Array Networks AG1500/1500FIPS
Secure Access Gateway

Features:

Enterprise-Wide Secure Access

AG Series physical and virtual appliances are deployed at the network perimeter or in front of business-critical resources to provide secure remote and mobile access for employees, guests, partners and other communities of interest.

Array secure access gateways are ideal for consolidating remote and mobile access on a single robust platform to provide end-users with a consistent login experience, ensure consistent access policies and minimize potential attack vectors.

Each Array SSL VPN shares a comprehensive secure access feature set, right-sized seat license packs and an option for low-cost business continuity contingency licenses.

Array AG Series secure access gateways integrate SSL VPN, remote desktop access and secure mobile access to deliver scalable and flexible secure access for both remote and mobile users. From a single platform, secure access can be enabled for multiple communities of interest including employees, partners, guests and customers.

In addition, AG Series physical and virtual appliances support next-generation “any-to-any” secure access via robust feature sets for bring your own device (BYOD) and controlled access to cloud services.

SSL VPN Remote Access

SSL VPN secure remote access enables anytime, anywhere access to business applications – increasing productivity while maintaining security and compliance. Users need only a common Web browser to quickly and securely access resources and applications for which they are authorized. Using SSL, the security protocol present in all Web browsers, AG Series appliances can enable a range of remote access methods across a broad spectrum of managed and unmanaged devices.

Web applications can be made available within a secure Web portal, while network-level connectivity and connectivity for specific clientserver applications over SSL can be enabled via a universally-compatible client.

Remote Desktop Access

Remote desktop access allows employees to access their work PCs and laptops from any location as if they were in the office. Using remote desktop, workers can control their physical and virtual office desktops from any remote location – whether they are at their home office, a customer or partner site or on a tablet or smart phone.

Remote desktop access is different from traditional VPN access. Because sensitive files and data never leave the corporate network and never reside on remote and mobile devices, security is assured. Leveraging existing office PCs and unique Array remote desktop technologies such as user selfregistration and wake-on-LAN, remote access and BYOD can be extended enterprise-wide in a manner that is both secure and cost-effective.

Secure Mobile Access

In addition to supporting remote desktop for iPhone, iPad and Android devices, AG Series appliances also support secure access for native business apps and HTML5 apps developed for mobile environments.

After installing Array’s mobile client on tablets and smart phones, native business apps can be authorized for specific users and automatically installed on end-user devices from an integrated enterprise app store. HTML5 apps can also be provisioned on a per-user basis and are accessible from a secure browser within the mobile client.

Mobile VPN connections may be enabled per application, and applications may be authorized per user at the administrator’s discretion; moreover, all data associated with enterprise apps are stored in a secure container to prevent data leakage.

In the event that devices become lost or stolen, contents of the secure container may be remotely wiped; in addition, device-based identification may be used to prevent future connectivity to the Array appliance from lost or stolen devices.

Virtual Portals

Built on Array virtualization technology, AG Series appliances can support up to 256 secure access virtual portals to meet the unique needs of multiple user groups and tenants. Each virtual portal is fully independent, with separate management, access policies, access methods and resources.

Built-in templates make creating virtual portals easy, and provide a starting point for further customization. In addition, features and functions can be seamlessly integrated into existing Web pages and custom layouts with minimal effort using Array portal theme technology.

Per-User Policy Engine

AG Series appliances enable access policies on per user basis. In addition to validating hardware IDs, AG appliances check remote devices for required OS version, service packs and anti-virus software before granting access to protected networks and resources.

Roles may be assigned based on username, group name, source IP, login time and authentication method and can specify which resources are available to which access methods. Each role may be assigned different resources and QoS policies. With capacity for 500,000 users in its local database, access policies can be stored on the Array appliance or can be provided via integration with external AAA servers. In addition, Single Sign-On (SSO) settings can be customized to store multiple usernames and passwords for different backend application servers. Moreover, authentication may be set such that users must authenticate to multiple AAA servers for added security, in a manner similar to multi-factor authentication.

