Secure Out Of Band Management - Comm Devices Inc.
0 likes1,186 views
CDI has been a leader in secure out of band management (SOOB) since 1980, focusing on government-certified security solutions for network devices. Their products, including Uniguard and Port Authority, ensure high uptime and security for commercial and federal customers, protecting against network vulnerabilities. CDI is unique in offering independently secure products that function even when networks are compromised.
Secure Out Of Band Management - Comm Devices Inc.
- 1. Secure Out of Band Management Communication Devices Inc. www.CommDevices.com
- 2. Background CDI Has been building encryptors since 1980 CDI manufactured a standards based encryptor for the financial industry that has been shipped worldwide since 1980. This industry gradually changed focus to the internet, although some of this equipment is still in use.
- 3. Background CDI Has focused on Secure Out of Band Management (SOOB) for 20 years . While other vendors went off in search of DOT COM dollars, CDI focused on the emerging market in out of band management, as Router, Firewall, and Network Appliance installations grew exponentially. The emergence of multiple MSP’s as partners strengthened our position in the market.
- 4. Background CDI has been a pioneer in gaining government certifications for Secure Out of Band Management products. CDI has been a part of NIST standards for over 15 years. We have been active on the X9 committee (X9F3) that authored both FIPS-171 and FIPS-140 standards. CDI has undergone the costly and time consuming FIPS 140-1 and FIPS 140-2 certifications which have solidified CDI’s position as the market leader in Secure OOB. RSA Labs certified
- 5. Federal AGENCIES SSA, FAA, DHS, FBI, TREASURY, IRS, DEA, DOJ, TSA, CBP, DISA, SPAWAR, DISN, DREN, NOAA, DHHS CERTIFICATIONS FIPS 140-1, FIPS 140-2, UL-EN6950 CONTRACT VEHICLES NETWORX, WITS, FTS, ONE-NET, SEWP
- 6. Commercial AT&T Anheuser-Busch Bank of America Bank of Montreal Barclays British Petroleum Chevron Citicorp Credit Suisse Exxon Mobil Goldman Sachs Harris Bank Honeywell Saudi Telecom Sprint Symantec Secure Works Verizon Wells Fargo
- 7. What is Secure Out of Band Management? Out Of Band Management refers to the process that permits secured engineer “console access” to network elements (firewall, routers, bridges, switches, servers etc.) via dial up lines or a secondary network (not in the bandwidth of the main network). CDI adds strong security to this process creatiing SOOB or Secure Out of Band Management . CDI is the only vendor to offer an independently secure product in this field.
- 8. What is it for? Real Time Management of Any large network? Commercial, Federal, Military Maximize uptime and meet stringent Service Level Agreements. Protect the network, the customer, and the service provider, from the legal implications of a compromised network. Managed Service Providers Commercial, Federal, Military Maximize uptime and meet stringent Service Level Agreements. Protect the network, the customer and the service provider from the legal implications of a compromised network Vendor access Management Control Vendor access to console ports on your network.
- 9. What Does CDI Bring To The Table? The most comprehensive Secure Out Of Band Management product set that assures 99% uptime for your customer’s networks.
- 10. What Does CDI Bring To The Table? Government certified security to protect your both your customers network from exposure and your corporation from potential liability.
- 11. What Does CDI Bring To The Table? A proven field tested product set that has been installed globally and insures access to downed sites with the security that these sites will not be compromised by a third party or interloper.
- 12. For CEOs, CFOs, CIOs As a corporate decision-maker, they are the ones who are liable when something goes wrong with their network. It needs to be completely secure at all times – while simultaneously maintaining 99% quality uptime, no matter what form of outage – configuration loss, network outages, power problems, hurricanes, storms, even wear and tear to the devices themselves – you might be experiencing.
- 13. For Network Engineers Their main responsibility is the network. they want it to run seamlessly, with products that can ensure 99% quality uptime. It’s important to them to have the managed service support they need, when they need it. And as the network problem solver, they want products and services that provide them the remote maintenance and power control they need – no matter what type of issue they might be facing.
- 14. For Security Personnel It is up to them to maintain a secure work environment. They know that their network systems are often both the most critical and the most vulnerable aspects of their infrastructure. So, they need the most secure out of band management that will allow them to keep their network assets safe and protect them from attack. Many companies say their products will guarantee your security. But when compared with CDI’s FIPS 140-2 secure network management tools, you’ll see the difference:
- 15. For Managed Service Providers They need to provide their customer base with maximum uptime while also protecting both their customer and themselves from “back door” attacks on the network. They cannot allow their customers network to be compromised by a piece of equipment they placed on the network to manage it. CDI not only provides them with the industry’s best Out of Band Management solution, but also protects them from liability against the customer’s network being compromised. Currently, most major MSPs rely on CDI’s standards based, government certified, security systems to protect their service and their exposure.
