Blog

OpenText SOCKS Client - Now Supports Blue Coat Authentication

Posted by laurenb @ Thu, 26 May 2011 15:11:23 -0400
Posted in Authentication, Open Text

InChannel March 2009

Posted by sarahk @ Fri, 20 Mar 2009 11:43:49 -0400

Welcome to InChannel for March 2009

Please take  a look at our new layout. You  may notice variations of this layout over the coming months until we find the just the right form and feel but the information is always guaranteed to be insightful and valuable.

Thanks for reading!
-Interwork Team

Posted in Asset Management, Authentication, Call Recording, Collaboration, Connectivity, Data Loss Prevention, Data Security, Desktop Management, Email, End Point, Firewall, IP PBX, IP Phones, Instant Messaging, Integration, Internet Content, PoE Switches, Reporting, Switches & Gateways, Systems Management, Terminal Emulation, Unified Messaging, VoIP, Voice Over IP, Web Analytics

InChannel February 2009

Posted by sarahk @ Fri, 06 Feb 2009 10:19:35 -0500

Welcome to InChannel: find out about new products, upcoming events and great promotions!

Sponsored by: Trend Micro featuring SMART PROTECTION NETWORK

In this edition:

  • 5 ways to attract new customers and sell more to existing customers
  • Bandwidth and identity-bases management available with SMB UTM appliance from Cyberoam
  • Interwork founding sponsor of CompTIA Security Trustmark Accreditation
  • Trend Micro Smart Protection Network QLM

5 WAYS TO ATTRACT NEW CUSTOMERS AND SELL MORE TO EXISTING CLIENTS

In March, Interwork and select vendor partners will be participating in an “online seminar series” discussing product updates and unique opportunities for solution providers to grow their business in 2009. Presentations are business-focused and not technical, covering proven, ready-to-use messaging for your sales team. Topics include: Why Leading with Data Loss Prevention Wins More Business, Sell More Encryption To Existing Customers, Increase Revenue By Using a Multi-Layered Security Approach, How to Build A Successful Voice Practice.

To learn more or register for one of our online seminars, please click here

BANDWIDTH AND IDENTITY-BASED MANAGEMENT AVAILABLE WITH SMB UTM APPLIANCE FROM CYBEROAM

Interwork is currently recruiting new partners for Cyberoam, a unique UTM appliance for small and medium businesses. Interwork selected to partner with Cyberoam because of its truly original features, high margins and 100% channel-friendly partner program. Receiving 5 Stars from SC Magazine for 3 years in a row, Cyberoam offers bandwidth management, load-balancing and identity-based (NAC) control at extremely competitive prices.

Check out Cyberoam’s recruitment promotions

INTERWORK FOUNDING SPONSOR OF COMPTIA SECURITY TRUSTMARK ACCREDITATION


The CompTIA Security Trustmark, a vendor-neutral business-level accreditation, identifies solution providers that follow security best practices. The main objective of the accreditation is to create and continually update the baseline standards of security practices around service and support competencies for solution providers. This accreditation is an excellent opportunity to demonstrate the value of your security knowledge and best practices, further setting your company apart from competitors.
For more information, please contact your Interwork Business Development Manager or visit their website.

Register for the webinar on Feb 25 at 2 pm EST here

Trend Micro featuring SMART PROTECTION NETWORK


The Trend Micro Smart Protection Network is a next generation cloud-client content security infrastructure designed to protect customers from Web threats. By combining internet-based-or “in-the-cloud”-technologies with smaller, lighter-weight clients, you will have immediate access to the latest protection wherever and however you connect. It’s security made smarter.

NEW QLM for Trend Micro Partners - Trend Micro is pleased to announce the availability of the Smart Protection Network sales training Quick Learning Module. Learn more about The Smart Protection Network, challenges in today’s threat landscape, key components of the Smart Protection Network, how it work and a competitive overview by reviewing the Quick Learning Module.

Learn more about Smart Protection

Sincerely,
The Team at Interwork Technologies
More than just a part and a price.

