OPSEC Partners

eProvision Day One

Product Version Certified: Version 3.0 on Windows 2000/NT
Certified for use with: Check Point Next Generation

Product Description: The eProvision Module (ePM) for Check Point FireWall-1and UserAuthority is an add-on component to CA's eProvision Software. The ePM for Check Point FireWall-1 and UserAuthority delivers fast, secure administration and deployment of single sign-on and firewall/VPN access to corporate employees, consultants, suppliers, customers, and business partners by automatically configuring Check Point UserAuthority and Check Point FireWall-1 based on an individual's business needs to access organizational IT resources.


Key Features and Benefits OPSEC Integration

Company Description: CA has developed a breakthrough class of directory-based applications that help organizations leverage their digital infrastructure as a core part of their Internet strategy. The company's eProvisioning solutions align business needs with IT resources, automatically provisioning users with access to the devices, applications, systems, and services they need to be productive from day one. By "eProvision-enabling" their digital infrastructures, organizations can seamlessly manage change across and beyond the enterprise, and better respond to emerging market requirements. As digital relationships between organizations expand, CA's solutions will continue to address the provisioning of digital resources across inter-organizational boundaries, via intranets, extranets, and the Internet.

Key Features and Benefits

The ePM for Check Point FireWall-1 and UserAuthority integrates provisioning into your organization's overall security infrastructure management system, allowing the IT department to manage all provisioning tasks from one unified browser-based GUI. As an integral part of eProvision, Check Point UserAuthority and Check Point FireWall-1 configurations are automatically performed in concert with a variety of other security and access systems including email systems, network accounts, enterprise applications, telephones, and other business tools and information systems.

To begin the provisioning procedure, a business change is entered into eProvision via the application's web-based client interface. (This interface may be replaced with a different eProvision-enabled client interface, such as the PeopleSoft HR application). For example, an HR manager might specify that an employee is moving from New York to San Diego. The HR manager would therefore change the employee's "work site" definition from "New York" to "San Diego." This change automatically triggers eProvision's workflow process to provision the employee with the required IT resources and services in San Diego on the date of her move, while also de-provisioning (removing) her from the New York system. This workflow process includes the automatic re-configuration of Check Point FireWall-1 and Check Point UserAuthority to support this business change.

eProvision leverages directory services to convert business users' information into digital profiles. These digital profiles are then processed by a comprehensive rules-based engine to create Active Digital Profiles (ADPr), which access a business-oriented IT workflow to dynamically connect users to the appropriate IT resources and services. eProvision provides business and IT executives with the ability to quickly identify bottlenecks and maintain accountability of the eProvisioning™ process through comprehensive reporting and tracking capabilities. As business relationships between organizations expand, CA's technology provides the framework for integration and interoperability between eProvisioning partners - suppliers and service providers, devices and applications - which are the digital foundations of the Internet economy.

OPSEC Integration