OPSEC Partners

Entrust Entelligence & Entrust Authority

Product Version Certified:
Entrust Authority Security Manager 7.1
Entrust Authority Enrollment Server for VPN 7.0
Entrust Entelligence Desktop Solutions 7.0

Certified for use with:
FW-1/VPN-1 NGX, SecureClient NGX, Connectra and SSL Network Extender.

Product Description: By securing digital identities and information, Entrust Solutions make it possible to extend your enterprise to stakeholders and improve your compliance with regulatory demands for stronger internal controls and information privacy. Entrust security products for VPN-1 deliver certificate-based strong authentication to help identify the users and devices involved in any VPN connection for protecting access to sensitive corporate resources. Positive identification of users requires that the users (and devices) maintain a digital identity. The Entrust Authority and Entrust Entelligence product portfolios provide an underlying Public Key Infrastructure (PKI) that facilitates the provisioning of digital IDs to users and devices and help you manage that security in a way that allows you to save money and reduce risk of hackers and misuse.


Key Features and Benefits OPSEC Integration Additional Information

Company Description: Entrust, Inc. [Nasdaq: ENTU] is a world-leading provider of Identity and Access Management solutions. Entrust software enables enterprises and governments to extend their business reach to customers, partners and employees. Entrust's solutions for secure identity management, secure messaging and secure data increase productivity and improve extended relationships by transforming the way transactions are done online. Over 1,250 organizations in more than 50 countries use Entrust's proven software and services to turn business

Key Features and Benefits

Entrust Security for VPN-1 provides strong authentication to Check Point VPN-1 products by allowing users to authenticate with a managed digital ID. This digital ID (comprised of certificate(s) and key(s)) can be stored in a file on the desktop, in the Windows registry, on a smart card or in an Entrust directory.

Customers benefit from:

Increased security with strong authentication: positive identification of VPN users and devices including verification that the user/device is currently authorized to connect to VPN-1. Strong certificate-based authentication is achieved through Entrust digital identities (digital ID).
Reduced user administration: users are able to self-register and perform basic self-administration tasks securely and independently.
Increased scalability: using Entrust digital IDs for strong authentication of users, VPN security administration can be significantly reduced compared to usernames and passwords or pre-shared key implementations.
Ease of use: security functions are transparent and easy to use for the end user and security management tasks are automated for the administrator.
A single security infrastructure for all security applications: the award-winning Entrust public-key infrastructure is able to provide enhanced security and security identity management for Check Point VPN-1 as well as a long list of other products that secure e-mail, electronic forms, Web Portals, etc.

OPSEC Integration

The integration of Entrust secure authentication products and Check Point VPN-1 provides a highly scalable VPN solution for secure business communications over the Internet. The solution provides client-to-site and site-to-site connectivity based on industry standards such as Internet Key Exchange (IKE) protocol and X.509 digital certificates. Integrating with Check Point VPN-1, the Entrust® Secure VPN Solution delivers strong security capabilities through the following Entrust products:

Entrust Entelligence™ Desktop Manager client software transparently and automatically manages digital IDs throughout their lifecycle, which are used by Check Point VPN-1 SecureClient for secure VPN authentication.

Entrust Entelligence™ Security Provider for Windows thin-client software enables "out-of-the-box" authentication, encryption and digital signature capabilities to security-aware applications on the Microsoft Windows platform such as the Check Point VPN-1 SecureClient. Entrust Entelligence Security Provider transparently and automatically manages digital IDs located in the Windows certificate store. Check Point VPN-1 SecureClient can use these digital IDs for the purpose of secure VPN authentication.

Entrust Authority™ Security Manager provides an underlying Public Key Infrastructure (PKI) that issues digital identities to users and devices and delivers automated security management capabilities that can make VPN security deployments more scalable and easier to manage.

Additional Information