IDENTIKEY Product Family

Transcription

1 IDENTIKEY Product Family Rik Swusten Product Manager

2 & VACMAN Controller GO 3 GO XPress 275 GO 7 GO CV Virtual Nano for Mobile VACMA N Controll er A for Windows for Web A

3 IDENTIKEY Authentication Server IDENTIKEY Appliance IDENTIKEY Virtual Appliance IDENTIKEY Federation Server IDENTIKEY Tools

4 IDENTIKEY Authentication Server IDENTIK EY Features Ease of Use Performance Documentation Support Value for Money Overall Rating 4

5 IDENTIKEY Authentication Server Product Vision 1 authentication server for OTP validation with numerous options, features and interfaces that address the security needs of small and large enterprises that require control over access to their resources in various horizontal and vertical markets 5

6 IDENTIKEY Server Vision RADIUS Module SOAP API Module IIS Filter Modules (OWA, CWI, RDW) Provisioning Module Windows Logon Module IDENTIKEY Server CA SiteMinder Module SBR Module HSM Module (SafeNet) Federation Module (WebSSO) Virtual (SMS, ) 6

7 1 for all applications Internet Hosted Applications 3 Webserver Internal Web- Applications Application Server 2 Remote Access 1 Internet 5 4 WiFi Access Windows Desktop & LAN 7

8 IDENTIKEY Authentication Server Roadmap Identikey Server 3.4 Identikey Server 3.5 ncipher HSM Temporally users Several improvements Identikey Server 3.3 PCI-DSS Identikey Server 3.2 RADIUS Attributes Wireless Identikey Server EMV-CAP HSM Windows OTP Logon Identikey Server 3.1 Active Directory WS2008 LDAP Backend Easy install Identikey Server 3.0 Webbased admin interface WS 2003, Linux, 64Bits OS SOAP, e-signature Soft provisioning 2008 Q Q Q Q Q Q Q2 8

9 Market feedback, latest trends Virtualisation Mobile and Out-of-Band delivery SAML support Migration from competing products security vs flexibility Windows Desktop Logon 9

10 next release IDENTIKEY Authentication Server 3.5 Support WS2012 Support Hyper-V Support for Mobile 4.0 Support creation and ing of offline activation codes, also with QR Code Device binding (device registration, device re-activation) Expand Virtual functionality See next page Other enhancements: Support Automatic Token Disabling Function to search user accounts by name (now: UserID) Customisation of the auditing filename in ADUC snapin Option to duplicate the rights of a user into a new user. Improvement for Administrator priviliges assignment Option to set Web Services port during installation Option to Switch off "DISABLE " button 10

11 Virtual support Support latest generation SMS Gateways support SMPP protocol Improved delivery combinations send out OTP via SMS or PER USER send out OTP via SMS AND Improved support delivery methods send out OTP via towards SMS Gateway (SMTP) send out OTP via PBX send out OTP via VASCO services include SMS provider templates 11

12 Virtual Request OTP 1 2 LogOn 5 3 SMS Gateway Server PBX Vasco Services 4 Out Of Band OTP Delivery 12

13 IDENTIKEY Editions Reference and Comparison Card Included Authentication Clients Standard Edition Gold Edition Enterprise Edition RADIUS authentication (+WAP) Webfilters (OWA, CWI, RDWebAccess, Generic) (10 each) (10 each) Desktop Windows Logon SOAP authentication SOAP e-signature option (see pricelist) SOAP Provisioning option (see pricelist) EMV-CAP HSM Interface SBR Module (2) (2) Included Virtual option (see pricelist) option (see pricelist) option (see pricelist) Included Servers Primary Backup Replica (5) Total Extra Server (>7) 13

14 IDENTIKEY Standard Edition License for Primary Server (1 IP) License for RADIUS Authentication (Firewalls, VPN, SSL- VPN) 14

15 IDENTIKEY Gold Edition License for Primary and Backup Server (2 IP s) License for RADIUS Authentication (Firewalls, VPN, SSL- VPN) License for 10 instances of all Webfilters (10 IP s each) Outlook Web Access Citrix Web Interface New! Citrix Receiver Generic IIS6/IIS7 Web Interface New! Microsoft Remote Desktop Web Access Includes Microsoft Remote Desktop Gateway License for Authentication for SBR Primary and Backup Server (2 IP s) License for Authentication for Windows Logon for every user 15

