September 27, 2007
SSH Tectia Newsletter Vol. 35 - Is It Worth Securing Sensitive Data?
SSH Communications Security >> http://www.ssh.com
======================================================
[ SSH TECTIA NEWSLETTER (VOLUME 35) ] < 27 September 2007 >
======================================================
* Special Topic - Is It Worth Securing Sensitive Data?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
During the past year, we have been witnesses to the loss of sensitive data by several organizations, including well-known financial organizations and retailers. Some of these losses have been due to manual errors, like lost or mislaid data tapes, but industry analysts are now increasingly listing cyber-crime as the most common reason for these security breaches.
While many organizations have worked diligently on securing their networks and data, it appears that others have decided that the most economically viable approach is to act only after an actual breach has taken place.
The global IT consulting and research company Gartner discussed the alternative approaches in a recently published report and concluded that "securing sensitive data is far less expensive than responding to a breach".
The credit card industry has also noted that lack of security can be costly, and as a result hereof they have launched the Payment Card Industry (PCI) Data Security Standard to help safeguard data and prevent fraud. You can learn more about the PCI standards and how SSH Communications Security can help you secure your data by downloading our PCI Whitepaper at: http://www.ssh.com/resources/pci-download.mpl
* Product News (1) - Announcing SSH Tectia Server 5.5 for IBM z/OS!
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
We will be releasing the new version of SSH Tectia Server for IBM z/OS during early October! This new version introduces advanced transparent tunneling features that drastically reduce the cost and time needed to secure FTP file transfers and other data in transit within and between Windows, Unix, Linux, and IBM mainframe environments.
SSH Tectia Server 5.5 for IBM z/OS is an advanced, cost-effective file transfer solution for the IBM mainframe environment supporting key mainframe features such as direct Multiple Virtual Storage (MVS) file system access, hardware encryption acceleration, SMF logging, automatic character-set conversion, strong authentication through RACF, ACF, and Top Secret, X.509 certificate support, as well as fast data streaming.
One of the key design goals for the new version was to lower the overall cost of the FTP replacement project. With SSH Tectia, the reduced remediation efforts yield significant cost advantages, as the setup and configuration time is typically measured in hours rather than days or weeks required by other solutions. The new features can be activated system-wide or restricted to specific FTP jobs or user ID's. This makes the product the ideal solution for secure file transfers in complex, heterogeneous environments with Windows, Unix, and Linux platforms, as well as IBM mainframes.
Please check www.ssh.com during next week for more information!
Customers with a current maintenance and support agreement will be able to download this new version from the SSH Customer Download Center at https://downloads.ssh.com.
* Product News (2) - SSH Tectia Manager 2.4.1 Has Been Released!
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
SSH Tectia Manager 2.4.1 was released on September 14. Customers with a current maintenance and support agreement can download it from the SSH Customer Download Center at https://downloads.ssh.com.
SSH Tectia Manager is a security management platform designed for centralized management of SSH Tectia software in large environments. SSH Tectia Manager provides:
For further information, please refer to the release notes at
http://www.ssh.com/support/documentation/release_notes/
* Tips & Tricks: How Does Checkpoint/Restart Feature Work?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Do you need to transfer large files over an unreliable network link? Then here is a feature for you: Checkpoint/restart is a client-side feature that enables restarting a file transfer from the latest checkpoint instead of starting from the beginning. The feature is included in the SSH Tectia Client with EFT Expansion pack, and it works against servers that have the EFT or Tunneling Expansion Pack, as well as against SSH Tectia Server for IBM z/OS.
The feature works so that the client writes checkpoints to a local file. The interval of the checkpoints can be configured both in seconds and in bytes. Default is 10 seconds and 10 MB. The checkpoints are enabled by setting the checksum option to 'checkpoint'. For example, the following would write checkpoints every 30 seconds and every 10 MB (default value):
$ scpg3 --checksum=checkpoint --checkpoint=s30 largefile user@server:/dest/directory/
The following sftpg3 command would write checkpoints every 60 seconds and every 100 MB:
sftp> get --checksum=checkpoint --checkpoint=s60 --checkpoint=b100000000 largefile
One thing to remember when using checkpoints is that the file contents are not inspected when resuming the file transfer. The checkpoint keeps track of the location in the file, it does not notice if the file is changed after the transfer was interrupted. If there are other users or processes that might have modified the file between the file transfer interruption and restart, you should not use checkpoints. In that case, checksum can be set to md5 or sha1 to find a safe point where to resume the file transfer, but this consumes considerably more processing power than the checkpoints. If you have a process that is polling for the file to do further processing with it, you might want to use the 'prefix' option that uses a temporary filename with a prefix and removes the prefix part only when the transfer is ready.
