Protect Networks and Data with Standards-Based Security

Mobility XE secures network access and all data transmissions using strong, standards-based authentication and encryption, makes tight security easy to manage and maintain. Single sign-on and InterNetwork Roaming capabilities make security transparent to the end user; workers only need to log in once, for the duration of their session. There are no additional steps or passwords to remember, no matter how many different networks they use. The VPN tunnel encrypts all data transmitted to guard against eavesdropping.

User-Transparent Security

Single sign-on and InterNetwork Roaming capabilities make security transparent to the end user; workers only need to log in once, for the duration of their session. There are no additional steps or passwords to remember, no matter how many different networks they use. For additional security against unauthorized use of devices that have been misplaced or stolen, Mobility XE can enforce periodic user reauthentication, validating the identity of the person using the device.

Two-factor Authentication

Two-factor authentication is federally mandated for many law enforcement agencies, and is a wise precaution for commercial enterprises as well. It requires a second factor — something the user has — in addition to a password to successfully authenticate the user. Mobility XE two-factor authentication methods allow organizations to meet the standards at minimal cost. In addition to native RSA Secured certified support for RSA SecurID, Mobility XE also supports smart cards or X.509v3 user certificates. By leveraging RADIUS-EAP and standard PKI infrastructure available from many vendors and built into Microsoft server operating systems, Mobility XE provides options for strong, two-factor user authentication with little or no incremental cost. Mobility XE also supports NTLM and RADIUS authentication.

Device Authentication

Authentication of the device using X.509v3 certificates confirms that the device is an authorized corporate asset. This protects corporate resources from being accessed by legitimate users logging in from an untrusted, unsecure device. It also adds an extra authentication factor that can be bound loosely or tightly to the user; an individual may only be allowed to use a subset of devices, or a specific, personally assigned device. The ability to authenticate the device without an active user session is also a key management feature, supporting over-the-air device management using third-party policy, asset-management and control tools.

The Industry's Highest-Standard Encryption

FIPS 140-2 validated AES encryption modules are the United States government's standard for securing non-classified information. Mobility XE provides encrypts all data transmitted between the Mobility client and server with FIPS 140-2 validated AES encryption, in 128-bit, 192-bit or 256-bit strengths. Mobility XE provides the security advantages of an IPSec VPN without its configuration, client provisioning and management burdens.

Network Access Control

Allowing a device with an out-of-date security posture to connect to internal resources is a security risk. Mobile Network Access Control verifies that every connecting device is up-to-date with software and patches and that security measures are enabled, while keeping mobile workers productive.

Device Quarantine for Additional Network Protection

Because mobile device loss or theft can compromise information on enterprise networks, Mobility XE lets network administrators quickly and easily quarantine lost or stolen devices. Quarantined devices are unable to authenticate to the network and administrators can easily restore network access when the device is recovered.