Benefits of Reflection for the Web 2008

Standards-based security for access to business applications and file transfers

• Reflection for the Web supports the IETF standard TLS 1.0, the de facto standard for secure access over the Internet.
• Reflection for the Web interoperates with other SSL/TLS solutions.
• Reflection for the Web transparently provides a secure wrapper for FTP file transfers and TN3270, TN5250, VT-Telnet, NS/VT-Telnet, INT1, and TCPA applications.

Architectural choices for encrypting host communications

• With the security proxy in Reflection for the Web, you can offload SSL/TLS processing from the host and save valuable host cycles.
• If you want end-to-end encryption, you can either run the proxy server on the host or you can tunnel SSL from the client to the proxy server to the host.

Third-party validation of product quality and performance

• Reflection for the Web is the only secure remote host access solution to have FIPS 140-2, Level 2 validation, a measure of the quality of its cryptography.

Integration of legacy hosts into the modern security environment

• Reflection for the Web supports a variety of authentication mechanisms, including PKI and smart cards; as you tighten your authentication requirements, Reflection for the Web adapts.
• Reflection for the Web is firewall-friendly, requiring only one port (port 443) to be opened for secure Telnet and FTP sessions.
• Reflection for the Web integrates legacy applications with newer identity management systems, such as Active Directory and portals.

Centralized control of access to legacy applications

• With the Secure Token Authorization capability in Reflection for the Web, you can add a layer of authentication and authorization in front of the host and centrally control that layer through LDAP (Active Directory).
• With Reflection for the Web, you can interface with IBM RACF (Resource Access Control Facility) through your LDAP infrastructure.
• With centralized control, you can enforce stronger password policies. No one gets a connection to the host unless they’ve gone through the Reflection for the Web protection point. This precaution forces authentication to the network before the user authenticates to the host.
• Reflection for the Web provides this extra layer of authentication and authorization without the hassle of distributed keys and certificates; the result is strong authentication simplified.

Simplified sign-on to host applications

• Reflection for the Web simplifies users’ lives by reducing the number of times they have to enter a password. For example, it includes a credential store that can be used for multi-host sign-on, certificate support through the IBM Express Logon Feature, and iSeries Kerberos support.

Vital security for regulatory compliance

• Reflection for the Web protects passwords and sensitive data that would be in the clear with nonsecure tools like Telnet and FTP.
• Reflection for the Web provides audit logs for Sarbanes-Oxley, Gramm Leach Bliley, HIPAA, FDA 21 CFR Part 11, Basel II, PCI, and the European Data Protection Directive.

Top-rated customer support

• Attachmate consistently scores above the industry average in independent surveys.
• The average tenure of an Attachmate support representative is nine years.
• Security specialists are available 24/7, if needed.