End-to-End Security

A dissolvable client-side security agent mitigates network or resource exposure by enforcing preand post-admission policies and adapting access rights to suit changes in the client environment. Host-checking verifies device and user identity, and ensures clients meet pre-defined security parameters (anti-virus, anti-spyware, personal firewalls, patches, service packs) and determines adaptive policies. For additional control, cache cleaning can be enabled to wipe cached information from devices when sessions end.

All traffic between clients and the Array appliance is secured via SSL encryption, and a securityhardened OS ensures that Array appliances are as secure as the networks and resources they protect. Layer 2-7 authorization provides granular access control based on user identity and role within the organization and auditing tracks all activity on a per-user, per-event and per-resource level. URL blacklisting is also available to restrict access to undesirable Web sites.

Acceleration & Availability

Security often comes at the expense of performance and ease-of-use; in other words, secure access won’t enhance productivity unless users find it fast and friendly. To ensure both performance and security, AG Series appliances support integrated application acceleration features including connection multiplexing, SSL acceleration and compression.

Deployed at the largest enterprises and service providers in the world, AG Series appliances have proven their reliability – tallying up years of flawless performance in demanding production environments. In the event of a failure, Array N+1 clustering technology ensures a transparent and unaffected end-user experience.

Management & Reporting

AG Series appliances offer both a familiar CLI and an intuitive Web user interface that can easily be customized to create streamlined, integrated management systems. Monitoring is made simple with SNMP-based monitoring tools, and with support for XML-RPC, a range of third-party applications can be used to automate management tasks.

In addition, up to 100 AG appliances can be managed centrally to provide a single point of configuration, monitoring and reporting for Array products (requires Array Networks CMX100 centralized management appliance).

Integration & Extensibility

Taking advantage of extensible APIs, IT can marry secure access intelligence with threat and risk management platforms, virtual management platforms, and custom solutions for reporting, billing, SLAs and vertical-specific requirements. Developers can also create custom native apps with built-in security for mobile environments. From providing real-time usage intelligence to seamlessly interacting with 3rd party secure access and application delivery technologies to integrating with cloud management systems, the power of AG Series APIs is unprecedented.

Array Business Continuity (ABC)

Secure access is a compelling technology for business continuity planning; however, many vendors require businesses to buy contingency licenses outright and most competing products are designed with only enough capacity to support the limited needs of day-to-day remote access.

Only Array has the scalability to support an entire workforce on a single system while maintaining a premium experience for each user. And because helpdesk calls are the last thing you need in an emergency, Array offers the unique ability for first time users to log into a company URL and immediately see their familiar work desktop.

Ten-day contingency licenses are available in increments from 25 to 12,000 concurrent users and are activated by exceeding a base concurrent user license. Once activated, ABC contingency licenses augment standard concurrent user licenses for a period of one day. If usage returns to normal, the ABC contingency license is reduced by one day. If usage continues to exceed the standard concurrent user license, the ABC contingency license is reduced one day at a time until usage returns to normal.

Product Editions

AG Series physical appliances and vxAG virtual appliances support three product editions: AccessDirect™ enables SSL VPN remote access, DesktopDirect™ enables remote desktop access and MotionPro™ enables secure mobile access. In addition, all product editions support ABC business continuity contingency licenses.

Physical & Virtual Appliances

AG Series physical appliances leverage a multi-core architecture, SSL acceleration and compression, energy-efficient components and 10 GigE connectivity to create solutions purposebuilt for scalable secure access. The AG1500FIPS model offers FIPS 140-2 Level 2 compliance for organizations that require a higher level of security.

Available for common hypervisors, vxAG virtual appliances are ideal for organizations seeking to benefit from the flexibility of virtual environments, offer infrastructure services and new elastic business models or evaluate Array secure access with minimal risk and up-front cost.

Specifications:

Documentation:

Download the Array Networks AG Series Secure Access Gateway Datasheet (PDF).