:: Computer World W.L.L. ::


	Home SolutionsWeb Security

SSL VPN
Teleworking is becoming more and more popular with businesses for a number of reasons. First up is a reduction in overheads by not having to provide office space and all of the associated costs, heating, lighting, desks etc. Another benefit is staff morale. Recent figures prove that staff is more productive when they are able to establish a good work / life balance. By having the ability to work from home allows staff members to base their work schedule around their home schedule, rather than the other way round. By deploying SSL VPN infrastructure it is possible to give users secure access to their corporate e-mails and applications via any computer with an Internet connection. Computer World provides SSL VPN Solution from Juniper Networks and Microsoft.

	Juniper Networks SSL VPNs Juniper Networks SSL VPNs are based on the Instant Virtual Extranet (IVE) platform, which uses SSL, the security protocol found in all standard Web browsers. The use of SSL eliminates the need for client-software deployment, changes to internal servers, and costly ongoing maintenance and desktop support. Juniper Networks SSL VPN Secure Access appliances combine the overall benefit of a lower total cost of ownership over traditional IPSec client solutions, with unique end-to-end security features Enhanced access methods enable the enterprise to provision access by purpose for virtually any resources, including those that are jitter or latency sensitive.

	Microsoft Internet Security and Acceleration (ISA) Server 2004 Is the advanced stateful packet and application-layer inspection firewall, virtual private network (VPN), and Web cache solution that enables enterprise customers to easily maximize existing information technology (IT) investments by improving network security and performance. ISA Server 2004 is available in two versions: standard edition and enterprise edition. ISA Server 2004 provides advanced protection, ease of use, and fast, secure access for all types of networks. ISA Server is particularly well suited for protecting large enterprise network configurations requiring multiple firewall arrays in disparate locations that are running Microsoft client and server applications, such as Microsoft Office, Office Outlook Web Access 2003, Office SharePoint Portal Server 2003, Internet Information Services (IIS), Routing and Remote Access, Active Directory service, and many other Microsoft applications, servers, and services. ISA Server contains a full featured, application-layer aware firewall that helps protect organizations of all sizes from attack by both external and internal threats. ISA Server performs deep inspection of Internet protocols such as Hypertext Transfer Protocol (HTTP), which enables it to detect many threats that traditional firewalls cannot detect. The integrated firewall and VPN architecture of ISA Server support stateful filtering and inspection of all VPN traffic. The firewall also provides VPN client inspection for Microsoft Windows Server 2003-based quarantine solutions, helping to protect networks from attacks that enter through a VPN connection. In addition, a completely new user interface, wizards, templates, and a host of management tools help administrators avoid common security configuration errors.

Intrusion Detection and Prevention System:
The dynamism of doing business today has changed significantly over the years. Organizations are more connected than ever, with the promise that network boundaries will continue to grow. As a result, organizations are faced with growing challenges to keep their network safe, without sacrificing growth or productivity. The first step that virtually all organizations connected to the Internet take is to install a firewall. A firewall acts as a perimeter guard for a network, determining what traffic to allow or deny in and out. A firewall does this by applying a policy, comprised of “accept” and “deny” rules, based on various criteria, such as a source, destination and protocol in question. By providing access control, firewalls do a good job of providing the first layer of defense. Most firewall polices allow protocols that enable organizations to do business on the Internet, such as SMTP, FTP, HTTP, SMTP and DNS, and keep out traffic that may pose a threat to the internal systems. However, it is inevitable that some of the traffic that they allow is malicious in nature. You need a second layer of defense to complement your firewall and detect and prevent all types of attacks. To date, passive network Intrusion Detection Systems (NIDS) have been employed to try and detect network attacks. The second layer of defense is to detect the presence of attacks within the traffic allowed to flow within your network and to protect your network from those attacks. By deploying a Network Intrusion Detection System can provide a powerful and cost-effective solution that complements a firewall in protecting your corporate assets. Computer World provides SSL VPN Solution from Juniper Networks.