* The Most Popular Documents Available at SSH Resource Center
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
** White Paper: Protecting Card Holder Data in Transit
http://www.ssh.com/resources/pci-download.mpl
** eBook: Shortcut Guide to Securing Automated File Transfers
http://www.ssh.com/resources/shortcut_guide.html
** White Paper: Selecting Secure FTP and Telnet Replacement - Minimizing TCO
http://www.ssh.com/campaign/ftpwp/newsletter.html
* Trade Shows & Events
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Come and see us to hear the latest news at the following upcoming events: :
* SSH Headlines
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
September 7, 2007
Another Leading US Retailer Places Major Order for SSH Tectia
http://www.ssh.com/company/news/article/855/
August 15, 2007
Wal-Mart Selects SSH Tectia Solution to Secure Data in Transit
http://www.ssh.com/company/news/article/845/
======================================================
# SSH Tectia Newsletter Mailing List #
------------------------------------------------------
This e-mail has been sent to evaluators of SSH products and others who have been in contact with us in the past and who have agreed that we send you the SSH Tectia Newsletter.
To unsubscribe from the mailing list, send a blank e-mail to from the e-mail account you wish to unsubscribe, or visit http://www.ssh.com/company/newsroom/unsubscribe.mpl.
# SSH Security & Release Alert Mailing List #
-------------------------------------------------------
If you would like to receive security alerts and notices about new version releases of SSH products, please subscribe to SSH Security & Release Alert mailing list at http://www.ssh.com/company/newsroom/subscribe.mpl.
=======================================================
Sincerely,
SSH Communications Security >> http://www.ssh.com
======================================================
[ SSH TECTIA NEWSLETTER (VOLUME 35) ] < 27 September 2007 >
======================================================
- Special Topic - Is It Worth Securing Sensitive Data?
- Product News (1) - Announcing SSH Tectia Server 5.5 for IBM z/OS!
- Product News (2) - SSH Tectia Manager 2.4.1 Has Been Released!
- Tips & Tricks - How Does Checkpoint/Restart Feature Work?
- The Most Popular Documents at SSH Resource Center
- Webinar Information
- Trade Shows & Events
- SSH Headlines
- Subscribing & Unsubscribing to Mailing Lists
* Special Topic - Is It Worth Securing Sensitive Data?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
During the past year, we have been witnesses to the loss of sensitive data by several organizations, including well-known financial organizations and retailers. Some of these losses have been due to manual errors, like lost or mislaid data tapes, but industry analysts are now increasingly listing cyber-crime as the most common reason for these security breaches.
While many organizations have worked diligently on securing their networks and data, it appears that others have decided that the most economically viable approach is to act only after an actual breach has taken place.
The global IT consulting and research company Gartner discussed the alternative approaches in a recently published report and concluded that "securing sensitive data is far less expensive than responding to a breach".
The credit card industry has also noted that lack of security can be costly, and as a result hereof they have launched the Payment Card Industry (PCI) Data Security Standard to help safeguard data and prevent fraud. You can learn more about the PCI standards and how SSH Communications Security can help you secure your data by downloading our PCI Whitepaper at: http://www.ssh.com/resources/pci-download.mpl
* Product News (1) - Announcing SSH Tectia Server 5.5 for IBM z/OS!
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
We will be releasing the new version of SSH Tectia Server for IBM z/OS during early October! This new version introduces advanced transparent tunneling features that drastically reduce the cost and time needed to secure FTP file transfers and other data in transit within and between Windows, Unix, Linux, and IBM mainframe environments.
SSH Tectia Server 5.5 for IBM z/OS is an advanced, cost-effective file transfer solution for the IBM mainframe environment supporting key mainframe features such as direct Multiple Virtual Storage (MVS) file system access, hardware encryption acceleration, SMF logging, automatic character-set conversion, strong authentication through RACF, ACF, and Top Secret, X.509 certificate support, as well as fast data streaming.
One of the key design goals for the new version was to lower the overall cost of the FTP replacement project. With SSH Tectia, the reduced remediation efforts yield significant cost advantages, as the setup and configuration time is typically measured in hours rather than days or weeks required by other solutions. The new features can be activated system-wide or restricted to specific FTP jobs or user ID's. This makes the product the ideal solution for secure file transfers in complex, heterogeneous environments with Windows, Unix, and Linux platforms, as well as IBM mainframes.
