News

Next-generation Software Uses Multi-layer Security Policies and Centralized Policy Management to Secure Internet Communications

SSH Communications Security (HEX:SSH1V), a world-leading developer of Internet security technologies, today announced SSH® SentinelTM 1.1, a new release of its groundbreaking VPN (Virtual Private Network) client software that provides easy and effective IPSec (Internet Protocol Security) to network communications. SSH Sentinel 1.1 increases ease of management with a multi-layer security policy and enhanced centralized policy management features.

According to Tatu Ylönen, founder, chairman and CTO of SSH, "SSH Sentinel helps to eliminate the high risk associated with Internet access, especially for employees that work from the road or home. Now, with an intuitive management system and flexible configuration, SSH Sentinel is made available to end-users and OEMs for protecting confidential information, regardless of the network environment".

SSH Sentinel 1.1 adds several new advanced features designed to increase functionality and ease of management across network environments:

• Multi-layer policies - Users can now define multiple sets of security policies, such as one set for local office use and one set for remote access for enhanced flexibility and ease of use.
  
• Enhanced centralized policy management - Any trusted workstation or server using SSH Sentinel may share predefined security policies with groups of clients.
  
• Rijndael encryption algorithm - Selected as the AES (Advanced Encryption Standard) by NIST (National Institute of Standards and Technology) in the United States, the Rijndael algorithm provides fast and secure encryption for IP communications.
  
• Firewall functionality - The advanced packet filtering capabilities of SSH Sentinel enable users to easily set up personal firewalls to protect their workstations against attacks. Centralized policy management allows organizations to build and centrally manage distributed firewalls.
  
• PKIX CMP support - In addition to the SCEP (Simple Certificate Enrollment Protocol), X.509 certificates can now be enrolled from a CA (Certificate Authority) using the PKIX CMP (Public Key Infrastructure X.509/Certificate Management Protocol).
  
• NAT TraversalTM support - A breakthrough technology developed by SSH, NAT Traversal enables IPSec to operate in environments where network equipment performs NAT operations on IP packets in firewalls, routers and VPN systems -ensuring end-to-end security.
  

About SSH Sentinel

SSH Sentinel incorporates a range of advanced features and technologies into a solution, which is intuitive both to the end user and administrator. SSH Sentinel offers strong encryption and certificate or PSK- (Pre-Shared Key) based authentication, local LDAP (Lightweight Directory Access Protocol) capability for retrieving certificates, CRLs (Certificate Revocation Lists) with online certificate enrollment support and Centralized Policy Management. In addition, SSH Sentinel is capable of establishing a secured host-to-host connection with strong authentication independent of a complex PKI. SSH Sentinel takes full advantage of certificate-based authentication and PKI with full support for all IETF (Internet Engineering Task Force) IPSec standards. SSH Sentinel is an interoperable solution, ideal for uses such as remote access, file transfer, e-mail, Web browsing, messaging, and IP telephony in VPNs.

Pricing and Availability

SSH is now running a public beta program for Sentinel 1.1. It may be downloaded from www.ipsec.com. For pricing and licensing options, contact SSH sales at www.ssh.com or in Helsinki Finland, at +358 9 8565 9870, Palo Alto, Calif., USA, at +1 650 251 2700 or Tokyo, Japan at +81 3 3459 6831.

© 2002 SSH Communications Security Corp. All rights reserved. ssh® is a registered trademark of SSH Communications Security Corp in the United States and in certain other jurisdictions. All other names and marks are property of their respective owners.