Posted in Asset Management, Authentication, Call Recording, Data Loss Prevention, Data Security, Desktop Management, IP PBX, IP Phones, PoE Switches, Reporting, Switches & Gateways, Unified Messaging, VoIP, Web Analytics

Q&A: How to eliminate the security risks associated with Telnet & FTP

Posted by sarahk @ Tue, 18 Nov 2008 12:40:27 -0500

Xavier Chaillot, Director of Marketing with Hummingbird - The Open Text Connectivity Solutions Group, discusses the dangers faced by companies using FTP and Telnet and how Connectivity Secure Server addresses these issues.

Q: What are the major security concerns for companies using FTP and Telnet?

A: The main problem with FTP or Telnet is that they are fundamentally insecure protocols. FTP dates back from the 60’s when it was commissioned by DARPA and Telnet was created a bit earlier. That was a time when network security was not as much of a concern as it is today. Both protocols were designed with simplicity, versatility and flexibility in mind, but definitely not security. FTP is primarily used for transferring files between homogeneous or heterogeneous environments while Telnet is the de facto protocol for accessing text-based legacy applications or remotely managing servers and network equipment.
Both FTP and Telnet have many security issues, but the most critical are:
  • Clear-text transmission: all communications are done in clear text, including usernames and passwords
  • Weak client authentication: both FTP and Telnet authenticate users through usernames and passwords, which, time and time again, have proven to be unreliable authentication methods. There is no support for more advanced authentication methods such as public/private key, Kerberos or digital certificates
  • No server authentication: this means that users have no way to be sure that the host they are communicating with really is the FTP server and not an attacker impersonating the server
  • Absence of data integrity: problem here is that, assuming the same scenario as above, anyone could alter and corrupt the data being transmitted between the server and the client without being noticed
There are more problems related to FTP and Telnet such as the many exploits available on the Internet or the fact that they don’t play nice with firewalls. Ultimately, these technical problems become critical business challenges which amount to two things: cost of a security breach and lack of compliance with industry standards.
According to a 2007 Forrester study, security breaches cost anywhere between $90 to $305 per record breached. As an example, the breach of a simple text file containing 5,000 names, addresses and social security numbers or credit card numbers would end up costing between $450,000 and $1,525,000. This is the kind of money that businesses can not afford to pay these days, especially when you realize that adequately protecting yourself against simple breaches like FTP or Telnet is going to cost you between 1% and 5% of that amount.
At the end of the day, it’s not about the technicalities of security, it’s about how much you are putting your business at risk by not taking care of basic things such as Telnet or FTP and what price you’ll pay for that.

Q: Do standard security platforms such as Trend Micro, Symantec provide security for FTP and Telnet protocols?

A: Antiviruses are not designed to protect network protocols such as FTP or Telnet. Antiviruses do what they’ve always done best: detect and eradicate rogue malware code running on a machine. The kinds of problems that arise with Telnet or FTP are not of that nature. These protocols were never designed to handle the most basic security requirements such as data encryption, strong authentication and data integrity. This leaves them with multiple angles of attack which are not covered by antivirus such as those named here.

Q: Do industry security standards such as Sarbanes-Oxley and HIPPA have compliance requirements for FTP and Telnet?

A: Absolutely. At varying degrees, all of these regulations and standards have impact on organizations running FTP or Telnet. Here are a few examples:

  • PCI-DSS: the payment card industry data security standard regulates how credit card information are being processed, stored and transmitted. The lack of encryption, weak authentication and absence of data integrity make FTP and Telnet completely unsuitable to support the requirements of that standard.
  • GLBA: the Gramm Leach Bliley Act of 1999 requires organizations in the financial industry to adequately protect their customers’ private information, something that not realistic with Telnet or FTP.
  • SOX: the Sarbanes Oaxley act requires the implementation of solid internal controls to guarantee that financial reports properly reflect the economic reality of any publicly traded company. Auditors reviewing IT systems will most likely shut down any FTP or Telnet activity because of their lack of security and viability in the context of these controls.
  • HIPPAA is a healthcare industry regulation which, among other things, requires healthcare actors to encrypt and protect their patients’ information. As explained above, this is something that’s not conceivable with Telnet or FTP.
Q: How does the Connectivity Secure Server help companies protect their FTP site and assist in any regulatory compliance requirements?

