RSA AUTHENTICATION MANAGER

Transcription

1 RSA AUTHENTICATION MANAGER RSA SecurID Hardware Appliance AT A GLANCE Industry leading multi-factor authentication engine delivered in a convenient hardware appliance form factor Flexible configuration and credentialing options for small and large enterprises Streamlined set-up process and straightforward administrative interface Lower acquisition, deployment and on-going management costs The RSA SecurID Appliance, a core component of the RSA's Identity Assurance portfolio, delivers RSA Authentication Manager, the software engine behind the industry-leading multi-factor user authentication technology, in an integrated, rackmountable hardware appliance. Used in combination with RSA SecurID authenticators and contextual Risk-Based Authentication, the RSA SecurID Appliance validates the identities of users before granting access to critical company resources. Additionally, the system logs all transactions and user activity, allowing administrators to use it as an auditing, accounting and compliance tool. FLEXIBILITY AND SCALABILITY The RSA SecurID Appliance solution is available in two models that can be configured to meet the varying needs and preferences of small and large organizations. The solution is capable of handling the smallest small business application and can scale to meet the needs of large enterprise users. Both appliances are available in a 1U form factor. RSA SecurID Appliance 130 This solution is designed to satisfy the requirements for simple, cost-effective deployments. It is also available in pre-configured, fixed-price bundles to support 10, 25, 50, 100, 150 or 250 users. Each bundles includes: RSA SecurID Appliance 130 hardware with three-year hardware maintenance and an imbedded sole-purpose hardened Linux operating system RSA Authentication Manager Base Edition license pre-loaded (supports 1 primary and 1 replica). Note that the RSA SecurID Appliance can scale to 15 replicas with the Enterprise Edition license. Three-year RSA SecurID 700 hardware authentications RSA SecurID Appliance 250 This solution is designed with dual power and redundant discs for organizations that require high availability (HA) deployments. The RSA SecurID Appliance solution supports all RSA Authentication Manager license types and can meet a variety of deployment models. For HA environments, the RSA SecurID Appliance 250 or 130 replicas. For lower cost solutions, the RSA SecurID Appliance 130 can be deployed as a primary and replica servers. By selecting the Appliance model (130 or 250), number of Appliances (1 primary and up to 15 replicas), RSA Authentication manager license type, maintenance package and number and type of authenticators, the RSA SecurID Appliance can be easily ordered to meet the security needs of almost any organization. The solution also supports a mixed deployment of physical and virtual appliances. DATA SHEET

2 ARRAY OF CREDENTIAL METHODS The RSA SecurID Appliance supports authenticators in a variety of form factors from the traditional hardware authenticators to software-based authenticators that install on PCs and smart phones, to the SecurID On-demand Authenticator that delivers one-time codes using Short Message Service (SMS) or , and Risk-Based Authentication that increases security while maintaining the familiar username/password logon experience. The RSA SecurID Appliance 130 is designed to satisfy the requirements for fast and simple deployments. All of these credentials are centrally managed from a common interface. EASY TO DEPLOY AND MAINTAIN The RSA SecurID Appliance 250 is designed for organizations that require high-availability deployments. The RSA SecurID Appliance is designed so that a customer can be up and running in as few as 30 minutes. The build-in web server and web-based graphical user interface provide access to the straightforward set-up and management console from any web browser. In addition to the primary set-up, common tasks that can be managed via the web interface include adding users and assigning authenticators, installing and configuring agents, viewing the activity monitor, and specifying the location of backup files. Native LDAP integration enables the RSA SecurID Appliance to point to a single authoritative data store in real time for user and group information. Both the Base and Enterprise editions of the RSA Authentication Manager software include the Self Service Console, a completely integrated software module that enables user self service to dramatically speed the on-boarding of users to their credentials. TURNKEY INTEROPERABILITY The RSA SecurID Appliance is interoperable with many of the major network infrastructure and operating system products on the market - including more than 350 products from over 200 vendors - providing an organization with maximum flexibility and investment protection. Leading vendors of remote access products, VPNs, firewalls, wireless network devices, web servers and business applications have built-in support for the RSA SecurID solution. LOWER TOTAL COST OF OWNERSHIP CONTACT US To learn more about how EMC products, services, and solutions can help solve your business and IT challenges, contact your local representative or authorized reseller or visit us at Right from the start, the customer acquisition process for the Appliance is convenient and less expensive due to the integration and certification of the Appliance hardware, SUSE Linux operating system and RSA Authentication Manager software. In addition, on-going support and maintenance is less expensive due to a single patch management and a single vendor point of service for both the hardware and software components. From a management perspective, the quick configuration setup and web management interface help reduce startup and on-going costs. Finally, streamlined credential deployment and user self-service reduce IT support costs. Together, the key features of the RSA SecurID Appliance solution work to deliver a low total cost of ownership. EMC2, EMC, the EMC logo, and RSA are registered trademarks or trademarks of EMC Corporation in the United States and other countries. Copyright 2013 EMC Corporation. All rights reserved. Published in the USA Data Sheet 0710 H12727 EMC believes the information in this document is accurate as of its publication date. The information is subject to change without notice.

