VASCO Authentication

VASCO is a worldwide leader in network security authentication. VASCO makes two popular products that work together to increase the data security of an organization through the use of two factor authentication.

The VASCO IDENTIKEY Server integrates into the authentication process by acting as a RADIUS server for clients, and connecting to directories like Active Directory or other ODBC compliant databases containing user information. The VASCO DIGIPASS is the client device or software the generates the one-time password for the end-user to use during the authentication process.

DIGIPASS Client

The VASCO product that generates the one-time passwords is called DIGIPASS. It comes in many different varieties, including both software that runs on mobile phones, and battery powered hardware devices that can be carried as key fobs.

The latest version of the VASCO key fob is the DIGIPASS GO 8. It’s features are:

Enhanced security for log-on and remote access
Secure access, anywhere at any time
No need to install software on end-user’s PC
Easier deployment thanks to the slim design. Distribution can be handled through standard postal services in most countries
Robust waterproof design increases life expectancy
User-friendly: no training required, ensuring high user acceptance
Ultra portable: can be worn on a lanyard, carried on a key chain or in your pocket or purse
High return on investment thanks to a battery lifetime of seven years and beyond
Seamless integration with 3rd parties
Fully customizable design to strengthen your corporate branding

Many users will prefer the convenience of having the DIGIPASS Mobile application running on their mobile phone. All major phones are supported, and with downloadable apps on the iPhone and Android, all that is required is the entry of the serial number and activation code.

IDENTIKEY Server

IDENTIKEY is available in 4 packaged versions for Enterprise Security use:

The Standard Edition includes RADIUS functionality for a single licensed server. It is for organizations wanting to secure their remote access infrastructure at the lowest price. It could be used together with a Cisco ASA Firewall for two-factor VPN or SSL VPN access.
The Gold Edition offers web filters to secure Outlook Web Access and Citrix Web Interface, in additional to the RADIUS support offered in the Standard Edition. This version includes licenses for a primary and a back-up server. It is an ideal solution for organization that want to offer more functionality and assure availability for their employees.
The Platinum Edition addresses the security needs of organization that want to protect the external access to the corporate network as well as Windows desktop and network logon.
The Enterprise Editionis the most comprehensive solution, offering:
- RADIUS for remote access to the corporate network
- Web filter support for access to in-house applications (OWA, CWI)
- SOAP for protection of Internet based business applications (e.g. portals, extranet, e-commerce websites, partner services, etc.)
- Licenses for up to seven servers to set up a pool of replication servers to share the authentication load and assure high-availability. Especially when securing an increased number of customers and partners who use web-hosted applications.

For example, typically a Firewall or VPN server will use RADIUS to authenticate to a directory server like Active Directory that contains usernames, passwords, and information on what users are allowed to connect remotely. The IDENTIKEY server would sit in between the Firewall and the Active Directory server and would securely validate the one time passwords that were generated by the remote user’s password generating device.

DIGIPASS and IDENTIKEY available as a Package

The two elements of the VASCO two-factor authentication package are available for order as a single product, the DIGIPASS Pack. DIGIPASS Pack for Remote Authentication with IDENTIKEY contains IDENTIKEY Server software and DIGIPASS authentication technology.

IDENTIKEY is VASCO’s full blown authentication server for network and application security. The software offers one-time password and e-signature functionalities. By incorporating IDENTIKEY, newer operating systems can be supported, such as Windows Server 2008.
IDENTIKEY Server is a lightweight software suite that enables DIGIPASS strong authentication on the back-end. It verifies authentication requests and centrally administers user authentication policies.
The one-time password generated by DIGIPASS is used to log-on to your application.
IDENTIKEY verifies the authentication request on the back-end.
If the password generated by the user matches the password on the server side, access is granted.
A new password will be generated at each login, therefore eliminating the risk of password theft and unauthorized access.

Contact Adcap to find out how we can help your organization improve data security through the use of two-factor authentication from VASCO. Find out more about how the experts at Adcap provide complete solutions in specific practice areas: