Portcullis Systems Appliance Management suite (PSAM) |
|
|
Rich, Complete Remote Management Portcullis Systems builds on iLO with the Portcullis Systems Appliance Management suite (PSAM) -- a rich set of monitoring and management capabilities that provide more detail and control than any other Gateway on the market. Alerts PSAM uses the instrumentation built into the hardware to monitor temperatures, performance and other factors so that when the unit exceeds thresholds, it will alert both you and Portcullis Systems. Alerts about operating temperature, hard disk performance, disk capacity and other developing problems are sent via Syslog, SNMP and email. Alerts flow at your discretion on anything from total system or power failures, to the failure of a particular service or connection, to an increase in temperature. Patch Management As threats and countermeasures proliferate, keeping patches up to date for operating systems, applications, firmware and networking software has become a major headache. Portcullis Systems appliances come with a patch management system that not only frees you from patching the appliances, they can reach out and patch other systems as well. Reports and Updates PSAM provides a robust reporting capability and pre-defined reports that help keep you up to date on the status of the gateway protecting your enterprise – including, real-time snapshots of their current status, summaries of recent activity, or historical data that can highlight trends or be used for financial or security audits. Remote Support and Backup PSAM features a remote-access capability that puts a virtual engineer on your site to help address issues without waiting for a human to arrive. Remote-support sessions allow our engineers to troubleshoot appliances in real time to minimize downtime, bottlenecks and other issues. |
|
 |
- Overview
- Technical Specs
- Frequently Asked Questions
- Ballista™
- Direct Access and UAG
- PS Appliance Management Suite
|
|
||
Portcullis Systems Unified Access Gateway appliances now with Microsoft Forefront Unified Access Gateway 2010 for secure remote connectivity.The Portcullis Systems Unified Access Gateway is a flexible, powerful platform that gives mobile workers, partners and customers secure, complete access to almost any application -- without the headaches of creating and maintaining VPN connections. The Portcullis Systems Unified Access Gateway leverages the full power of Microsoft’s UAG to provide secure access to almost any resource within the enterprise – and allows you to change, limit or forbid access to specific resources based on the location, device or security level of the remote user. Configuration is not only simple, it provides far tighter security and increased flexibility when compared to SSL-VPNs. SSL- VPNs create an encrypted tunnel through your firewall without letting you see what travels through. The Portcullis Systems Unified Access Gateway monitors traffic on your network, identifies the types of traffic and range of connections, then stops all attempts to penetrate your enterprise except those you have already approved, under conditions you have already set. High Performance - Tight, Multi-factor SecurityFor Portcullis Systems, access is not a yes-or-no proposition. The Portcullis Systems UAG appliance lets you offer a conditional ‘yes’ to remote workers who need access but haven’t satisfied all your security requirements.For example: anti-virus present but not up to date? You can reach network resources One through Five, but not Six. No antivirus at all? You may only get to the Webmail page with no ability to upload files. The gateway has built-in, deep knowledge of networked applications so it can intelligently analyze traffic and make decisions based on your priorities and almost any characteristic you choose. Need more security? Add support for two-factor authentication – tokens, smartcards, biometrics and almost any other physical method of confirming a user’s identity – so it takes more than just a password to get into your enterprise. The high-performing Portcullis Systems appliance – based on Intel’s latest Nehalem architecture and customized Hewlett-Packard high-performance servers -- is hardened for security, streamlined for speed and specifically designed to analyze application traffic without slowing it down. Application Access - Anywhere, AnytimeThe Portcullis Systems Unified Access Gateway (UAG) simplifies remote access and allows you to extend the reach of your organization to mobile workers, partners, clients and customers securely. It allows you to define who should get access to what resources under what circumstances and enforces your policy for each user/device as it attempts to log on to your network.UAG analyzes each user attempting to access your organization. A deep scan of the endpoint occurs and identifies the location of access, the device type, the state of the device (e.g. antivirus, operating systems, patch level and more) and is combined with the user’s credentials to create a profile of each user at the time of the each attempted access. This profile is applied against corporate policy that you configure in the gateway to determine what resources should be available based on the user’s current access scenario. This gives you extensive, granular control over what resources are available and under what circumstances. The gateway can even control access to functionality within an application. For example, if you had a SharePoint portal with important company announcements, sales tools, shared files, and email access, you could limit a remote user with valid credentials, but who does not meet other compliance factors, to view company announcements, view email but restrict upload and download capability, view sales forecasts, and block access to shared files. By contrast, SSL-VPNs – which have been the best remote-access security option until now – can only provide yes-or-no access approval. Either you shut out workers logging in from public or unmanaged devices, or you open full access to the resource. One option limits productivity, whilethe other increases exposure and risk. The UAG allows for partial access within applications allowing a much finer level of control. This provides an unmatched level of granular control over access to your critical applications – without completely shutting out remote workers that fail to comply with every security requirement.  |
|
|
| FAQ's |
| Q. What is the Portcullis Systems Unified Access Gateway (UAG)? A. The Portcullis Systems UAG is a ready for deployment Microsoft Unified Access Gateway appliance which delivers comprehensive, secure remote access to corporate resources for employees, partners, and vendors on both managed and unmanaged PCs and mobile devices. Utilizing a combination of connectivity options, ranging from SSL VPN to DirectAccess, as well as built in configurations and policies, the Portcullis UAG provides centralized and easy management of an organization's complete anywhere access offering. Integrating a deep understanding of the applications published, the state of health of the devices being used to gain access, and the user's identity— Portcullis Systems UAG enforces granular access controls and policies to deliver comprehensive remote access, ensure security, reduce management costs and complexity and is delivered on enterprise HP hardware.Q. What are the benefits of a Portcullis Systems UAG appliance? A. At Portcullis Systems, we build upon the great technologies from Microsoft and HP to provide significant additional value for our customers. Our technologies make deployment easy, boost performance of applications and help to centrally manage your array of Portcullis Systems devices wherever they may be located. Portcullis Systems appliances also add significant benefits to UAG deployments with enhanced features like application acceleration through Portcullis Systems Ballista™ and our enterprise auditing software PSAM™. A. Portcullis Systems is a world-class provider of Forefront Security appliances and global 24 x 7 support to customers around the world. As a Global OEM partner for HP and Microsoft, we deliver our high-value software solutions on tier-1 hardware platforms to provide reliable, scalable performance with the best support available in the industry. We can provide hardware engineers onsite to your locations around the world in as little as 4 hours for an unmatched level of service.