- 16. Products Sets Encryption Series Authentication Series Management Software Accessories
- 17. Encryption Series UniGuard - Single port 1 Internal Modem 1 Serial Port 1 Power Control Port 1 Network Port (Optional) Port Authority - Multiport 1 Internal Modem 4 or 8 Serial Ports 4 or 8 Power Control Ports 1 Network Port (Optional)
- 18. UniGuard This single port device is designed to protect firewall/router/application console port access. The device was designed to overcome the weaknesses of RADIUS and TACACS+ for remote access. UniGuard eliminates the problem of the firewall/router/application not being able to contact the RADIUS or TACACS+ server by its own database store of up to 150 users right on board!. UniGuard supports speeds up to 115,2 Kbps and has a built in V.92 internal modem and can be managed by the DDM. Full AES encryption support with UniGuard Client. Now SecurID Ready! Add Network Option, for Real Time Management and reporting!
- 19. Port Authority 44 and 88 This is a secure switch that provides access to up to four ports as well as power control reset of up to eight devices, all from a single modem or network connection. The Port Authority incorporates all the features of the UniGuard while adding multiple port access and power reboot functions. Port access and power control can be limited on a per user basis based on the security credentials of the remote user. The internal database has a capacity of up to 150 users and can be managed by the DDM manager and can work alongside UniGuard's . Each user can be assigned access to any or all of the eight device ports. The unit contains an internal V.34 modem and has full encryption capability with the UniGuard Client. Add Network Option, for Real Time Management and reporting!
- 21. Authentication Series PA SAM 11 - Single port 1 Internal Modem 1 Serial Port 1 Power Control Port PA SAM 22 - 44 1 Internal Modem 2 or 4 Serial Ports 2 or 4 Power Control Ports 1 Network Port (Optional)
- 22. PA SAM-11 The SAM-11 connects directly to console ports and provides the highest level of authentication regardless of the status of the network. This is done by maintaining an internal security database that is updated by a “patented” central database manager on an "as needed" basis. This internal database provides fast, reliable, AES, two factor authentication. Hardware Client authentication can be enabled by using a SAM-11 or SAM-22 Client(s) at the NOC center.
- 23. PA SAM-22 The SAM-22 connects directly to console ports and provides the highest level of authentication regardless of the status of the network. This is done by maintaining an internal security database that is updated by a “patented” central database manager on an "as needed" basis. This internal database provides fast, reliable, AES, two factor authentication. Hardware Client authentication can be enabled by using a SAM-11 or SAM-22 Client(s) at the NOC center. Add Network Option for Real Time Management and reporting!
- 24. PA SAM-44 The SAM-44 connects directly to console ports and provides the highest level of authentication regardless of the status of the network. This is done by maintaining an internal security database that is updated by a “patented” central database manager on an "as needed" basis. This internal database provides fast, reliable, AES, two factor authentication. Hardware Client authentication can be enabled by using a SAM-11 or SAM-22 Client(s) at the NOC center. Add Network Option for Real Time Management and reporting!
- 25. DDM Distributed Database Manager DDM Distributed Database Manager is a Windows based software program that can manage and control thousands of remote UniGuard and Port Authority devices in the field. The software provides for multiple databases and multiple grouping of the remote devices. Each remote device can be grouped to allow for a single group of users access to multiple remote devices. The DDM contacts each remote device at predetermined intervals to update the remote database and to retrieve audit trail information . Audit trail information is placed into a database that allows for custom reports to be generated based on the administrators requirements for audit. This eliminates the administrator having to deal with hundreds of remotes individually! Now SecurID Ready! This Management Software is already installed and running in major Verizon NOC & SOC centers
- 26. SSM Secure Session Manager The SSM, Secure Session Manager, is a client based software program that can provide technician access to the secure DDM database, allowing only access to the connection information for the devices. The technician will not be able to view or modify any security credentials concerning the devices or users in the database. This will allow the technician to point and click on any device to establish secure remote access via network or PSTN. The technician still has to go through whatever authentication or possible encryption that has been setup in the device for access. This Management Software is already installed and running in major Verizon NOC & SOC centers
- 27. Remote Power Management The Power Control Module (PCM) when connected to the UniGuard , Port Authority, or SAM, will allow the CDI device to power reset a remote server, router, or other network element. The Network element can be power recycled for a predetermined number of seconds or can be shut of all together. There are US and International Power Control Modules available as well as 10 and 20 amp versions. The UniGuard can control one of these PCM's, while the Port Authority can control up to 8
- 28. Summary CDI provides the most secure, Standards Based, Secure Out of Band Management system available today These systems protect not only the user of the equipment, but also the Managed Service provider that installed, our sourced, the equipment CDI offers the only system that is designed to work “with full security” when the network is not functioning. CDI continues to improve its product set and its position as the leader in Secure Out of Band Management with its partners like Verizon Business
- 29. www.CommDevices.com +1 973 334-1980 Thank You!