VASCO Data Security versus RSA in Enterprise Security

1 VASCO Data Security versus RSA in Enterprise Security Best Practices on Two Factor VASCO Data Security RSA Comments authentication Server Side Features VASCO offers a native integration library called VACMAN Controller supported on most platforms (Linux, AIX, Solaris, etc) and available in all programming languages (Java, .NET, C/C++, authentication platform native VACMAN Controller X NOT AVAILABLE etc.). VACMAN Controller can be completely integrated in any integration internet application to protect it with DIGIPASS strong authentication technology.

2 RSA offers a set of API's (SecureID authentication Engine). VASCO has created its own authentication server: DENTIKEY authentication Server . This server will take care of the central administration of the DIGIPASS devices and will validate one time authentication Server software IDENTIKEY authentication Server authentication manager passwords and e signatures. IDENTIKEY is robust and easy to manage. The solution is easy to deploy, making it suitable for SMBs, and at the same time highly scalable, matching the needs of larger enterprises.

3 IDENTIKEY does not require a dedicated server. Hardware Appliance Hardware Appliance VASCO has also created standalone authentication appliances that secure remote access to corporate networks and web based authentication appliance applications. The Virtual Appliance is available in 4 models, supporting very small to very large deployments. Changing to Virtual Appliance Virtual Appliance another model is done by license upgrade. VASCO support DIGIPASS as a service , a managed cloud based Cloud based managed authentication authentication server solution.

4 With the deployment of DIGIPASS for Mobile, the Enterprise can offer their users two activation modes: manual (offline) and Automated provisioning for mobile X NOT AVAILABLE automatic (online). Offline activation codes can be generated and authenticators sent out by IDENTIKEY and delivered as a scannable QR code, creating a highly convenient way of deployment. VMWare ESX/ESXi VASCO in contradiction to RSA, can support non EMC owned Supported virtual environments Citrix XenServer VMWare ESX/ESXi products Microsoft Hyper V.

5 Client Side Features & Form Factors VASCO DIGIPASS client solutions include 50+ device options. The GO series range supports several different form factors for OTP OTP Keyfob authenticator Wide range of formfactors Limited number of formfactors generation and mutual authentication . Battery lifetime with VASCO GO Series products is typically 7+ years. VASCO supports electronic signature features on both its hardware Transaction data signing X NOT AVAILABLE and software devices. RSA offers a challenge/response device for transaction data signing.

6 VASCO 's DIGIPASS can support generation of several OTPs that are Multi OTP support X NOT AVAILABLE linked to different applications. VASCO DIGIPASS PKI keys provide a global solution based on digital signatures for authentication and e transaction Security . This PKI capable devices X NOT AVAILABLE solution is PKI based and fully interoperable with common PKI standards adopted worldwide. OATH based devices X NOT AVAILABLE VASCO supports OATH based algorithm while RSA doesn't. USB device with smart card chip . Hybrid USB authenticators.

7 DIGIPASS KEY 860 combines PKI and OTP technology with secure USB storage. It can be used for local and remote access; desktop Hybrid USB authenticators with storage X NOT AVAILABLE and application log on; disk encryption; data, e mail and transactions signing and secure mobile data storage. DIGIPASS for Mobile by VASCO is a PIN protected software (no support for TDS functionality on application on a mobile devices used to generate OTP for secure Mobile authenticators the application, no PIN protection and no login and e signature codes for transaction authorization.)

8 The secure data storage) DIGIPASS for Mobile solution supports high Security standards and considerations as a countermeasure for cloning. VASCO 's DIGIPASS can display several messages on the LCD, Screen message support X NOT AVAILABLE allowing better interaction with the user. VASCO users can have several devices to generate OTPs. All models and form factors can be mixed for optimum convenience and Multiple devices X NOT AVAILABLE functionality. RSA typically allows maximum 2 devices per user (hardware and SMS, or software and SMS).

9 7/12/2013. Challenge Response authenticator . VASCO DIGIPASS technology is capable of verifying host code HOST Code support X NOT AVAILABLE Security pass codes, mainly used for mutual authentication . VASCO supports an additional identity on board of its devices that DIGIPASS PLUS concept X NOT AVAILABLE can be used to log on to the 'Digipass as a Service' platform. VASCO also supports a film thin strip that could be attached to the DIGIPASS NANO X NOT AVAILABLE SIM card to launch and generate the DIGIPASS application for Mobile phones.

10 RSA doesn't support this form factor! Functionality and Usability Overview Time or event based, OATH, Time or event based, and OTP type Challenge/Response Challenge/Response VASCO supports multiple devices per user. RSA supports hardware Form factors One button, PIN pad, SMS, Mobile One button, PIN pad, SMS, Mobile + SMS, or software + SMS, but not all mixed. Hardware device lifetime 7 years+, Subscription based mainly 2, 3 or 5 Token license The RSA Mobile Token will also expire after 2, 3 or 5 years. software unlimited years VASCO 's LDAP Sync Tool synchronises user data between IDENTIKEY LDAP sync tool authentication Server's datastore and a LDAP directory Server VASCO 's PSM updates static passwords between Active Directory Password Synchronisation manager and Identikey's datastore.