News

SSH NAT Traversal Toolkit Will Enable Strong Security for Wireline and Wireless Networks

SSH Communications Security (SSH), a leading developer of Internet security technologies, today announced SSH NAT (Network Address Translation) Traversal, a revolutionary new toolkit that gives OEMs the power to create secure VPN (Virtual Private Network) sessions across any product or application that needs to traverse a NAT device. Uses for NAT Traversal in today's network environments include firewalls, secured routers and VPN systems, secure desktop and server operating systems, embedded security systems, electronic banking, and e-commerce applications. SSH NAT Traversal significantly shortens development time and expands the potential market for VPN solutions, providing fast, easy implementation and compatibility with virtually any off-the-shelf VPN product based on SSH's IPSEC Express technology.

NAT is a method by which IP (Internet Protocol) addresses are mapped from one network "realm" to another, in an attempt to provide transparent routing to hosts. NAT is used in network devices to connect a network using private, unregistered addresses to an external network - like the Internet - that uses globally unique registered addresses. Traditionally, NAT devices have prevented the use of end-to-end IPSec VPNs, because most VPN solutions cannot manage the address translation. SSH NAT Traversal is the first product of its kind to solve this problem by providing unparalleled functionality for secure remote access, strong client authentication with X.509 digital certificates, and end-to-end security within and beyond the enterprise.

According to George Adams, president and CEO of SSH, Inc., "SSH NAT Traversal solution opens a whole new world of VPN-enabled devices to the security benefits of the IPSec protocols. Until now, the conflict between IPSec and NAT technologies has prevented true end-to-end security over the Internet. While companies have employed NAT devices to tackle the increases in IP address access costs, as well as the growing number of Internet users and new access devices, administrators have worried over the security vulnerabilities exposed when not using IPSec."

"SSH NAT Traversal Toolkit solves these daunting problems by enabling IPSec through NAT devices," continued Adams. "The new toolkit will enable our VPN OEM partners to quickly and easily build VPNs and network security systems that address a new range of users and access devices - both wireline today and wireless in the near future."

Key Benefits:

• Expands Market Opportunities for VPN Suppliers - With SSH NAT Traversal, OEMs can develop VPN solutions that provide end-to-end IPSec security, even through NAT devices.
  
• Eases User acceptance for increased use of VPNs - With SSH NAT Traversal, OEMs can develop VPN solutions that traverse NAT devices without requiring enterprise IT departments or service providers to rewrite applications or make changes to other business-critical network components.
  
• Fast time-to Market - SSH NAT Traversal provides easy integration with SSH IPSEC Express toolkit, the world's leading toolkit for IPSec. Developers can now add the value of NAT Traversal to their products quickly and easily.
  
• Optimal security - SSH NAT Traversal establishes secure connections using the IKE (Internet Key Exchange) protocol, as well as offers support for strong user authentication with all major digital certificate solutions.
  
• Multi-vendor interoperability - Customers of both integrators and OEMs have the freedom to choose the ISPs (Internet Service Providers) that best meet their outsourcing needs, with the assurance that SSH NAT Traversal will integrate seamlessly with the most commonly used security products.
  
• Easy to use and implement -SSH NAT Traversal establishes secure connections automatically, requiring no user intervention or education outside their current VPN solution.
  

Uses for NAT Traversal in today's network environments include firewalls, secured routers and VPN systems, secure desktop and server operating systems, embedded security systems, electronic banking and e-commerce applications.

© 2002 SSH Communications Security Corp. All rights reserved. ssh® is a registered trademark of SSH Communications Security Corp in the United States and in certain other jurisdictions. All other names and marks are property of their respective owners.