|
As organizations leverage network-based
initiatives to improve productivity, minimize costs and expand market
opportunities by providing their customers, partners, and employees access to
their high-value and sensitive corporate data, they are increasingly faced with
the challenge of comprehensively securing the access to their data whilst
minimizing the associated costs and obstacles. Protection of corporate
information assets and making it available only to the right people is vital
for any organization to ensure a sustained competitive edge.
The Aware product provides built-in high level
of security and control features for enterprise-wide deployment and scalability
within and outside the organization to share information with partners,
suppliers and customers. It features a robust, fine-grained security
architecture with five levels of security (database, application, module, menu
and module-operations), integrates with industry standard firewall
configurations and has support for SSL encryption protocol and digital
certificates for validation. For most customers, these levels of security are
adequate to safely conduct their supply chain operations.
However, for many organizations, movement of
proprietary or sensitive information across intranets and extranets demands a
higher level of data protection. For these customers, Exactus can optionally
provide NetSentry, an advanced AES 256 bit encryption module, fully compliant
with FIPS 197 standard. It provides e-mail, file, folder, disk and data
encryption with a very high level of protection for safeguarding information
assets. The NetSentry suite of products from Exactus provides software as well
as hardware based solutions to address information security requirements
encompassing individual data protection at the workstation, departmental and
enterprise level as well as remote access and site-to-site internet based VPN
connections to ensure that your business communications and transactions are
fully secured. These solutions have been tested to be fully compliant with
information protection standard ISO/IEC 15408. Protection policy encompasses
rules of information processing and information distribution. Protection is
provided from actual threat of compromising information integrity and
authenticity of information as well as from information confidentiality
infringement. The system can monitor network traffic and security associations
in real-time.
Supported protocols include SNMP V1/V2, SNMP
MIB-II. Security standards compliance includes IPSec/IK, FIPS 197, ANSI X9.52
(Triple-DES), ANSI X9.42 (Diffie-Hellman key management), X9.62-1998 Public Key
Cryptography for The Financial Services Industry: Elliptic Curve Digital
Signature Algorithm (ECDSA) and RSA. Encryption Algorithm support includes DES
(Data Encryption Standard), DES3 (Triple-DES) and RIJNDAEL. Key Management and
Distribution is accomplished through Elliptic curve Diffie-Hellman public key
exchange and RSA Crypto algorithm and Authentication is via X.509 v3
certificates, SHA-1, MD5 and DES-MAC.
|