Aladdin Partner Newsletter
June 2006
PARTNER NEWS
A GLOBAL RESOURCE FOR ALADDIN CHANNEL PARTNERS
 
News You Can Use

LEAD STORY- eToken


Aladdin Introduces eToken NG-FLASH

Aladdin eToken NG-FLASH is a USB smart card authentication token with added flash memory. It combines the full functionality of the smart-card-based eToken PRO - including PKI encryption and digital signing, secure credential storage, and more - with flash memory for portable mass data storage.

eToken NG-FLASH enables highly secure access to networks and applications and convenient mobile data storage, all in a single device. With eToken NG-FLASH, users can take their data and access credentials with them anytime, anywhere, and use them on any computer with a USB port - providing maximum versatility and usability.

A World of Capabilities
The integration of a smart card and flash memory in a single USB token opens a vast range of opportunities. eToken NG-FLASH can be used by traveling employees, students, or any other user to carry all of the data they need with them – whether it’s their web account passwords, work files and applications, or encryption keys for protecting their data. With its auto-run functionality, which enables pre-loaded applications to automatically launch when the token is plugged in, eToken NG-FLASH offers extended benefits. For example, the token can automatically install device drivers, or security applications such as data encryption software.

Features:

  • Strong two-factor authentication: requires both the token itself and the token password
  • Highly secure implementation using smart card chip
  • Public key infrastructure (PKI) support, with on-board RSA 1024-bit and 2048-bit PKI key generation, authentication, and digital signing
  • Secure storage of user passwords and cryptographic keys
  • Flash memory for mass data storage (128MB, 512MB, or 1GB)
  • Auto-run feature - enables solution providers to pre-load applications that automatically run directly from the token
  • Standard PKI support for CAPI and PKCS#11
  • Fully compatible with eToken PRO solutions
  • Robust plug-and-play USB connectivity
  • Development tools for integration with third party applications

Benefits:

  • Flexible solution with multiple capabilities in a single device
  • Protects organizations' IT resources and digital assets
  • Enables compliance with regulations mandating data security and privacy protection, such as the Sarbanes-Oxley Act, HIPAA, and Basel II
  • Full portability of user data and credentials - no special reader needed
  • High usability
  • Enhanced productivity with increased secure connectivity to networks, applications, and web-based services
eToken NG-FLASH is currently available in pre-release status. For further information and ordering details, please contact your eToken sales representative.

 
News You Can Use

PRODUCT NEWS



eSafe 5 FR2: Security, Productivity and Safety
eSafe 5 FR2 is a very important stage in the eSafe evolution. It follows the shift in threat types to web surfing attacks, and the desire of customers to implement a single gateway content security solution addressing the obvious security issues. Specifically, these include web threats such as Spyware, Trojans and Phishing. Customers also need productivity - at the gateway, this translates into blocking access to malicious, non-productive and inappropriate site categories, as well as monitoring web usage by users or groups.

eSafe 5 FR2 with the profile-based URL Filtering add-on means customers can achieve it all. They no longer need install other products to benefit from profile-based URL filtering. This is a very important step, as it brings eSafe into direct competition with URL filtering vendors on the market. However, no other solution offers the extensive security of eSafe, which can match and probably beat most other URL filtering products.

On top of security and productivity, another gateway aspect of importance - especially to schools, universities, libraries, and other public computer centers - is safety, or child-safety. eSafe 5 FR2 adds user identification methods, ideal for these situations, enabling children to safely surf the web, protected from offenders and damaging web content, while enabling less restricted access for adults, teachers and administrators.

For more information, and a full list of eSafe 5 FR2 features, contact your Aladdin eSafe representative.

eSafe's Mobile Content Security Gateway
eSafe MCSG places a gateway between the Internet and the cellular provider's network. Every smartphone that connects to the cellular provider's network then receives their MMS messages and browses the Internet after the traffic is inspected by eSafe MCSG. This includes MMS messages and attached files, all SMTP email messages as well as WAP and HTTP content. eSafe's multilayered security approach provides comprehensive protection against mobile content security threats, such as viruses for handheld devices and email-borne spam and phishing.

To learn more, contact your Aladdin Representative.

