Novell delivers the right combination for enterprise security

Novell has unveiled the next-generation of Novell Modular Authentication Services (NMAS), advanced Net security software for the enterprise. With NMAS 2.0, organisations can protect access to network resources by implementing authentication solutions based on any combination of biometric, smart card, token or digital certificate.

Novell is helping to eliminate both internal and external security risks through NMAS and other Net services software by allowing customers to define a consistent, company-wide security policy that integrates the identity management of heterogeneous operating systems and applications to give users strong authentication with a single sign-on experience.

Novell e-business solutions manager James Thomas states, "As the walls between companies and the Net come down, creating a new one Net environment, organisations need increasingly strong security measures to protect sensitive information and business assets that reside on corporate networks. Daily headlines about viruses and security break ins by major corporations have put security front and centre in the list of corporate technology requirements."

According to IDC, the advanced authentication market, which includes biometrics, smart cards and tokens, is expected to reach $2.9 billion (about R24 billion) by 2004. Advanced authentication and Graded Authentication, delivered through NMAS, significantly reduces the risk of information compromise.

NMAS is an extensible management framework that simplifies network administration and reduces costs of managing security methods across the enterprise. NMAS runs on both NetWare and Windows platforms, and leverages NDS eDirectory, enabling customers to set granular access policies to certain areas on a network. For instance, companies can combine something you know, such as a password, with something you are, such as fingerprint, with something you have, such as token.

"As a solutions provider to businesses of all sizes around the globe, we see a tremendous business opportunity with NMAS because it is necessary to provide several authentication methods in the solutions we offer to our customers needing stronger security features for their networks. More and more, customers are demanding appropriate, reliable, and rock-solid security because the nature of business has changed to a point where it is necessary to provide highly sensitive information in an electronic environment. Leveraging Novell`s Directory solutions and NMAS, which we use in conjunction with SAFLINK biometric products, facilitates the implementation of advanced network security for any size enterprise," said Eliot Lanes, president of Viable Solutions, a solutions provider of world-class service, expertise and products to businesses of all sizes around the globe.

"The demand for products that deliver stronger forms of authentication and authorisation continues to increase as organisations expand trusted relationships with customers, partners, suppliers and channels in the Net economy," said Novell e-business solutions manager James Thomas. "We`ve significantly enhanced the strong security features in this next release of NMAS in order to solve the number one technology concern of our customers: secure access to network resources. Our Net services software combined with products from our partners allows Novell to deliver the right combination for customers` enterprise security needs."

NMAS enables PKI by giving organisations the ability to use X.509 digital certificates from vendors such as Entrust, Verisign, RSA, and Baltimore Technologies for authentication to corporate resources. Additionally, because so many applications trust eDirectory for their digital certificate authentication, NMAS now delivers a built-in service that validates user certificates, providing more enhanced security.

NMAS combines strong password policy management with other forms of authentication to deliver the ultimate way of proving user identity. Through NMAS, administrators can enforce strong passwords throughout the organisation by easily configuring system-wide password policies for password length, characters, one-time password, and excluded word list among others.