AEP Networks

Netilla Security Platform

Security Features

The NSP’s breadth of security features means that you gain the efficiency and financial rewards brought by simple, timely remote access, while your business-critical resources remain safe from risks. This overview of SSL and VPN network security features is designed to give IT security professionals the high-level technical detail they need to make an informed decision.

Protection of internal network resources with the Netilla Security Platform (NSP) begins with the browser-embedded SSL (secure sockets layer) protocol for encryption, site authentication, and session integrity. Once a secure connection is established, the NSP offers increased protection to the network in a variety of ways:

• SSL VPN technology secures access at the application layer

• Dynamic enforcement of external authentication and rule-based policies that define user privileges

• Configurable session timeouts

• Client Side Certificates with revocation list support

• Stateful Packet Inspection Firewall (SPI) protects SGA and network resources

• Secure Desktop, Host Integrity Verification and Adaptive Policies (by V-Realm)

• Broad authentication leverages all leading protocols (Windows® SMB/Active Directory, LDAP, RADIUS®, RSA SecurID®, Kerberos, VASCO®, Aladdin®, ActivCard®)

Application Layer Proxy for Maximum Network Protection
The NSP is able to deliver its rich set of application access modes by functioning as an “Application Layer Proxy”. Application-layer proxies protect internal data from direct exposure to the Internet in two important ways. First, web and application servers are never directly “touched” by remote users. Access is only through a “proxy” – the NSP itself – that terminates and translates application protocols before they are allowed to reach the internal network.

Second, an application-layer proxy boosts security by applying authentication and policy before allowing connections to application servers. Because termination occurs at the NSP, security can be applied before data requests are transmitted to private network application servers.

This powerful story means that an organisation can extend applications to remote users over the Internet without having to place application servers in a publicly accessible area. Placing application servers in such a “Demilitarized Zone” (DMZ) would require much hardening to lock down and protect. Instead, with the NSP, application servers can remain safe on the private network behind the firewall, and are never exposed to the public network.

By providing secure, simple, Web-based access to remote applications and data, the NSP gives organisations of all sizes the productivity edge they require to excel.