A: Connectivity Secure Server is a high-performance network security system that allows organizations to encrypt, authenticate and guarantee the integrity of data being transmitted over a TCP/IP network. To put it in a nutshell, Connectivity Secure Server coupled with a secure shell client such as Connectivity SecureTerm will create secure encrypted tunnels between a user’s desktop and a server. Those tunnels can be used to pass any TCP/IP network traffic.
Connectivity Secure Server is the ideal solution for companies looking to:
  • Replace their Windows FTP Server
  • Remotely manage Windows Servers
  • Secure internal and external network traffic
  • Encrypt 3rd party application traffic

The interesting thing about replacing Telnet and FTP with Connectivity Secure Server and Connectivity Secure Term is that organizations will keep the same flexibility and versatility that they are used to with traditional Telnet and FTP, but in a much more secure environment.
The other thing is that this solution is not limited to Telnet or FTP but can be used to encrypt any TCP/IP communication from 3rd party application. Remember these legacy apps that are still around but you don’t want to touch because the people who made them are not around anymore? A solution such as Secure Server and SecureTerm can definitely help increase your level of security with minimal if no disruption to your application stability or your business processes. 

Q: Can a company determine if their FTP site/server is at risk or if there has been a breach of security?

A: Network monitoring, breach discovery and intrusion detection systems are a whole world in itself. There’s no doubt that any company equipped with these kind of tools has a better chance of finding out whether something bad is happening on their network but the number of false positives sometimes returned by these systems make them less than perfect more often than not. According to a study led by Verizon in 2008, 75% of breaches were not discovered by the victims but by someone else. That number alone speaks volume about the chance that a company has of finding this out by itself. There’s no miracle: be proactive and cover the basics.

Q: How do companies find more information about the Connectivity Secure Server?

A: Connectivity Secure Server is available today from Softchoice and its partners. Companies who want more information can go to www.hummingbird.com/secureserver where we have datasheets, whitepapers and trial versions available. The trial version is a time-limited full functioning version of the product. Don’t forget to also check our client-side solution, Connectivity SecureTerm and our security add-on for Exceed, Connectivity Secure Shell.
Posted in Authentication, Connectivity, Data Security, Internet Content

ScriptLogic wins Triple Crown in 2008 Redmond’s Readers’ Choice Awards

Posted by sarahk @ Mon, 10 Nov 2008 09:07:48 -0500

 Congratulations ScriptLogic!

Not only did you win the coveted Triple Crown award, you won seven other First Place awards and one Second Place award (see the details below.) Eight awards in a single year, that is quite an achievement! We are proud to be partnered with a proven industry leader.

  1. Triple Crown in Best Network Automation and Batch Processing Product for Desktop Authority (4th consecutive year)
  2. 1st place in Best Network Management Product for Desktop Authority
  3. 1st place (ISV) in Best Software Distribution Product for Desktop Authority
  4. 1st place in Best Remote Troubleshooting Solution for Desktop Authority-Remote Management Gateway
  5. 1st place (ISV) in Best Application Management Product for MSI Studio
  6. 1st place in Best Compliance Tool for File System Auditor
  7. 1st place (ISV) in Best Group Policy Manager for Active Administrator
  8. 1st place in Best Security Auditing Product for Enterprise Security Reporter
  9. 2nd place in Best SQL Tool for Security Explorer for SQL Server

Read the full article: Redmondmag.com

Visit the ScriptLogic website

Posted in Authentication, Data Loss Prevention, Data Security, Reporting

Search

Recent Posts

Categories

Archives



© 2012 Interwork Technologies Inc., All Rights Reserved. Contact: 800.461.8649, Tel: 613.238.8835
All company and product names are trademarks, or registered trademarks, of their respective owners.