New Patent Pending HOFA Technology
eSafe MCSG now includes a new, patent pending Hostile Operation Flow Analysis (HOFA™) technology that stands as the first proactive virus protection for cell phones. The release of this new technology accompanies fast-increasing adoption among mobile operators. The HOFA technology, based on research by the Aladdin eSafe Content Security Response Team (CSRT), is a new addition to eSafe's existing sophisticated code emulation that inspects executable code in real time. HOFA adds proactive security by identifying malicious code with the first variant, blocking all of its descendents. Instead of creating regular signatures, HOFA creates a strict logic model of the malware's execution flow. This guarantees nearly 100-percent proactive recognition of a malware family.

Two New Versions of eSafe Spyware Neutralizer In the Works
Two new versions of Spyware Neutralizer will soon be released: Spyware Neutralizer Net - this is the clientless scanner that an administrator is able to run from within the local network to scan and neutralize workstation spyware. This requires users to be logged into a Microsoft network domain. Spyware Neutralizer Web - this is an ActiveX spyware cleaner component which enables users to surf to or be redirected to a dedicated web page from which it is run, neutralizing any existing spyware without installing any client software. This is useful for periodical planned spyware scanning, or for automatic redirection in case of the detection of outbound spyware communication from an infected workstation when the eSafe AppliFilter add-on is in use.

Contact your Aladdin representative for your copy of the latest Spyware Neutralizer brochure.

eToken RTE 3.65 Now Generally Available
RTE 3.65 includes a variety of new and improved features for administrator convenience and an enhanced user experience. These include:

  • Support for new eToken devices with the CardOS 4.20B operating systems. These will include versions of the eToken PRO (32K and 64K) and eToken NG-OTP (32K and 64K), to be released later this year.
  • Enhanced support for keys and certificates that were created by PKCS#11-enabled applications in CAPI-enabled applications.
  • Support for the Supplementary API (SAPI) to eToken, as introduced in the eToken SDK 3.60.
  • Better integration of PKCS#11 keys through CAPI.

eToken Windows Logon (GINA) 2.5 and TMS Windows Logon (GINA) Connector 1.6 Now Available

eToken Windows Logon (GINA) version 2.5 (previously eToken Network Logon) and TMS Windows Logon (GINA) Connector 1.6 are now generally available.

eToken Windows Logon (GINA) 2.5 has a number of new features and upgrades from previous versions. These include:

  • Support for both certificate-based (Smartcard Logon) and password-based authentication
  • Support for logon using a Windows computer that is not in a domain
  • Support for logon/unlock using the eToken without removing and re-inserting the eToken
  • An "Unblock eToken" feature that allows the administrator to unblock the eToken even when not on site

The TMS Windows Logon (GINA) Connector 1.6 has the following new features:

  • Support for both eToken Windows Logon (GINA) versions 2.0 and 2.5
  • External connector installed independently from TMS, enabling future updates to the connector without needing to update the TMS version

New eToken Software Enables OTP Authentication to Microsoft IIS, Microsoft OWA, and Citrix WI
eToken recently released software enabling 3 types of OTP authentication:

  • The new eToken OTP authentication for Microsoft IIS server solution enables organizations to enhance their corporate network user access solution with increased portability and security, providing clientless OTP-based two-factor authentication to the IIS server. eToken OTP Authentication for IIS is comprised of the eToken OTP Authentication solution and the eToken OTP Authentication 1.0 for Microsoft IIS software. eToken also supports certificate based authentication to IIS using SSL v3.0 protocol.
  • The eToken OTP Authentication1.0 for MS OWA is an authentication enhancement developed by Aladdin, enabling organizations to implement secure access to OWA with eToken OTP technology. The authentication enhancement protects users' emails and data from unauthorized access by requiring both the eToken device and a password in order to authenticate. eToken OTP authentication for OWA is comprised of the eToken OTP Authentication solution and the eToken OTP Authentication 1.0 for MS OWA software. eToken also enables secure certificate-based authentication to OWA, using SSL authentication.
  • The eToken OTP authentication for Citrix Web Interface (WI) solution enables secure Web-based access to the Citrix Presentation Server with eToken OTP strong authentication - anytime, anywhere. eToken OTP authentication for Citrix WI is comprised of the eToken OTP Authentication solution and the eToken OTP Authentication 1.0 for Citrix WI software. eToken offers certificate-based authentication to the Citrix Presentation Server as well, either with a certificate through the ISA client, or through the Web with SSL authentication using the secured Citrix WI.

