nGSA SERVER APPLIANCE OVERVIEW

Two-factor authentication can provide a powerful additional layer of security for your networks by using two different methods to verify the user’s identity: What you know (user name and password) and what you have (a token, software application, or passcode). The Iron Networks Gemalto Strong Authentication Server (nGSA) is an integrated single server solution which supports a broad portfolio of end-user devices for the appropriate authentication of mobile users who want to access enterprise resources. These options range from one-time password (OTP) technology to support of a full public key infrastructure (PKI) based smart card and bio-metric deployment. When deployed with Microsoft's Forefront Identity (FIM) manager, it offers out of the box integration for easy to use single interface solution for device and user management, deployment, and migration.

Industry leading, Convenient, Cost Effective and Secure access to Enterprise Services

Designed to work out of the box with your existing infrastructure, the nGSA utilizes your existing user databases, groups, and permissions to provision one-time password (OTP) credentials for new mobile users who want access to their enterprise intranet and extranet resources. It offers a convenient package through:

• Ease of Infrastructure Management: With a highly configurable yet easy to use interface, your IT administrators will intuitively be able to configure your installation, add new users, and manage users and groups without any additional skills or training.
• Flexible Configuration: Multiple authentication devices (hardware and software) which allow adapted security solution of authentication devices (OTP – PKI - biometric) and reusable end-user licensing
• Leverage Existing Infrastructure: Interoperable with many of the major network infrastructure and operating system products on the market, maximum flexibility and investment protection, single-user friendly web portal with self-service configuration, and flexible licensing and configuration all add up to great cost savings and improved security
• Streamlined Setup Process: Easy to provision, manage, and empower end-users using the customer care and administrative portal
• Meets Compliance Requirements: Meets or exceeds PCI, SOX, HIPPA, and the European Data Privacy mandates
• Scalability: Scalable for customer performance needs (from 1 user to 100K+)

Easy to Deploying and Maintain Strong Authentication Solution on a Turnkey Hardware Appliance

Enterprises can deploy the nGSA solution quickly without any software installation, hardware acquisition, security hardening, network tuning, or most of the other tasks required to deploy a sophisticated and complex security solution. Staff training and risk is reduced with the Iron Networks pre-integrated and supported solution. In addition, the nGSA can immediately scale to meet the needs of any size business without having to undertake additional deployment efforts.

Iron Networks nGSA Appliance Key Benefits:

• Ease of Deployment and management: Easy installation for standard configuration (less than 20 min) and integration in existing IT configuration
• Lower TCO: Reduced acquisition, deployment, and life-cycle management costs
• Integrated Packaging: Hardened security hardware with built-in secure perimeter firewall
• Support and Services: 3 or 5 years 24x7 help desk and hardware maintenance programs

Iron Networks nGSA Appliance Hardware Features:

• Flexible configuration and scalable options, two models to choose from:
  • nGSA 1500 offers fast and simple deployment. It is designed with redundant disk drives for up to 5000 users.
  • nGSA 3500 is designed with redundant disk drives and power supplies for enterprises that require scalability and high availability (HA) array deployments. It offers an option for HSM hardware and FIPS2/FIPS3 compliant hardware. Designed for up to 25,000 users.
• SSL acceleration hardware

Iron Networks nGSA Appliance Software Components: The Iron Networks GSA Appliance combines the extensive power of the Gemalto Strong Authentication products with Microsoft TMG embedded firewall for integrated security services on a hardened security appliance. The core components include:

• Microsoft Windows Server 2008 R2 Embedded and Hardened
• Microsoft Threat Management Gateway 2010 Firewall Embedded
• Gemalto Protiva Secure Authentication Server (Authentication, Customer-Care and User-Care modules)
• Microsoft SQL 2008 Express (for POC, Enterprise Optional)
• Microsoft Radius Server

Pre-Integration Solutions with Microsoft Forefront technologies: Iron Networks nGSA solution provides Gemalto Protiva Secure Authentication Server module integration with various Microsoft and 3rd party SSL VPN, messaging, reporting, and invoicing technologies

• Microsoft Forefront Identity Manager Appliance (mFIM)
• Microsoft DirectAccess Networking Appliance (mDA)
• Microsoft Forefront UAG Security Appliances (mUAG)
• Microsoft Forefront TMG Security Appliances (mTMG)

nGSA, Microsoft DirectAccess & FIM Appliance Deployment Architecture: