Strong Authentication for Cisco Virtual Private Networks (VPN) using One-Time Password Tokens

For Cisco® customers seeking to prevent unauthorized access to information and IT resources through Cisco VPN, ActivIdentity enables proof of identity for both remote users and administrators through the two-factor authentication with one-time-password tokens.

ActivIdentity strong authentication tokens are available in a variety of form factors to meet the needs of a dynamic workforce. 4TRESS™ AAA Server supports both RADIUS and TACACS+ protocols and complements Cisco network infrastructure using Cisco Secure Access Control Server to enforce user access rules.

Features and Benefits

• Extensible – ActivIdentity Strong Authentication for Remote Access can protect multiple access points, making it easy to start deployment with a Cisco VPN, and expand to protect wireless access points in the future.
• Lower management costs – Reduce costs through consolidated administration points, low token total cost of ownership (no license renewal), and user-self service administration for common help desk issues (unlock, re-sync, or PIN change for instance).
• Enhanced security – Replace passwords with two factor authentication and eliminate common password security risks.
• Future-proof – Start with tokens, and migrate to smart cards and USB tokens as security requirements evolve. Strong Authentication for Remote Access provides an easy path to smart card adoption. Combine two-factor authentication with Single Sign On for added security and user convenience. Supports a broad range of smart cards, readers and USB tokens.
• Accountability for compliance – With two factor authentication, organizations have strong proof of identity in order to protect access to resources and link online activity to users, an essential element to addressing regulatory compliance.
• Flexible – ActivIdentity offers a range of authentication devices for different requirements. Organizations can start with tokens and transition to different devices in the future as needs evolve.

Certfications, Awards & Standards

Standards Compliance:

• Data Encryption Standard: 3DES
• Challenge/Response: ANSI X9.9
• Key Management: ANSI X9.17
• Radius RFC 2865, 2866 and 2869
• TACACS+
• RADIUS support for EAP: RFC 3579, 3748
• EAP-TLS RFC 2716

Specifications

ActivIdentity Products:

• ActivIdentity Tokens
• 4TRESS™ AAA Server

Partner Products:

• Cisco VPN 3000 Concentrator
• Cisco PIX 500 Security Appliance
• Cisco 38000 Integrated Services Routers (ISR)
• Cisco 28000 Integrated Services Routers (ISR)
• Cisco 18000 Integrated Services Routers (ISR)
• Cisco VPN Client

More Solutions for Cisco

• Strong Authentication for Cisco Wireless Networks

Solutions for Cisco

• Strong Authentication for Cisco VPN
• Using Smart Cards or USB Tokens
• Using One-Time Password Tokens
• Using One-Time Password Soft Tokens
• Single Sign On for Cisco VPN
• Strong Authentication for Cisco Wireless Networks

Solution Brief

• Strong Authentication for Cisco Virtual Private Networks (VPN) using One-Time Password Tokens