User self-deployment Request an OTP OTP Routing Eliminates the need to distribute, maintain, and carry an additional device Easy to distribute, inexpensive to maintain, and quick to deploy.

39 Lifetime Warranty Lifetime Token Warranty SafeWord 2008 tokens never expire and come with a Lifetime Token Warranty. SafeWord eliminates the need to replace and deploy new tokens every three years and helps reduce your total cost of ownership. Simply return tokens at any time for a free replacement. You must be current on your support contract for all of your users to be eligible

40 Applications: Protecting Information Assets Protect your most important information assets and applications Citrix Applications Microsoft Outlook Web Access VPNs from Cisco, Check Point, Juniper, Aventail, Nortel, and others Network Infrastructure Devices: Routers, Switches, Firewalls, etc Microsoft IAS/ISA/IIS Terminal Services/Remote Desktop Windows Domains Unix SecureWire Access Gateway Branded solutions for Citrix, Cisco, Check Point, Nortel

41 Customer Reference & Summary