Features:
Integrated Secure Access
Array AG Series secure access gateways integrate SSL VPN, remote desktop access and secure mobile access to deliver scalable and flexible secure access for both remote and mobile users.
From a single platform, secure access can be enabled for multiple communities of interest including employees, partners, guests and customers.
In addition, AG Series physical and virtual appliances support next-generation “any-to-any” secure access via robust feature sets for bring-your-own-device (BYOD) and controlled access to cloud services.
SSL VPN Remote Access
SSL VPN secure remote access enables anytime, anywhere access to business applications – increasing productivity while maintaining security and compliance. Users need only a common Web browser to quickly and securely access resources and applications for which they are authorized.
Using SSL, the security protocol present in all Web browsers, AG Series appliances can enable a range of remote access methods across a broad spectrum of managed and unmanaged devices.
Web applications can be made available within a secure Web portal, while network-level connectivity and connectivity for specific client-server applications over SSL can be enabled via a universally-compatible client.
Remote Desktop Access
Remote desktop access allows employees to access their work PCs and laptops from any location as if they were in the office. Using remote desktop, workers can control their physical and virtual office desktops from any remote location – whether they are at their home office, a customer or partner site or on a tablet or smart phone.
Remote desktop access is different from traditional VPN access. Because sensitive files and data never leave the corporate network and never reside on remote and mobile devices, security is assured.
Leveraging existing office PCs and unique Array remote desktop technologies such as user self-registration and wake-on-LAN, remote access and BYOD can be extended enterprise-wide in a manner that is both secure and cost-effective.
Secure Mobile Access
In addition to supporting remote desktop for iPhone, iPad and Android devices, AG Series appliances also support secure access for native business apps and HTML5 apps developed for mobile environments.
After installing Array’s mobile client on tablets and smart phones, native business apps can be authorized for specific users. HTML5 apps can be provisioned on a per-user basis and are accessible from a secure browser within the mobile client.
Mobile VPN connections may be enabled per application, and applications may be authorized per user at the administrator’s discretion; moreover, all data associated with enterprise apps are stored in a secure container to prevent data leakage.
In the event that devices become lost or stolen, contents of the secure container may be remotely wiped; in addition, device-based identification may be used to prevent future connectivity to the Array appliance from lost or stolen devices.
Virtual Portals
Built on Array virtualization technology, AG Series appliances can support up to 256 secure access virtual HTML5 portals to meet the unique needs of multiple user groups and tenants. Each virtual HTML5 portal is fully independent, with separate management, access policies, access methods and resources.
HTML5 portals do not depend on ActiveX or Java applets, and are compatible with all platforms, thus providing a unified experience for end users regardless of the platforms or browsers.
Built-in templates make creating virtual portals easy, and provide a starting point for further customization. In addition, features and functions can be seamlessly integrated into existing Web pages and custom layouts with minimal effort using Array portal theme technology.
Per-User Policy Engine
AG Series appliances enable access policies on a per user basis. In addition to validating hardware IDs, AG appliances check remote devices for required OS version, service packs and anti-virus/anti-spam/antispyware/firewall software before granting access to protected networks and resources.
Roles may be assigned based on username, group name, source IP, login time and authentication method and can specify which resources are available to which access methods. Each role may be assigned different resources and QoS policies.
With capacity for 500,000 users in its local database, access policies can be stored on the Array appliance or can be provided via integration with external OAuth or AAA servers. In addition, Single Sign-On (SSO) settings can be customized to store multiple usernames and passwords for different backend application servers.
Moreover, authentication may be set such that users must authenticate to multiple AAA servers for added security, in a manner similar to multi-factor authentication.
The AG Series also supports single sign-on (SSO). Working as a Security Assertion Markup Language (SAML) service provider (SP), the AG Series confirms users’ identities and authorizations with an identity provider (IdP) to allow seamless access to multiple resources with a single login. SAML SSO streamlines the user experience while maintaining strong security. In addition, the AG Series can serve as a SAML identity provider (IdP) for other security and networking devices.
End-to-End Security
A dissolvable client-side security agent mitigates network or resource exposure by enforcing pre- and post-admission policies and adapting access rights to suit changes in the client environment. Host-checking verifies device and user identity, and ensures clients meet pre-defined security parameters (anti-virus, anti-spyware, personal firewalls, patches, service packs) and determines adaptive policies. For additional control, cache cleaning can be enabled to wipe cached information from devices when sessions end.
The AG Series supports multiple authentication methods to provide an additional layer of defense against unauthorized access and misuse of data and applications. The built-in one-time password (OTP) capability uses SMS to verify identities via users’ mobile phones. Multiple 3rd party two-factor and multi-factor authentication products are also supported.
All traffic between clients and the Array appliance is secured via SSL encryption, and a security-hardened OS ensures that Array appliances are as secure as the networks and resources they protect. Layer 2-7 authorization provides granular access control based on user identity and role within the organization and auditing tracks all activity on a per-user, per-event and per-resource level. URL blacklisting is also available to restrict access to undesirable Web sites.
For organizations with remote offices, branches or other operations, the AG Series supports Site2Site, a huband-spoke SSL VPN tunneling solution.
Acceleration & Availability
Security often comes at the expense of performance and ease-of-use; in other words, secure access won’t enhance productivity unless users find it fast and friendly. To ensure both performance and security, AG Series appliances support integrated application acceleration features including connection multiplexing, SSL acceleration and compression.
In the event of a failure, Array N+1 clustering technology ensures a transparent and unaffected end-user experience.
Management & Reporting
AG Series appliances offer both a familiar CLI and an intuitive Web user interface that can easily be customized to create streamlined, integrated management systems. Monitoring is made simple with SNMP-based monitoring tools, and with support for XML-RPC, a range of third-party applications can be used to automate management tasks.
Integration & Extensibility
Taking advantage of extensible APIs, IT can marry secure access intelligence with threat and risk management platforms, virtual management platforms, and custom solutions for reporting, billing, SLAs and vertical-specific requirements. Developers can also create custom native apps with built-in security for mobile environments. From providing real-time usage intelligence to seamlessly interacting with 3rd party secure access and application delivery technologies to integrating with cloud management systems, the power of AG Series APIs is unprecedented.
Array Business Continuity (ABC)
Secure access is a compelling technology for business continuity planning; however, many vendors require businesses to buy contingency licenses outright and most competing products are designed with only enough capacity to support the limited needs of day-to-day remote access.
Only Array has the scalability to support an entire workforce on a single system while maintaining a premium experience for each user. And because helpdesk calls are the last thing you need in an emergency, Array offers the unique ability for first time users to log into a company URL and immediately see their familiar work desktop.
Ten-day contingency licenses are available in increments from 25 to 12,000 concurrent users and are activated by exceeding a base concurrent user license.
Product Editions
AG Series physical appliances and vxAG virtual appliances support multiple options: AccessDirect™ enables SSL VPN remote access, and the DesktopDirect™ add-on enables remote desktop access. In addition, all product options support ABC business continuity contingency licenses.
Physical & Virtual Appliances
AG Series physical appliances leverage a multi-core architecture, SSL acceleration and compression, energy-efficient components and 10 GigE connectivity to create solutions purpose-built for scalable secure access. The AG1500FIPS model offers FIPS 140-2 Level 2 compliance for organizations that require a higher level of security.
Whether running on Array’s AVX Series Network Functions Platform, on common hypervisors, or in popular public cloud platforms, vxAG virtual appliances are ideal for organizations seeking to benefit from the flexibility of virtual environments, offer infrastructure services and new elastic business models or evaluate Array secure access with minimal risk and up-front cost.
