RSA Authentication Manager 8.2

Transcription

1 RSA Authentication Manager 8.2

2 Over 25,000 customers million active tokens in circulation 10 million units shipped per year More than 50% market share RSA Ready Partner Program: 400 Partners with Native SecurID Integration THE undisputed leader in multi-factor auth 2016 SC Magazine Awards: Best Authentication Reigning Leader, Gartner MQ 2

3 RSA Authentication Manager 8.2 Key Themes Seamless RSA Via Access SecurID Agent Hub Simple Provision Once SW Tokens Token Expiry Alert Dashboard Search Option Report Ready Notification Secure FIPS Inside Compliance PCI DSS Compliance IPv6 Phase I Scalable AMBA (Enterprise) New Identity Sources 3

4 Seamless 4

5 HUNDREDS OF APPLICATIONS ON-PREM AND IN THE CLOUD Via Access SecurID Agent Hub (need to purchase RSA Via Access) Via Access Tokencodes for 2FA to SecurID Agents No Change to SecurID Agent Infrastructure Leverage RSA Ready Program with over 400 Certified Integrations PIN or Fingerprint to unlock Tokencode Simplifies Registration and Provisioning Processes ORG1 ORG2 Cloud On-Premises Access Manager SecurID Agents SecurID / RSA Via Access 5

6 Via Access SecurID Agent Hub How it Works 1 User opens Via Access app, enters PIN or Biometric Thumbprint to unlock the Via Tokencode User enters UserID & Via Tokencode into SecurID Agent SecurID Agent 5 IDR locates user Passes Via Tokencode to Via Access 3 Username & Via Tokencode are passed to AM8.2 Identity Router Trusted Realm Authentication Manager Via Access validates Via Tokencode Returns response 4 AM8.2 cannot locate user locally so reaches out to Trusted Realms SecurID / RSA Via Access 6 Protected Resource 7 User Permitted or Denied Access

7 Via Access User Experience Simple End User Enrollment Pull Down the App User Validation Set Password 7

8 Via Access User Experience Simple End User Device Registration & Authentication Device Registration Multi Factor Auth Create PIN Fingerprint 8

9 Via Access SecurID Agent Hub Benefits Seamless Transition No Change to Agents Streamlined Registration & Provisioning Processes Improves End User Experience Lowers Total Cost Of Ownership SecurID / RSA Via Access 9

10 Simple 10

11 Improved Software Token Provisioning Provision Once Software Tokens Software Tokens provisioned in AM 8.2 expire on the Server side only meaning software tokens do not need to be re-provisioned! AM8.1 and earlier NEW! Authentication Manager 8.1 TOKEN EXPIRED Authentication Manager Significantly lowers administrative time and overhead to manage and provision software tokens 11

12 Simplifying Administration Improved Search and Notifications (Admin) for imminent token expiry User Dashboard search option (User Alias) Friday, June 17, :03 PM. (Admin) report job completion 12

13 Customizable Display Banner Meets Organizations Best Practices Customized Logo & Text Displayed Prior to Login User Must Accept Notification Before Login to AM Available on All AM Consoles Security Console Operations Console Self Service SSH Unauthorized Access is prohibited. If you are authorized to access this site, please click the Accept button below. If you are not authorized, please exit this site. 13

14 Secure & Scalable 14

15 Security Updates FIPS Compliance Inside AM Cipher Suite upgraded to meet NIST/FIPS Compliance* PCI Compliance SSLv3 removal and expanded TLS 1.2 support* Strict TLS Mode option NIST SP A Core / Plumbing Certificates upgradeable to SHA-2 15 * Does not include Radius and Off-Line Authentication

16 Authentication Manager Bulk Administration (AMBA) AMBA Pre-Packaged with Authentication Manager Without AMBA 1. Log into Security Console 2. Add New User & Relevant Info 3. Assign Software token 4. Distribute Software token Add 100 New Users, Assign & Distribute Software token Select token profile Select provisioning & delivery options 5. Repeat steps 2 to 4, 99 times Done With AMBA* 1. Prepare AMBA Input.csv file with New User Info & Options 2. Access AM Command Line 3. Invoke AMBA Utility Run test & verify proper operation Execute command 4. Done 16 * Requires Enterprise License or standalone AMBA license

17 New Platform Support & Qualifications Appliance Operating System Upgrade to SUSE 11 SP4 Qualification of VMware ESXi 6.0 Open LDAP as an Identity Source IPv6 RADIUS Clients 17

18 Supported Migration Paths AM 6.1 All OS Platforms RSA SecurID Appliance 2.0 AM 7.1 All OS Platforms AM 8.1 VMware Appliance AM 8.1 Hardware Appliance AM 8.1 SP1 Hardware / VMware Appliance AM 8.2 Release AM 8.2 HW / VMware Appliance RSA SecurID Appliance 3.0 AM 8.1 SP1 Hyper-V Appliance AM 8.2 Hyper-V Appliance AM 6.1 EOPS: December, 2015 AM 7.1 EOPS: June, 2016 AM 8.1 Release 18

19 Streamlining Evaluations Auto Generates 25 SW Tokens when 90-day Trial License is Installed Eliminates time-consuming distribution of Software Token Media One-time Use Extension Code extends trial by 90 Days Auto Deletes Eval License once Production License is Installed 19

20 Thank You 20