Click here for the presentation (2.5MB PowerPoint)
-
Upload
sandra4211 -
Category
Documents
-
view
512 -
download
2
Transcript of Click here for the presentation (2.5MB PowerPoint)
Ted McKendall
Product Manager, SecureTransport
February 23rd, 2006
Secure Internet CommunicationsSafe and Automated File Transfers over the Internet
2
Today’s Agenda
Tumbleweed – Company Summary Tumbleweed – Product Suite SecureTransport – Product Overview
3
» The leader in file transfer and email security
» 12 years protecting enterprise data and email
» 1,500+ enterprise customers
» Award-winning products
» Publicly traded (Nasdaq:TMWD)
» Market Leader in Managed File Transfer (MFT)
Tumbleweed Communications
At a glance:
Founded: 1993 Global HQ: Redwood City, CAEmployees: 275+
Solutions: Email Firewall Secure Email Secure File Transfer Identity Validation
Industries served: Financial Services Government Healthcare Retail Technology Enterprise
Standards Development IETF Open Group FSTC ITAA Anti-Phishing Working Group
4
Representative Customers
At a glance:
Customer snapshot:• 9 of top 10 US Banks• 7 of top 10 Brokerages• 6 of top 10 Euro banks• 3 of top 5 Canadian banks• 6 payment/clearing networks• Several central banks:• U.S. Federal Reserve• Bank of England• Over 100 of the Fortune 500• Over 100 financial svcs. firms• Over 100 health care orgs.• Over 100 law firms• 6 of the 10 largest pharmas
Recent European Success
Enterprise Spam Defense: Prudential Telewest Adldleshaw Goddard Manches Solicitors Fila
MailGate: RoSPA
Secure Email: WCC Ernst & Young Wolverhampton City Council Secure File Transfer: Airbus GM EU Clearstream AXA
5
Tumbleweed Product Suite
Corporate EmailServers
End Users
Back-end Applications
Files and Data
Identity Validation
InternetEDI & B2B Transactions
Spam & Virus Updates
Firewall
TumbleweedProductPortfolio
SecureTransport
Email Security Suite• MailGate Edge• MailGate Anti-Spam• Email Firewall• Secure Messenger
ValidationAuthority
6
Evolution of the File Transfer Market
Today’s ChallengesToday’s Challenges Evolution PathEvolution Path
Multiple, departmental file transfer point products
Multiple, departmental file transfer point products
Centralized, enterprise-wide file transfer infrastructure
Centralized, enterprise-wide file transfer infrastructure
Proprietary, single vendor file transfer solutions
Proprietary, single vendor file transfer solutions
Interoperable products based on open Internet standards
Interoperable products based on open Internet standards
Expensive private links, leased lines, VANs, modems…
Expensive private links, leased lines, VANs, modems…
Ubiquitous reach and low cost of the Internet
Ubiquitous reach and low cost of the Internet
Home-grown applications straining under the load
Home-grown applications straining under the load
Enterprise-class scalability and reliability
Enterprise-class scalability and reliability
Regulatory changes requiring secure communications (HIPAA, GLB, SOX)
Regulatory changes requiring secure communications (HIPAA, GLB, SOX)
Encrypted file transfer with signed receipts and auditability
Encrypted file transfer with signed receipts and auditability
7
Mission-Critical
• Top Ten Bank:
“File Transfer is the second most critical application in the bank – it’s more critical even than email.”
• As File Transfer becomes more critical it leads to increased exposure, and a whole new set of requirements
“FTP just ain’t good enough anymore.”
9
EnterpriseFirewall
Internet
Tumbleweed SecureTransport
SecureTransport Edge and Server
Data Management
Event-based File Processing & Routing
Rules Editor w/Web UI Application Integration Event-driven Agents Outbound Transfer
Management Signed Audit Records Repository Encryption
Secure Data Delivery
Multi-Protocol Secure File Transfer
Guaranteed Delivery Data Integrity Assurance Checkpoint/Restart Secure DMZ Streaming Enterprise Authentication Robust Access Controls Open Standards
HTTPS
HTTP
FTP/S
FTP
End Users
Back-end Applications
EnterpriseAuthentication
AS2
SCP
SFTP
10
Standards for Internet File Transfer
FTP
FTPS
SFTP
SCP
SSH
HTTP
HTTPS
FTP with PGP
SMTP
AS2
S/MIME
XCRCSSL
TLS
Plus legacy protocols: Async/Bicync, NDM, VANs, …
11
A Menu of Connectivity Options
~ Client Entrées ~
~ Lighter Fare ~
~ Client Entrées cont. ~
Other FTP/S Client……………………………. FTP/S• RFC-Compliant FTP, FTP over SSL/TLS• Windows, Unix, AS/400, z/OS, etc.
Other SSH Clients……………………………… SFTP,• SSH2 Standards-based SCP• Native on many OSes
~ Server Entrées ~
SecureTransport Connectivity MenuSecureTransport Server offers many connectivity options to meet your business partners’ needs.
Web Browser (Zero-Footprint Client)…………HTTP/S
• Ubiquitous• Easy setup for new users• Customizable UI skins
Web Browser with ActiveX…………………….HTTP/S
• Guaranteed Delivery• Restart/Resume
Other AS2 Server…….………………………….. AS2• EDI trading partners• Payload signing and encryption• Certified eBusinessReady®
SecureTransport Server…………………………. AS2,• Bidirectional Communication FTP/S,• Secure, Guaranteed Delivery HTTP/S• Data Management
SecureTransport Client…………………………..HTTP/S,
• Automated and scheduled transfers FTP/S• Guaranteed Delivery• Restart/Resume• Available on Windows and Unix
— Heart Healthy— Indicates Hot & Spicy!
12
Security
• Data Security• Transport encryption v. payload encryption• Data segregation and access control• Data integrity verification• Secure data storage
DMZ Security – No storage of sensitive data in insecure zones Encrypted data repository
• High Availability
13
Automation and Management
•Transfer Integration• File Routing• File Storage• File Processing• Notification
•User/Trading Partner Management• Authentication/Authorization• SSO, LDAP, Netegrity
•Auditability• Extensive user and administrative logging• File Tracking and Reporting• Signed transfer records – secure audit trail
•Delegated Administration• Administrative Roles
14
SecureTransport Components
Internet
Backend Processing
Audit Logs
EnterpriseFirewall
DMZ
FTP/S, HTTP/S,AS2, SFTP, SCP
Data
InternetFirewall
3rd-party FTP/S Client
ST Client
StandardWeb Browser
Web Browser w/ActiveX
AS2 Server
DatabaseEmail
Operations
Mainframe
ApplicationServer
Data
Repository Encryption
MDN Receipting
Audit Logs
Transaction Manager
Integration
Audit Logs
Application Layer Streaming
No Data
SecureTransport Edge
SecureTransportServer
SecureTransport
ST Server
3rd-party SFTP Client
15
ST Deployment: High Availability
AS2 Serveror ST Server
ST Client
Other Client
Web Browser
Firewall
ST Edge
Internet
Firewall
Load-Balancer ST Edge
ST Server
Load-Balancer ST ServerSAN
Firewall
ST Edge
Firewall
Load-Balancer ST Edge
ST Server
Load-Balancer ST ServerSAN
Primary Datacenter
Secondary Datacenter
16
Q & A
• Questions?