3 RSA AUTHENTICATION MANAGER Authenticators AT A GLANCE The world s most popular and secure enterprise authenticator solutions Secures internal and remote network access Offers easy-to-use, zero footprint options Available in multiple form factors including hardware and software authenticators as well as Risk- Based and On-demand (SMS) authenticators When organizations have confidence their information is secure, they are empowered to use it to accelerate their business. Identity assurance creates confidence and extends user authentication from a single security measure to a continual trust model that is the basis of how an identity is used and what it can do. The RSA Authentication Manager authenticators are a key component of an organization s identity assurance strategy. Trusted identities managed by RSA bring confidence to everyday transactions and support new business models providing secure access for employees, customers and partners while striking the right balance between risk, cost and convenience. STRONG NETWORK SECURITY Each RSA SecurID hardware or software authenticator has a unique symmetric key that is combined with a proven algorithm to generate a new one-time password (OTP) every 60 seconds. Patented technology synchronizes each authenticator with the security server, ensuring a high level of security. The one-time password something the user has is coupled with a secret personal identification number (PIN) something the user knows to create a combination that is nearly impossible for a hacker to guess. This protection is priceless when the risk of exposing critical information resources is considered. HIGH QUALITY, RELIABLE AUTHENTICATION For an enterprise depending on the broad distribution of authenticators to protect access to information and applications, token reliability is a major concern. RSA offers industry-leading levels of reliability and RSA SecurID hardware tokens are designed to withstand the worst imaginable conditions. From temperature cycling to mechanical shocks to being immersed in water, RSA SecurID hardware tokens are subjected to rigorous tests to ensure that user organizations do not face hidden costs due to token failures. By selecting RSA SecurID tokens, organizations can reduce the overhead costs of distributing replacement tokens and drive down the overall cost of security while providing a consistent and easy-to-use authentication experience for end-users. CONVENIENT SOLUTION FOR END USERS SOLUTION OVERVIEW Whether hardware, software, Risk-Based or On-demand SMS, RSA authenticators are as simple to use as entering a password, but much more secure. For hardware and software tokens, ach end-user is assigned an authenticator that generates a one-timeuse code. When logging on, the user simply enters this number plus a PIN to be successfully authenticated. For Risk-Based and On-demand (SMS) authenticators, convenient options for zero-footprint authenticators enable organizations the flexibility of extending applications to a greater population of users while at the same time maintaining the security posture of the organization.

