Home  //  > Overview  //  > Two-Factor Authentication
Two-Factor Authentication

Two-factor authentication can provide a powerful additional layer of security for your networks by using two different methods to verify the user's identity: What you know (user name and password) and what you have (token, software application or passcode). Many organizations are required through either internal risk management mandates or external compliance requirements, such as PCI-DSS, SOX, HIPAA and many others, to implement two-factor authentication on their networks. Without effective two-factor authentication organizations needlessly expose themselves to an ever growing landscape of threats and may risk being out of compliance with both internal and external mandates.

Unauthorized access to sensitive business information is a major problem and, if a breach were to occur at your organization, the consequences can be devastating. Beyond the financial costs, legal liabilities and potential government actions that will impact your bottom line, your brand can be permanently damaged and your customers and business partners may not trust you to protect their information. In addition, many organizations are subject to strict compliance mandates that require them to take steps to prevent against unauthorized access to their networks or face harsh penalties.

In order to better protect against threats and meet compliance mandates, many organizations have implemented token based two-factor authentication systems on their networks. And, while many of these systems allow organizations to check off the compliance box, network security teams are often frustrated with the reliability, costs and complexity of maintaining and managing these systems. On top of that, network security teams typically need to establish dedicated help desks just to manage all of the new support issues created by these cumbersome products, not to mention a drop in productivity and increased frustration for end users.

For too long organizations have been forced to implement and maintain these outdated products in order to meet compliance requirements and, hopefully, reduce the likelihood of someone gaining unauthorized access to their networks. To make matters worse, questions have arisen about the underlying architecture of these traditional systems in cases where the “seed” record has been compromised. What organizations need is a next generation two-factor authentication solution that allows them to meet their risk management goals and compliance mandates without the problems associated with traditional two-factor authentication products.

Tectia MobileID is a next generation, tokenless two-factor authentication solution giving you the ability to truly protect your networks and meet or exceed internal and external compliance mandates. Tectia MobileID is a subscription based solution delivered via a virtual appliance and requires no additional hardware or infrastructure development in order to deploy. Because your Tectia MobileID subscription provides you with everything you need to deploy, you simply turn it on and you have global SMS coverage. No GSM modems or expensive third party communications contracts are required. If desired, you can allow for multiple authentication methods that extends Tectia MobileID to hardware tokens, software tokens, e-mail or even password lists.

Because Tectia MobileID is a a tokenless solution, you can reduce your total cost of ownership as compared to deployments that utilize traditional two-factor products - which require a significant hardware investment and high IT administrative overhead. Based on models evaluating the costs of implementing and maintaining traditional token based solutions vs. SSH MobileID, you could save over 70% with Tectia MobileID with as few as 250 users. Have hundreds or thousands of users? Our flexible subscription model - versus the traditional hardware + licensing + overhead model - allows you to save even more as your implementation grows.

 

demo

contact us