SafeGuard Advanced Security

    SafeGuard Advanced Security provides secure authentication, enhanced protection of integrity, and comprehensive access control for users of heterogeneous networks.
 

The Challenge

   Most enterprise desktop clients operate on a mix of platforms, typically Windows NT, Windows 2000 or Windows XP and require a security solution that operates a standard policy within these environments.
   Advanced, scalable authentication mechanisms that can also save users having to remember complex passwords, are a must in today’s marketplace.
Furthermore, enterprise environments require advanced security to prevent problems arising from non-authorized software such as viruses or troubled system configurations.
   Multi-user access to shared terminals or fast user switching requires a balance between increased productivity and security.
 

The Product

   SafeGuard Advanced Security meets all the above criteria in one security solution.
   SafeGuard Advanced Security provides comprehensive privilege definition and management facilities that can be professionally implemented into a consistent company-wide security policy.
   It also affords exceptional protection of Intranet against either deliberate or inadvertent attacks by staff or external attackers. The five modules of SafeGuard Advanced Security offer among other things a comprehensive, secure authentication and enterprise policy defender for Microsoft operating systems.

Strong Windows Authentication
   SafeGuard Advanced Security replaces the Microsoft Windows logon to enhance security in various stages to reflect company-specific demands. The enhancement is achieved by improved and easily enforced password rules and two-factor authentication via smart cards and PIN/fingerprint.
SafeGuard Advanced Security permits optional support of digital certificates allowing powerful two-way authentication between the client and the server to ensure client and server integrity and full integration into a public key environment (PKI).
   SafeGuard Advanced Security optionally provides the strongest level of security by an additional requested four-eye authentication by means of smart cards for a dual control principle in your applications.
 

Terminal Server Authentication

   SafeGuard Advanced Security offers benefits of economy by operating software centrally on a server and empowers strong authentication via the use of smart cards at the client side. The authentication on the terminal server can be done via PIN or fingerprint verification.

Enterprise Policy Defender
   SafeGuard Advanced Security offers comprehensive file and interface control. Import/export control prevents the installation of unwanted software or the export of data via removables or via the Internet - unless the administrator intentionally wants to permit it. Where required, individual users or groups of users can be denied access to floppy disks, CD-ROMs, serial and parallel ports and the clipboard. The single user cannot import private software or operate, read, write or rename certain file types. Enterprise Policy Defender of SafeGuard Advanced Security provides companies with a secure workflow. No individual user can de-stabilize the system, install viruses or Trojans or reduce the productivity of the entire system.

Single Sign On
   The problem of remembering several complex passwords is solved by SafeGuard Advanced Security’s single sign on module which enables secure logon for heterogeneous networks without the need for additional passwords.
SafeGuard Advanced Security single sign on (SSO) only requires one-off identification and authentication to perform automatic logon for all other users to the network. Authorization checks and privilege assignments are taken care of by the relevant operating or security system level.
   SafeGuard Advanced Security reduces the risk of forgotten passwords caused by frequent password changes and increases user convenience at the same time. Automation simplifies regular password changes which can be assigned without user knowledge, as the user only needs to know the PIN to activate the SSO process. Access rights of employees who have left the company can easily be removed from the entire system.

Secure User Switching
   The secure user switching module significantly improves productivity by enabling teams to share one terminal. SafeGuard Advanced Security allows "secure user switching" via smart cards. If the user removes the smart card his desktop is immediately closed before being activated again for the new user.
   The solution becomes not only possible for XP systems but also backwards to Windows NT systems or Windows 2000.

Characteristics
   SafeGuard Advanced Security can be installed and administered centrally, decentrally or remotely by a central domain controller. Privilege administration can be adopted by Windows NT, Windows 2000 and Windows XP, based on users and user groups additional restrictions are able to be enforced. SafeGuard Advanced Security takes advantage of Windows Installer setup and the Microsoft Management Console. It is also possible to log all security policy violations.
 

System Requirements

Platforms
   PC with Intel Pentium processor or compatible, CD drive for installing on standalone computer, other distribution methods can be used when installing via a network, Microsoft Windows Installer-enabled

Operating Systems
   Microsoft Windows NT version 4.0, Microsoft Windows 2000, Microsoft Windows XP Professional
 

Product Specifics

Administration
   SafeGuard Advanced Security administration application, Snap-in into the Microsoft Management Console (MMC), Template for Microsoft Windows NT policy editor

Special Features
   Additional authorization, strong authentication, single sign on, multi desktop support, smart card administration
 

Security Features

Key Management
   X.509v3 certificate-based key management

Authentication
   PC/SC, PKCS#11 devices with separate add-on, single sign on functionality requires Utimaco Safeware smart card structure, mutual authentication according to X.509

Standards/Protocols
   LDAPv2, GSS, PC/SC

Tokens
   smart cards, software tokens
 

Interactions

Utimaco Safeware Products
   SafeGuard Easy, SafeGuard Biometrics, LogonGuard, SafeGuard smart card Provider, SafeGuard PKI for certificates

Third-party Products
   Novell client logon, Novell ZENworks support

Remark
   All other marks mentioned are the property of their respective owners.