2003, Rainbow Technologies, Inc.

Expertise

Secure > 50% of the Data

10 Years of SSL

Web Security

28 Million Hardware Keys

50% Token market share

6 Years of iKey

Access Control

NetSwift iGate:

Hardware Appliances - SSL

Agenda

Overview of SSL VPNs

SSL vs. IPSec

Evaluation Criteria

ROI

NetSwift iGate Overview

Case Studies

SSL VPN Definition

SSL – Secure Sockets Layer

An industry-standard Internet security protocol, embedded in a web

browser

IPSec is another security protocol, delivered as a software client

VPN – Virtual Private Network

A private network created within a public or shared network

Combined, a SSL VPN is created

SSL VPN Value Proposition

Improve enterprise productivity without higher costs

Anywhere, any type access

– Any Internet connectivity methods – wireline and wireless

– Controlled and uncontrolled, managed and unmanaged access

environments

Low impact on users and IT organizations

– No new software to install, configure, and maintain on access devices – NAT and firewall traversal issues eliminated

– Non-disruptive to existing private network, security, and directory

infrastructure

Flexible

Why this is Important

The measurement of competitive advantage

continues to change

Increasingly, getting the right information, in the right form, to the

right people, at the right time is the means to competitive advantage

Culturally and operationally, the enterprise is

changing

Enterprise network borders are being pushed outward

– Rise in nomadic workers and teleworkers

Why this is Important

Infrastructure is less of a barrier

Internet access is becoming as pervasive and as demanded as

oxygen

By any measurement (# of connections, bandwidth level, quality,

type), broadband connectivity is rapidly growing

To succeed in this changing environment, however,

the right set of secure networking solutions are

SSL VPN Device Functionality

Central gatekeeper

Validates user credentials (authentication)

Applies granular access policies (authorization)

Single proxy between users and applications

Accepts authenticated user’s requests and presents them to

authorized application and file servers

Receives server responses and forwards responses back to users

– Recoding of applications not required, transformation handled in SSL

VPN device for HTTP transmission

Single point for encryption/decryption

IPSEC VPN

Server/Data _{Terminal Services} PeopleSoft Lotus Notes

Networked Machines

Home Computer: Difficult to install – no control of hardware or network Partner Computer: Almost

impossible to install - Need to get permission from IT

Corporate Notebook: Easy to install – but still one more piece of software to manage

SSL VPN

Server/Data _{Terminal Services} PeopleSoft Lotus Notes

Networked Machines

No client software to install - Does not modify the operating system. Use only a browser

No client software to install - Does not modify the operating system. Use only a browser

Benefits: No support calls with troubled implementations or client software to manage

Benefits: No support calls with troubled implementations or client software to manage

IPSEC VPN – Doesn’t work with NAT

Server/Data _{Terminal Services} PeopleSoft Lotus Notes

Networked Machines

NATs in the corporate network change IPSec

packets and break the IPSEC connection

NATs in the corporate network change IPSec

packets and break the IPSEC connection

X

X

X

X

This forces admins to place critical servers directly onto the internet or not allow access

This forces admins to place critical servers directly onto the internet or not allow access

SSL VPN

Server/Data _{Terminal Services} PeopleSoft Lotus Notes

Networked Machines

NAT doesn’t interfere with SSL...it always works

NAT doesn’t interfere with SSL...it always works

Home

Home Hotel_Hotel

Benefits:

- No support calls when the connection breaks. - Opportunites are not lost because of downtime Benefits:

- No support calls when the connection breaks. - Opportunites are not lost because of downtime

IPSEC VPN

Server/Data _{Terminal Services} PeopleSoft Lotus Notes

Networked Machines

Force partner to change their firewall

Force partner to change their firewall

X

SSL VPN

Server/Data _{Terminal Services} PeopleSoft Lotus Notes

Networked Machines

Web ports are open on Firewalls

Web ports are open on Firewalls

Benefits:

- Roll out Access to any partner

- No modifications needed for their firewall - Quick time to deploy

Benefits:

- Roll out Access to any partner

- No modifications needed for their firewall - Quick time to deploy

IPSEC VPN

Bridging Networks

Open Access to Resources

Bridging Networks

Open Access to Resources

Corporate Network Exchange File Server Sales Person traveling Partner _{Executive @} home IPSEC VPN Web Apps Server Applications

Server/Data _{Terminal Services} PeopleSoft Lotus Notes

SSL VPN

Server/Data _{Terminal Services} PeopleSoft Lotus Notes

Networked Machines internet

No Bridging – iGate terminates sessions between it and the client side applications

ROI

“SSL remote access is

45 percent

less expensive than IPSec solutions

and

72 percent

cheaper than

dial-up.”

ROI

Initial Investment Medium Medium Deployment Painful Painless Operating Expense Medium Low Level of Security Medium High Corporate Strategic Low High End User Satisfaction Low High

NetSwift iGate SSL VPN

The Next Generation

iKey Overview

Strong two-factor User Authentication

Insert the iKey into a USB port - gain access from anywhere

If stolen, security is not compromised because PIN is

unknown

Key Benefits

Authentication Options

Manage access control by

user types

application access

Support diverse range of users

Tailor level of security to your

policies

iKey eliminates Password hacking

iKey extends security from

application to the user

Removing the iKey closes the

session

AND/OR

VPX - Central Application Access

Any protocol can be securely sent via SSL through NetSwift iGate

Benefits of VPX Support

Single solution for all remote access

Secure any application over SSL/port 443

Protect non-web based applications the same way as

web based applications

All data is continuously authorized and encrypted by

iGate for transport over SSL

Portal and Direct Access Resources

Access resources directly or

through Portal

iGate supports both types - simultaneously

Portal Page Benefits

– Users need to only remember one URL – One SSL Certificate to buy and manage – Host only a single IP address

Portal and Direct Access Resources

Portal Page Benefits

– One external secure access site and one IP

address

– Users can’t access sites directly - required to

go through portal

– Encrypts and obscures links in real time

– Only applications that users have access to

Do More With NetSwift iGate

Secure Any Application Portal Management

Hardware based SSL Encryption HTTP Compression

Role / Group Management

Advanced Auditing

Integrated Strong Authentication Auto Log-Off

Central Resource Management Fine Grain Control

Clientless Security SSL Encryption

SSL VPN

Executive Information Portal

Requirements

Anywhere Access for Board Members Secure Access Control

Ensure passwords aren’t shared or written down Comply with Audit compliance standards

Easy to use

Solution: iGate SSL VPN

Allows users to use only a browser to access data No integration or complicated VPN set up

Healthcare Remote Access

Requirements

Doctors need to access patient records and images from any location Secure Web based PACS system

Comply with privacy legislation (PIPEDA, HIPAA) Easy to deploy and use

Central system for web and legacy applications

Solution: iGate SSL VPN

Secure access with just a browser

Integrated iKey authentication offers secure access iKeys are easier than complicated passwords

Partner Access

Requirements

Roll out access to partners for CRM system Use same system for employees as well Enable partner access more efficiently Enforce Strict Access Rights

Solution: iGate SSL VPN

Deploys without control of the desktop No training needed

Fine Grain Access Control

Trends / Forward Looking

SSL VPNs will dominate remote Access as apps move to

the Web

Users will increase demands for SSO

IT & Security need to deliver

Certificate based authentication will increase

Token adoption will grow as security & ease of use are

balanced

Encrypted tunnels will be extended to the desktop