ADVANCED TWO-FACTOR AUTHENTICATION VIA YOUR MOBILE PHONE

Transcription

1 ADVANCED TWO-FACTOR AUTHENTICATION VIA YOUR MOBILE PHONE SMS PASSCODE is the technology leader in a new generation of two-factor authentication systems protecting against the modern Internet threats. The platform represents a more secure login process, plug-and-play protection against standard login systems and a reliable, scalable architecture.

2 Comprehensive Range of "Protect your assets with a single solution covering all your systems." Citrix Web Interface Citrix Receiver for iphone RADIUS Citrix Access Gateway AE 4.5 SMS PASSCODE two-factor authentication Web Site Microsoft TMG/ISA Windows Logon Protect Citrix Web Interface Protect Citrix Receiver for iphone Protect RADIUS, VPN and SSL VPN: Supports among others: Checkpoint Cisco Citrix Access Gateway (CAG) Citrix Netscaler Juniper Other challenge/response VPN systems Protect Microsoft TMG/ISA: Web and Portal access VPN access Protect Logon Points of Citrix Access Gateway Advanced Edition Protect Windows Logon & Terminal Services: Windows 2003/08 Terminal Services* Windows 2008 Remote Desktop Services incl. single sign-on Windows XP / 2003 Gina based single sign-on VMware Virtual Desktop Portal and Client access** Protect web sites with the Web Site module: Supports among others: Microsoft Outlook Web Access (OWA) 2003/07/10 Microsoft SharePoint (via UAG)*** Microsoft IIS web sites**** * via TS Web/TS Gateway/ISA ** VMware pass-through credentials logon for SMS PASSCODE desktop authentication *** Unified Application Gateway **** Sites using IIS Integrated Windows Authentication

3 Outstanding Security Level " More secure login process protects against today s modern threats on the Internet." Unlike traditional two-factor authentication solutions most widely known as tokens, SMS PASSCODE deploys a more secure challenge and session specific login process. Essentially, a user is first authenticated with a user name and password challenge. Once that is passed, SMS PASSCODE generates a login session-specific one-time passcode, and once that is validated, the user is passed through. This significantly improves protection against the modern threats on todays Internet. User Name: Password: [email protected] Login SMS PASSCODE a97b38 Passcode: Status: Time left: 00:01:05 Passcode sent Cancel Login STRONG TECHNICAL FOUNDATION Greater protection against Phishingattacks, since passcodes are: Challenge-based Session-specific Cryptographically strong random generated passcodes using FIPS-140 validated crypto modules Configurable passcode complexity Configurable passcode lifetime Strong encryption: Built-in 256bit AES encryption of all network communication Brute force attack protection Denial-of-service attack detection Partner with users for better security Users care about their mobile phone. Therefore, when lost, users take action to block the phone themselves. If notified, central IT can also remove the mobile phone from authentication with a single click. This has proven to deliver quicker response times and increased security compared with traditional token-based solutions.

4 Unmatched Ease of Administration " Tired of token administration? With SMS PASSCODE token handling is a thing of the past!" FAST Installation / DEPLOYMENT Out of the box installation: Connect SMS Gateway modem(s), run plug-and-play installation of the SMS PASSCODE software, and the system is ready for use Simple Enterprise deployment: One-click integration to Active Directory (AD) without schema changes or extensions All necessary SMS Gateway hardware included Component architecture offers maximum flexibility of installation: Distribute SMS PASSCODE components according to your specific needs offering unmatched on-the-fly scalability and fault-tolerance No distribution of hardware-tokens: Get thousands of users up and running within minutes. Extract all cell phone numbers from your Active Directory, import them from any source via a comma-separated file or via the mobile phone collection module OPERATION / ADMINISTRATION No administration of hardware-tokens No need to involve IT personnel in the event of a lost cell phone. Users will quickly recognize the loss, and act on own impulse to block the SIM-card Active Directory integration: Supports both LDAP and Global Catalog lookups No schema extension of your Active Directory! Just add users to a group Multiple separate domains are supported via a list of LDAP / Global Catalogue lookups Even nested groups, child domains and trusted domains are supported!

5 Enterprise CLASS PLATFORM " Strong platform support including failover and scalability has been a part of the SMS PASSCODE architecture from the very beginning." SCALABILITY AND LOAD BALANCING SMS PASSCODE consists of authentication clients handling logins, transmitter services handling, creating and sending the passcode and load balancing services to balance between the different components. SMS PASSCODE offers failover on all components and since these can be added and removed on the fly, SMS PASSCODE is able to scale to an unlimited number of users without service interruptions. The components cache all data locally, which in turn means total independence of backend systems single points of failure. The solution supports an unlimited number of SMS Gateway modems, using modem pools. And it supports any number of Transmitter- and Load Balancing Services. SMS PASSCODE components can be distributed geographically for scale or to support internationally distributed deployments. COMPONENT 2003 X86 (32-bit) 2003 X64 (64-bit) 2008 X86 (32-bit) 2008 X64 (64-bit) DATABASE SERVICE TRANSMITTER SERVICE LOAD BALANCING SERVICE WEB ADMIN. INTERFACE CITRIX WEB INTERFACE PROTECTION RADIUS PROTECTION WEB SITE PROTECTION WINDOWS LOGON PROTECTION CAGAE PROTECTION MICROSOFT TERMINAL/ REMOTE DESKTOP SERVICES WINDOWS ISA/TMG & UAG 1 1 ISA supports Windows Server 2003 x86 and TMG supports Windows bit.

6 Excellent User COMPLIANCE " SMS PASSCODE - The world s leading technology for two-factor authentication via your mobile phone s SMS - lets you stay in business wherever you are." UK Copyright All rights reserved. SEAMLESS Integration SMS PASSCODE is fully integrated with all the major login systems The intuitive login-passcode-validation process integrates seamlessly into the normal login flow as a natural extension. The process is so intuitive to the users that no detailed explanation on using SMS PASSCODE two-factor authentication is required. Status Feedback SMS PASSCODE provides an unrivaled status feed-back feature enabling the user to intuitively watch the actual login process Status feedback inspires user confidence - the user can visually follow the accurate login progress Reduces support calls to your IT personnel Flash SMS By default, passcodes are sent as Flash SMS, but can be sent as regular SMS Flash SMS automatically pop up on the user s cell phone without any user action Flash SMS are not stored on the cell phone Standard SMS is supported as an option Always connected As opposed to tokens, users rarely forget their cell phone, which in turn means more productive hours SMS PASSCODE A/S Park Allé 350 D DK 2605 Brondby PHONE: