eTrust Web Access Control Provides Security for Websites.

Today, delivering user-friendly, competitive services while ensuring high security is an inherent challenge for any web-based enterprise. Security is becoming increasingly important as customers demand convenient, personalized websites with safe transactions that ensure the privacy of personal information. Businesses must protect their electronic assets from unauthorized access and theft for both commercial and regulatory reasons. Tackling these challenges requires a robust, scalable and flexible security solution.

Protecting the Business

eTrust Web Access Control enables eBusiness operations by offering flexible authentication and strong authorization. Its embedded directory services allow high scalability for today’s growing, web-based organizations. This powerful solution eases deployment and offers comprehensive protection to enterprises offering Web services. By integrating with existing enterprise web and security infrastructures, eTrust Web Access Control protects both web and portal servers, and is designed to secure the next generation of Web services solutions. It offers unique benefits to help organizations:

• Protect Electronic Assets. eTrust Web Access Control works directly with many popular web and portal servers to help secure business services as well as protect electronic assets.

• Reduce Deployment Costs. eTrust Web Access Control features an optional built-in directory service, which eliminates the usual external user repository requirement. It easily integrates with PKI, including eTrust PKI, to enable optional Smartcard authentication and encryption of data and sessions.

• Lower Cost of Ownership. Self registration reduces the management overhead of setting up new accounts. In addition, maintenance and support costs can be greatly reduced with eTrust Web Access Control and other integrated eTrust security products (compared to working with multiple vendors to solve either technical or product directional issues).

• Ensure Easy Administration. eTrust Web Access Control allows administrators to remotely manage web server and portal security for the entire organization from a centralized console.

• Offer a Better User Experience. eTrust Web Access Control provides dynamic personalization and seamless security, highly enhancing the user experience and increasing customers’ return rates. Users benefit from the integrated single sign-on web facilities that enable easier navigation through multiple websites, thus improving productivity.

Distinctive Features

Policy-Based Web Security. Businesses need to protect their valuable web content and applications from unauthorized access and theft. eTrust Web Access Control acts as an authentication and authorization gateway for URLs and web applications, regulating access to web content.

Web Single Sign-On. Through its user portal page, eTrust Web Access Control provides easy single sign-on capabilities to any form-based web logins.

Embedded Directory Repository. eTrust Web Access Control includes a built-in directory database for global, scalable capacity and high performance, along with an open LDAP interface for an organization’s existing user repository synchronization.

Simplified PKI Support. eTrust Web Access Control minimizes common PKI deployment challenges by directly supporting many leading PKI solutions, including eTrust PKI.

Self-Registration and Self-Administration. eTrust Web Access Control provides an easy-to-use self-registration function for entry level account creation, significantly reducing administrative efforts. The self-administration function offers a secure method for users to manage their accounts or password resets.

Flexible Authentication. eTrust Web Access Control offers many authentication methods to suit corporate-specific requirements, including PKI, LDAP, mainframe, biometrics, token, PAP and others.

eTrust Directory™. eTrust Web Access Control includes a black boxed eTrust Directory, delivering high-performance scalability to hundreds of millions of users and the ability to grow in line with business needs.

Authorization APIs. eTrust Web Access Control provides various authentication and authorization APIs for identification, validation and regulation of user access. This feature empowers the repository with the ability to build personalized, secure websites with superior access control.

Load Balance and Hot Backup. eTrust Web Access Control maintains highly demanding Internet traffic with its built-in host backup and load balancing mechanism—helping to ensure continuous service availability.

Supports Open Interfaces. eTrust Web Access Control supports open interfaces to enable application integration and the use of standards-conformant LDAP directories. eTrust Web Access Control can be combined with eTrust Access Control for comprehensive web server security and policy-based protection at the platform and web server level.