A. Our HS-UAG7000F and HS-UAG9000F models conform to FIPS 140-2 Level 2 encryption standards for organizations requiring the highest levels of data encryption. The cryptographic technology is a multi-chip embedded hardware cryptographic module that resides within the gateway appliance. It is contained in its own secure enclosure that provides physical resistance to tampering.
A. UAG is built on the proven platform of IAG and extends the capabilities of IAG with new features and functionality. Forefront UAG continues Microsoft's differentiation around application intelligence, endpoint security, granular policy controls, and ease of use. UAG will be deployed in the same scenarios as IAG as well as some expanded scenarios. For DirectAccess scenarios, UAG will further improve deployments by providing access to/from existing infrastructure, simplifying configuration, and enhancing management.
A. Portcullis Unified Access Gateway is designed to build on the secure remote access capabilities in IAG 2007, extending Microsoft's focus on application intelligence, security and control, and ease of use:
A. Virtual private networks (VPNs) securely connect remote users to their network. While DirectAccess can also do that, it is only one of the many things that DirectAccess can perform well. Additionally, DirectAccess can ensure that users are connecting to the exact server to which they think they are connecting (end-to-end authentication) and provide data encryption all the way to the server (end-to-end encryption). DirectAccess also allows IT professionals to service remote computers whenever the DirectAccess client has Internet connectivity. Additionally, working together with Network Access Protection (NAP), DirectAccess can ensure that the clients are always compliant with system health requirements to ensure a secure and healthy IT environment.
A. DirectAccess in Windows 7 and Windows Server 2008 R2 enhances the productivity of mobile workers by connecting them seamlessly and more securely to their corporate network any time they have Internet access—without the need to establish a VPN session. DirectAccess enables corporate network file shares, intranet Web sites, and line-of-business applications so they can remain accessible wherever you have an Internet connection. DirectAccess requires Windows 7 Enterprise Edition or Windows 7 Ultimate Edition computers and a Windows Server 2008 R2 DirectAccess Server at the edge of your network. Unified Access Gateway 2010 (UAG) extends the benefits of DirectAccess across your infrastructure, enhancing scalability and simplifying deployments and ongoing management.
A. DirectAccess clients must run Windows 7 Enterprise Edition or Windows 7 Ultimate Edition, and must connect to a Windows Server 2008 R2 DirectAccess server. The client machines must also be joined to an Active Directory Domain Services (AD DS) domain.
A. DirectAccess does not require any client-side installation. DirectAccess clients use Active Directory domain membership and Group Policy settings for their configuration and leverage software already built in to the Windows 7 Enterprise or Ultimate operating systems. Group Policy settings are applied while connected to the local area network (LAN) or through a DirectAccess connection. There is no user interface on the DirectAccess client. When DirectAccess is operating effectively, it is transparent to the end user. A. Forefront Threat Management Gateway is a comprehensive, secure Web gateway that helps protect employees from Web-based threats. It provides multiple layers of continuously updated protections, including URL filtering, antimalware inspection, and intrusion prevention. These technologies are integrated with core network protection features, to create a unified, easy-to-manage gateway that reduces the cost and complexity of Web security. Forefront UAG, on the other hand, delivers secure, anywhere access to messaging, collaboration, and other resources, increasing productivity while maintaining compliance with policy. Integrating a deep understanding of the applications published, the state of health of the devices being used to gain access, and the user's identity—UAG enforces granular access controls and policies to deliver comprehensive remote access, ensure security, and reduce management costs and complexity. |
Direct Access and Unified Access Gateway | |
DirectAccess provides direct connectivity for remote managed devices into your corporate network without the need for archaic and expensive-to-manage VPNs. It provides “Always On” functionality for the end-user regardless of their location and gives access as if the user was locally attached to the corporate network. Combined with NAP (Network Access Protection), it gives organizations the ability to control remote devices even before the user attempts to sign on to the network. Portcullis Systems Unified Access Gateway provides critical tools required to implement DirectAccess. The Portcullis Systems Unified Access Gateway extends the capability of DirectAccess to a greater array of endpoint devices. While DirectAccess supports Windows 7 Enterprise clients connecting to Windows Server 2008 R2-base resources over an IPv6 network, UAG combines with Direct Access to extend access to all end-user devices, managed and unmanaged, both Windows and non-Windows, and connects those to any of your internal information resources.
| |
Portcullis Systems UAG & DirectAccess Server - Better Together
|
| . |