16 IDENTIKEY Enterprise Edition License for 7 Servers (7 IP s) License for RADIUS Authentication (Firewalls, VPN, SSL-VPN) License for 10 instances of all Webfilters (10 IP s each) Outlook Web Access Citrix Web Interface New! Citrix Receiver Generic IIS6/IIS7 Web Interface New! Microsoft Remote Desktop Web Access Includes Microsoft Remote Desktop Gateway License for Authentication for SBR Primary and Backup Server (2 IP s) License for Authentication for Windows Logon for every user License for SOAP Authentication (Web-based applications) Optional: More servers, SOAP e-signature, SOAP Provisioning 16

17 Drivers Remote Access VPN, SSL, webmail, intranet, LAN access network, desktop logon Web applications portal, webshop, ecrm, 17

18 IDENTIKEY Tools 18

19 Update Tools & Webfilters, release with IDENTIKEY 3.5 Authentication for CWI Authentication for OWA Authentication for RDWA Authentication for SBR support WS2012 Authentication for Windows Logon Support for Windows 8 Backup system for offline mode Password Synchronisation Manager LDAP Sync Tool Data Migration Tool support IDENTIKEY

20 IDENTIKEY Appliance 20

21 Convenience platform Complete authentication server pre-installed Plug&Play solution Managed Authentication Server Integrates latest IDENTIKEY Authentication Server (semi-) automated upgrades Programmable backup functions Logging, Auditing, Reporting Appliance Product Vision 19 Rack FormFactor Selected components for 24x7 operation, long availability, longevity Hardened OS Built-in database & Webserver Separate administration interface (GUI) Additional SNMP functionality (hardware monitoring) 21

22 Available Hardware Models 3000 Series (AG3442) Upto 500 users 5000 Series (AG5502) Upto users 7000 Series (AG7552) Upto users 2 Hot Swappable Power Supplies 2 Hot Swappable Hard Disks 22

23 Current release IDENTIKEY Appliance integration of IDENTIKEY V3.4SR1 Including patches upto IK Option to select local time for auditing Option to edit the SMS message for Virtual IDENTIKEY Appliance Patch Several bug fixes (license, audit date, etc) 23

24 IDENTIKEY Virtual Appliance 24

25 New Product IDENTIKEY Virtual Appliance integration of IDENTIKEY Authentication Server V3.4SR1 (upto IK3.4.7) Software-only appliance Supported on VMWare environments Available in 4 models (license driven) 25

26 GoToMarket 4 Models with different performance and pricing 1000 Series Limited to 1 CPU Core and 1GB RAM Installations <= 100 users 2000 Series Limited to 2 CPU Core and 4GB RAM Installations <= 5000 users 4000 Series Limited to 4 CPU Core and 8 GB RAM Installations <= users 8000 Series Limited to 8 CPU Core and 16 GB RAM Installations <= users Upgrade to the next model by updating the license demo license appliance (IDENTIKEY demo license can be used) 26

27 VACMAN Controller, IDENTIKEY Server, Appliance VC IAS IA IVA 27

28 IDENTIKEY Platform Comparison IDENTIKEY Authentication Server brings a solution where: The customer wants complete flexibility IDENTIKEY Appliance brings a solution where: The customer wants a managed server The customer wants a plug&play solution The customer has a preference for appliances Avoid technical intervention IDENTIKEY Virtual Appliance can bring a solution where: The number of users is larger than (performance) The number of users is lower than 500 (low ROI) The customer is located outside Europe (shipments, RMA) Changing environment, newer technologies & trends 28

29 IDENTIKEY Platform Comparison Small Deploym ent Large Deploym ent Flexibility (DB,OS, HSM) Manag ed Server Plug&Play Convenien ce Easy shipmen ts Virtualisati on IDENTIKEY Authenticatio n Server IDENTIKEY Appliance IDENTIKEY Virtual Appliance 29

30 IDENTIKEY Federation Server 30

31 SAML2.0 User Application Server SOAP User Application Server 31

32 SAML2.0 WebSSO User Application Server Web SSO Application Application 32

33 User s login to multiple webapplications Users and Static Passwords IDENTIKEY Value Add The multiple login process is time consuming difficult to remember many different static passwords There is big chance that applications will not be used The secure handling and storage of user credentials is in the hands of the application owner The enforcement of password policies is managed by the application owner SSO increases user productivity OTP login: The number of password resets can be greatly reduced. Automated login increases user experience and improves collaboration The security is managed by own staff Password policies can easily be implemented 33

