OPSEC Partners
SafeWord PremierAccess
Product Version Certified: SafeWord PremierAccess 3.2 on Windows 2000/2003 and Solaris 9
Certified For Use With: Check Point Next Generation, Check Point 2000, Check Point Connectra 2.0HFA1 and SSL Network Extender
Product Description: SafeWord PremierAccess provides robust user authentication and authorization for VPN-1/FireWall-1 and Connectra. PremierAccess allows you to positively identify users and control what resources they can access, with a system that is manageable, scalable and easy to deploy.
Evaluation
Company Description: Aladdin is a global provider of e-business security products for user authentication, access control for network applications, and Web filtering. Worldwide customers include major companies in financial services, healthcare, communications, technology and government.
Key Features and Benefits
Strong, flexible user authentication - SafeWord PremierAccess adds strong, multi-factor user authentication to VPN-1/FireWall 1 and Connectra with a system of hardware and software-based tokens that generate single-use passwords. If anyone tries to reuse one of these dynamic password, access is denied, the event is logged and the network remains secure. This robust system eliminates the vulnerabilities associated with memorized passwords, such as shoulder surfing, theft, or discovery through "sniffing" software.
Flexible role-based authorization - PremierAccess gives you granular control over who can access specific resources, based on their roles or relationship to an organization. This allows you to build comprehensive access rules and manage them for all types of users. For example, this feature enables PremierAccess to provide Connectra with a list of RADIUS Groups that users belong to, eliminating the need to store usernames in Connectra.
Advanced enrollment and deployment capabilities - PremierAccess makes it easy to manage users and rollout a system to large enterprises. The embedded Enrollment Center saves administrative time by allowing users to Web-enroll and assign themselves authenticators. The Enrollment Center can also be used to deploy client software, digital certificates or software tokens.
Highly scalable performance, unlimited user base - Built on a standards-based LDAP directory, PremierAccess scales to support an unlimited number of users. With peer-to-peer mirroring, fault tolerance and load sharing PremierAccess provides the performance required for large and growing enterprises. Multiple SafeWord PremierAccess servers can communicate with one another automatically, transparently, and independently of FireWall-1.
Flexible GUI-based management - SafeWord PremierAccess is easy to manage with a powerful remote administrative console. Management can be centralized or delegated to multiple levels, even down to a help-desk level.
OPSEC Integration
SafeWord PremierAccess interoperates with VPN-1/FireWall-1 and Connectra via RADIUS interfaces. Using the RADIUS interface PremierAccess can be configured to support many other network access servers and routers all centrally managed and sharing a common authentication database. For high performance and fault tolerance PremierAccess provides server replication with robust peer-to-peer mirroring.
Additional Information