4 A WIDE VARIETY OF AUTHENTICATON METHODS One size does not fit all when it comes to choosing the right authenticator to balance your security, total cost of ownership and end-user security needs. With a broad range of easy-to-use form factors, there are RSA SecurID authenticators available to suit a wide variety of organization and application requirements. RSA offers hardware and software, as well as on-demand authenticators that provide strong authentication using familiar devices that users already have. RSA SecurID technology is also supported by a wide range of certified partner devices. Hardware Authenticators The RSA SecurID hardware token comes in a variety of convenient models that all generate and display new codes every 60 seconds. RSA SecurID 200 The RSA SecurID 200 is the original RSA SecurID hardware token. This business card holder-sized device provides the same excellent performance guaranteed from every RSA SecurID authenticator. RSA SecurID 520 The RSA SecurID 520 PINpad model is the same size as the RSA SecurID 200 but has a PINpad feature that enables users to encrypt their passcode for a higher level of security. RSA SecurID 700 The RSA SecurID 700 is a small key fob that connects easily to any key ring and fits into a user s pocket or small carrying case.

5 RSA SecurID 800 The RSA SecurID 800 offers the one-time password functionality of the other hardware authenticators and can be used for storage of Windows username/password credentials and digital certificates creating a master key for multiple authentication methods. When connected, the RSA SecurID 800 is enabled for automatic token code entry, allowing applications to programmatically access token codes directly off the device and eliminating the need for the user to type their code. SOFTWARE AUTHENTICATORS RSA SecurID software tokens use the same algorithm as RSA SecurID hardware tokens while eliminating the need for users to carry dedicated hardware devices. Instead of being stored in hardware, the symmetric key is safeguarded securely on the user s PC, smart phone or USB device. RSA SecurID software authenticators reducee the number of items a user has to manage for safe and secure access to corporate assets. Software tokens can help the enterprise cost- and effectively manage secure access to information streamline the workflow for distributing and managing two- factor authentication for a global work force. Additionally, software tokens can be revoked and recovered when someone leaves the company or loses a device, eliminating the need to replace tokens. RSA SecurID software tokens are available for a variety of smart phone platforms including BlackBerry, ios, Android, and Microsoft Windows Phone. RSA SecurID Token for Windows and RSA SecurID Token for Mac OSX The RSA SecurID Token for Windows and RSA SecurID Token for Mac OSX are convenient form factors that reside on a PC or Mac and enable automatic integration with leading remote access clients. An extra layer of security can also be added to the RSA SecurID Token for Windows when it is used in conjunction with the Dell E-family of Latitudes, where the token can be embedded in a securee chipset.

6 RSA SecurID Toolbar Token The RSA SecurID Toolbar Token combines the convenience of auto-fill capabilities for web applications with the security of anti-phishing mechanisms. RISK-BASED AUTHENTICATION AND ON- DEMAND Risk-Based Authentication is a multi-factor authentication solution that strengthens traditional password-based systems by transparently assigning a risk level to each login request. A powerful risk engine evaluates each attempted login and activity in real time by tracking hundreds of risk indicators and determining the risk associated with each access request. Risk-Based Authentication enables organizations to extend secure remote access privileges to a diverse user base and access points both internal and external without having to compromise on user convenience or privacy. RSA Authentication Manager 8.x enables Risk-Based Authentication to be deployed on a single platform alongside RSA SecurID hardware and software authenticators. Balance security, cost, and convenience to achieve strong authentication that protects a wide range of users and use cases. The RSA On-demand Authenticator is an innovative solution that enables users to receive a one-time password as an SMS message delivered to their cell phone or via e- mail. Users are sent a one-time password to use as a login to their SMS-enabled mobile device. The On-demand Authenticator is a true zero footprint authenticator and requires no hardware or software token to be deployed. CONTACT US To learn more about how EMC products, services, and solutions can help solve your business and IT challenges, contact your local representative or authorized reseller or visit us at RSA STORE: CONFIGURE AND COMPARE Compare features, see options, and get pricing for RSA SecurID. Visit the RSA Store now. EMC2, EMC, the EMC logo, [add other applicable product trademarks in alphabetical order] are registered trademarks or trademarks of EMC Corporation in the United States and other countries. Copyright 2014 EMC Corporation. All rights reserved. Published in the USA. 01/14 Solution Overview H9061 EMC believes the information in this document is accurate as of its publication date. The information is subject to change without notice.