34 Administration painpoints Users have to be managed in several applications Employees that leave can still login to the applications Licenses have to be managed in every application separately The management of several applications means complex auditing Adding applications means a lot of manual tasks User s login to multiple webapplications IDENTIKEY Value Add One central point to manage all users, no administration overhead One central point to manage leaving employees Licenses can be easily managed, accounted and optimised One central point for auditing facilitates compliancy Central management of applications 34

35 SAML2.0 Federation User Application Server Federated Authentication Application Trusted Federation SAML User Application (any compatible federation server) Server 35

36 User Convenience Logging in to several websites is troublesome Web SSO brings automated sign-on Added Value Security Using static passwords is dangerous, especially in combination with SSO Replace static passwords by 2FA TCO Using static passwords can result in less productivity Using static passwords can result in increasing administration costs Managing all users in 1 software reduces admin overhead Compliancy Easy to comply to and enforce password policies Easy to manage users and licenses Easy to create security reports and audits 36

37 IDENTIKEY Federation Server Extension to IDENTIKEY Authentication Server Brings 2FA-supported SSO to Internet Applications Largely enhances user experience Reduces admin overhead User management, password management, licenses, password policies, auditing Cost reduction results in higher ROI Virtual appliance, available for VMWare and Citrix environments Separate user-based license User Applications Server 37

38 2FA support via IDENTIKEY Server One-Button Keypad OTP validation User Mobile platforms Application Server SMS, delivery 38

39 Functions Authentication Manager: User Authentication Provider: Validation of user credentials. Identity Provider: Assign an identity ticket to the user It is valid for a pre-defined time and can be re-used for logon It has an authentication level that should match to what the application requires. Manages access to internet hosted applications Distributes user identity to requesting applications Manages flow of user attributes if requested by the application WebSSO The identity ticket can be re-used to gain access to other applications or service providers The above conditions apply (ticket is still valid and level is high enough) Federated Authentication Validated users can access applications from another service provider in the same federation The user validation can be delegated to another Identity Provider for remote applications Another Identity provider can delegate validated users to local applications 39

40 Specifications Supported protocols: SAML2.0 for IFS as IdP (incoming requests), SAML2.0 for IFS as Client/SP (outgoing requests) ASelect protocol for IFS as IdP and SP (incoming/outgoing requests), ASelect WS protocol for IFS as Client/SP (incoming requests) OpenID for IFS as IdP (incoming requests) OAuth V2 Supported Web Applications: Any application that supports SAML2.0 and/or OpenID Preconfigured Application GoogleApps (IFS as IdP) Preconfigured Application Salesforce.com (IFS as IdP) ADFS2 as RP (IFS as IdP/RPG) -> Office365

41 current release IDENTIKEY Federation Server V1.2 Standard support GoogleApps Standard support Salesforce.com Standard support ADFS2.0 Office365 Support OAuth V2 MyDigipass.com IDENTIKEY Federation Server V1.3 Account Linking for OAuth Identity Providers Self Management Admin Management Application API Upgrade OS to the latest version Support Hyper-V 41

42 OAuth support Employees SAML User Application Partners Customers Application OAuth User 42

43 IFS as Relying Party Gateway to ADFS2 Application Server ADFS2 (SAML2+MS spec) WS-Fed User Office 365 Windows DC / WS2008 Dir Sync 43

44 next release IDENTIKEY Federation Server V1.4 Support for Office365 Rich Clients 44

45 Vasco Labs Demo SAML GoogleApps Salesforce.com OAuth User ADFS2 (SAML2+MS spec) WS-Fed Office365 Windows DC / WS

46 Identikey Family Roadmap (2013) IDENTIKEY Authentication Server 3.4SR1 IDENTIKEY Authentication Server 3.5 IDENTIKEY Appliance IDENTIKEY Appliance IDENTIKEY Appliance IDENTIKEY Virtual Appliance IDENTIKEY Virtual Appliance IDENTIKEY Virtual Appliance IDENTIKEY Federation Server 1.2 IDENTIKEY Federation Server 1.3 IDENTIKEY Federation Server

47 On-Premise Solution - What to offer? -Hardware -Software [maintenance] + Standard Gold Enterprise [maintenance] Learn: Technical training Sell: Sales training Demo: Vasco Labs Install: Integration Guides Help: Professional Services + + Appliance Platform [maintenance] Web SSO [maintenance] 47

48 48

49 Thank you! Rik Swusten Product Manager IDENTIKEY 49