Juniper Networks NetScreen IDP
The Juniper Networks NetScreen-IDP™ (Intrusion Detection and Prevention) not only accurately detects intrusions, but also takes the next logical step, namely giving corporations the ability to prevent intrusions from causing damage to network resources with increased intrusion detection accuracy and the ability to prevent an intrusion, all while simplifying the deployment, configuration and ongoing management of the system. Juniper Networks IDP capabilities include;

Multi-Method Detection (MMD™): With MMD, Juniper utilizes eight different detection methods, including protocol anomaly detection, traffic anomaly detection, some advanced techniques, such as Stateful Signature™ and backdoor detection to maximize the amount of attacks detected, while reducing false alarms.
In-line Operation: The Juniper’s IDP operates as an in-line solution, which is the only way to protect against evasion techniques and provide true intrusion prevention.
Centralized, Rule-based Management: The centralized management allows administrators to control Juniper’s IDPsystem at a very granular level, while simplifying Security Policy and signature updates

Identity and Access Management:
Authentication and identity management solutions centralize the management of users, access rights, and security policies. Reduce password-related tasks at the IT help desk, audit access rights, and cut security exposures. Computer World provides organization with Identity and Access Management solutions from Entrust. The Entrust IdentityGuard is a comprehensive strong authentication platform for Internet and enterprise applications. This suite of strong authentication capabilities enables your organization to take a risk-based approach to tailoring your security deployment. The flexible deployment options enable you to match strong authentication methods to the level of risk associated with the different types of users, transactions, and applications of your unique environment. By allowing you to layer strong authentication methods – including two-factor authentication and mutual authentication – across different users and transaction types, Entrust IdentityGuard reduces the risk of fraudulent transactions and minimizes your security expenditure. You can now perform the right* level of authentication to respond to rising threat levels, while minimizing the impact on the user experience and getting the most out of your security budget.

PKI Infrastructure Solutions:
Computer World provides organizations with Entrust PKI solutions. Entrust public-key infrastructure (PKI), is designed to manage the digital keys and certificates that make up the digital identities required to transparently automate all security-related processes in an organization.

Encryption Solutions:
Computer World provides organization with Encryption solutions from Entrust to ensure the security of information transferred between users and systems through e-mail communications and e-commerce transactions. The Entrust Secure Transaction Platform delivers security to enable Web services transactions and server-based applications.

	Juniper Networks SSL VPNs Juniper Networks SSL VPNs are based on the Instant Virtual Extranet (IVE) platform, which uses SSL, the security protocol found in all standard Web browsers. The use of SSL eliminates the need for client-software deployment, changes to internal servers, and costly ongoing maintenance and desktop support. Juniper Networks SSL VPN Secure Access appliances combine the overall benefit of a lower total cost of ownership over traditional IPSec client solutions, with unique end-to-end security features Enhanced access methods enable the enterprise to provision access by purpose for virtually any resources, including those that are jitter or latency sensitive.

	Microsoft Internet Security and Acceleration (ISA) Server 2004 Is the advanced stateful packet and application-layer inspection firewall, virtual private network (VPN), and Web cache solution that enables enterprise customers to easily maximize existing information technology (IT) investments by improving network security and performance. ISA Server 2004 is available in two versions: standard edition and enterprise edition. ISA Server 2004 provides advanced protection, ease of use, and fast, secure access for all types of networks. ISA Server is particularly well suited for protecting large enterprise network configurations requiring multiple firewall arrays in disparate locations that are running Microsoft client and server applications, such as Microsoft Office, Office Outlook Web Access 2003, Office SharePoint Portal Server 2003, Internet Information Services (IIS), Routing and Remote Access, Active Directory service, and many other Microsoft applications, servers, and services. ISA Server contains a full featured, application-layer aware firewall that helps protect organizations of all sizes from attack by both external and internal threats. ISA Server performs deep inspection of Internet protocols such as Hypertext Transfer Protocol (HTTP), which enables it to detect many threats that traditional firewalls cannot detect. The integrated firewall and VPN architecture of ISA Server support stateful filtering and inspection of all VPN traffic. The firewall also provides VPN client inspection for Microsoft Windows Server 2003-based quarantine solutions, helping to protect networks from attacks that enter through a VPN connection. In addition, a completely new user interface, wizards, templates, and a host of management tools help administrators avoid common security configuration errors.