Executive Summary Token-Based Authentication
Is it time to consider token-based authentication for your organization? If you're just beginning to define your remote-access needs, a basic remote-access server and a RADIUS or TACACS server are the first steps. When your remote-access environment is established and perimeter security needs to expand to cover authentication, authorization and accounting, a token-based authentication server will be appropriate. Each of the products we tested--CryptoCard's CryptoAdmin, Security Dynamics' Ace/Server, Vasco Data Security's VACMan and V-One's SmartGate VPN--boasts compatibility with standard authentication protocols, competent user database features, expansive client and server platform support, and effective authentication capabilities.
It was difficult to compare these products because they each approach strong authentication differently. In addition, the market is unsettled and there is a lack of standardization. Be prepared to deal with extensive user management and have token distribution and usage policies planned well in advance.
Support for integration into an existing network-access environment, server and client configuration and user/token management were our keys to evaluating these packages. Security Dynamics' Ace/Server with SecurID earned our Editor's Choice award for its comprehensive solution and rich feature set. CryptoCard is a great alternative for distributed user and token management. It provides comprehensive support for development-minded implementations. Vasco's VACMan and V-One's SmartGate VPN provide competent authentication but lack overall vision and features.
REPORTS
Analyize In-Line NAC strategies and products.
ANALYTICS Plan and design your enterprise blade server deployments
InformationWeek U.S. IT Salary Survey 2008
Salaries for business technology professionals are falling. Here's what you need to know in order to make good hiring decisions and personal career choices. Download Today