Please check www.ssh.com during next week for more information!
Customers with a current maintenance and support agreement will be able to download this new version from the SSH Customer Download Center at https://downloads.ssh.com.
* Product News (2) - SSH Tectia Manager 2.4.1 Has Been Released!
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
SSH Tectia Manager 2.4.1 was released on September 14. Customers with a current maintenance and support agreement can download it from the SSH Customer Download Center at https://downloads.ssh.com.
SSH Tectia Manager is a security management platform designed for centralized management of SSH Tectia software in large environments. SSH Tectia Manager provides:
- Efficient software deployment and upgrades throughout the environment
- Centralized enforcement of security policies
- For auditing purposes, detailed monitoring, logging, reporting, and
statistics - Host key management
For further information, please refer to the release notes at
http://www.ssh.com/support/documentation/release_notes/
* Tips & Tricks: How Does Checkpoint/Restart Feature Work?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Do you need to transfer large files over an unreliable network link? Then here is a feature for you: Checkpoint/restart is a client-side feature that enables restarting a file transfer from the latest checkpoint instead of starting from the beginning. The feature is included in the SSH Tectia Client with EFT Expansion pack, and it works against servers that have the EFT or Tunneling Expansion Pack, as well as against SSH Tectia Server for IBM z/OS.
The feature works so that the client writes checkpoints to a local file. The interval of the checkpoints can be configured both in seconds and in bytes. Default is 10 seconds and 10 MB. The checkpoints are enabled by setting the checksum option to 'checkpoint'. For example, the following would write checkpoints every 30 seconds and every 10 MB (default value):
$ scpg3 --checksum=checkpoint --checkpoint=s30 largefile user@server:/dest/directory/
The following sftpg3 command would write checkpoints every 60 seconds and every 100 MB:
sftp> get --checksum=checkpoint --checkpoint=s60 --checkpoint=b100000000 largefile
One thing to remember when using checkpoints is that the file contents are not inspected when resuming the file transfer. The checkpoint keeps track of the location in the file, it does not notice if the file is changed after the transfer was interrupted. If there are other users or processes that might have modified the file between the file transfer interruption and restart, you should not use checkpoints. In that case, checksum can be set to md5 or sha1 to find a safe point where to resume the file transfer, but this consumes considerably more processing power than the checkpoints. If you have a process that is polling for the file to do further processing with it, you might want to use the 'prefix' option that uses a temporary filename with a prefix and removes the prefix part only when the transfer is ready.
* The Most Popular Documents Available at SSH Resource Center
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
** White Paper: Protecting Card Holder Data in Transit
http://www.ssh.com/resources/pci-download.mpl
** eBook: Shortcut Guide to Securing Automated File Transfers
http://www.ssh.com/resources/shortcut_guide.html
** White Paper: Selecting Secure FTP and Telnet Replacement - Minimizing TCO
http://www.ssh.com/campaign/ftpwp/newsletter.html
* Trade Shows & Events
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Come and see us to hear the latest news at the following upcoming events: :
- Kenilworth, United Kingdom: GSE UK Conference, October 30 -31
- Tokyo, Japan: Nikkei Security Solution, October 24 - 26
* SSH Headlines
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
September 7, 2007
Another Leading US Retailer Places Major Order for SSH Tectia
http://www.ssh.com/company/news/article/855/
August 15, 2007
Wal-Mart Selects SSH Tectia Solution to Secure Data in Transit
http://www.ssh.com/company/news/article/845/
======================================================
# SSH Tectia Newsletter Mailing List #
------------------------------------------------------
This e-mail has been sent to evaluators of SSH products and others who have been in contact with us in the past and who have agreed that we send you the SSH Tectia Newsletter.
To unsubscribe from the mailing list, send a blank e-mail to from the e-mail account you wish to unsubscribe, or visit http://www.ssh.com/company/newsroom/unsubscribe.mpl.
# SSH Security & Release Alert Mailing List #
-------------------------------------------------------
If you would like to receive security alerts and notices about new version releases of SSH products, please subscribe to SSH Security & Release Alert mailing list at http://www.ssh.com/company/newsroom/subscribe.mpl.
=======================================================
Sincerely,
SSH Communications Security >> http://www.ssh.com