 
News You Can Use

NEWS YOU CAN USE



Product News:


Study Indicates Attacks Tripled in 2005 - Spyware Sneaks up on Enterprises

Aladdin eSafe Named Best Anti-Trojan Solution in 2006 SC Magazine European Awards

Vonage Selects Aladdin eToken to Enhance Data Security for its Employees

Aladdin Joins SAFE-BioPharma Association as Premier Vendor Partner

Corporate News:

Aladdin Inks Significant Chinese Distribution Deal with Shanghai Wicresoft, Co. Ltd.

Industry News:

Extend perimeter defense to application layer - Network World

 
Sales and Marketing tools

SALES & MARKETING TOOLS



New eToken Regulatory Compliance Documents
eToken has continued its series of documents on the topic of regulatory compliance, covering the Health Insurance Portability and Accountability Act (HIPAA) and the Federal Financial Institutions Examination Council (FFIEC) guidance issued in October 2005.

This series of documents focuses on key regulations and guidelines worldwide that mandate organizations protect their internal data and meet IT security standards, demonstrating how eToken can help organizations comply with them.

Two New eToken Whitepapers Released
The whitepaper "Strong Authentication: Securing Identities and Enabling Business" provides an overview of the market and positions eToken as a comprehensive solution for today's needs. It describes the drivers for implementing strong authentication in the digital environment, strong authentication solutions available in the market, key trends in the industry, and the eToken solution.

The whitepaper "Make Your Token Authentication Solution a Reality with a Token Management System" describes the importance of the token management system as an integral part of a strong authentication solution, highlights the important considerations when evaluating token management systems, and describes Aladdin's TMS.

New URL Filtering Datasheet Now Available
This new datasheet highlights unique features and advantages in eSafe 5 FR2, with the new advanced URL Filter offering. To get your copy, contact your eSafe representative.

eSafe Releases MCSG Datasheet
The MCSG datasheet provides a general background on the effect of malicious code on the cellular industry and explains the unique eSafe Mobile Content Security Gateway offering for Mobile operators. To get your copy, contact your eSafe representative.

New eSafe Proactivity Meter
A new proactivity meter has been integrated onto the eSafe home page. This meter represents the percentage of known malicious code against which eSafe proactively protects. You can see it at: www.aladdin.com/esafe.

 
Sales and Marketing tools

ASK THE EXPERT



Q: How can I use the same eToken for both smart card logon and password-based Windows logon?
  A: With the new eToken Windows Logon (GINA) 2.5, users can use a single eToken containing both a smart card logon certificate and Windows network logon credentials (username, password, and domain) to perform secure Windows network logon. The available logon method(s) – i.e. certificate and/or password based – can be defined by the administrator. eToken Windows Logon (GINA) 2.5 also enables the use of eToken for secure Windows authentication even when the machine is not part of domain, providing a strong authentication solution for stand-alone machines.

Q: How do I reject emails to Non-Existing recipients according to an organization’s LDAP/AD server?
  A: A new feature added in eSafe v5.1.055.14 improves eSafe Mail performance by connecting to an internal LDAP server and based on information received, rejects email to non-existent email addresses.
Complete information on this new feature and its operation can be found at: ftp://ftp.aladdin.com/pub/manuals/
esg/esg5.x/Technote_LDAP.pdf
 
Sales and Marketing tools

UPCOMING EVENTS

 
Date Event
June 20–21 InfoSecurity Canada
Toronto, ON
June 20–21 Aladdin Turkey Event
Istanbul, Ankara, Turkey
June 25–27 Ontario Association Chiefs of Police
Hamilton, ON
June 27 NetworkWorld IT RoadMap
Chicago, IL
June 28 Sic Magazine Seminar
Madrid, Spain
June 28–30 eSafe eToken event
St. Petersburg, Russia
June 29–30 DNS - SecNet 2, iT security conference 2006
Prague, Czech Republic
 


Contact Information:
Tell us what you think of PartnerNews, and what you’d like to see in future editions.

Past issues

Subscribe/unsubscribe to Aladdin security updates
Unsubscribe from PartnerNews

 
Aladdin.com
© Aladdin Knowledge Systems, Inc. 1985-2006. All rights reserved.