Vordel Limited
(return to corporate profile)
Entrust and Vordel Joint Web Services Solution
The features of this joint solution include:
- Distributed security enforcement with centralized management -- Vordel's product architecture enables enforcement of security policies across multiple XML systems, while allowing the management of user identities to be centralized in Entrust GetAccess. The administrator is not required to replicate policies or user information between Vordel products and GetAccess.
- Extension of single sign-on to XML traffic -- Users need authenticate only once and use multiple local and third-party Web Services, without a need to re-authenticate. Vordel products enforce the security policies at each Web Service endpoint, while GetAccess manages the security session.
- Interoperability -- Vordel products' support for Entrust GetAccess ensures the solution can integrate within an organization's Web portal infrastructure to secure application, portal, and content management servers as well as enterprise and Web Services applications.
- Support for standards -- SAML, WS-Security, and WS-Trust are used in the joint Vordel/Entrust solution to secure Web Services. The use of non-proprietary technologies means that customers avoid the use of tightly-coupled APIs.
Solution Components
As part of the Entrust Secure Identity Management Solution, Entrust provides comprehensive content validation, threat detection, and centralized Authentication, Authorization and Audit (AAA) services for XML and Web Services data. Made up of industry leading identity and access management products, the solution delivers key Web Services security services through:
- Entrust GetAccess
- Entrust Secure Transaction Platform
- Vordel XML Gateway
Entrust GetAccess is a high performance, scalable Web access control solution that can easily be extended to secure Web services applications through integration with the Entrust Secure Transaction Platform, providing centralized authentication and authorization services for both Extranets and Web Services applications.
Vordel delivers XML and SOAP message security for SOAs. It leverages Entrust GetAccess for centralized policy definition and enforcement, performing authentication on incoming and outgoing XML traffic to ensure validity of SOAP messages. Authentication is complemented by a sequence of content filtering, transformation and routing operations performed on the XML data by Vordel, as well as the application of fine-grained authorization by Entrust GetAccess.
Giving organizations maximum flexibility with their deployments and Web Services architectures, Vordel can be deployed as a gateway or “XML Firewall” or it can leverage the agent technology as the application integration point.
Regardless of how the Entrust solution is deployed, it addresses the security requirements of organizations that are seeking to protect business services exposed as Web Services - to external trading partners, customers and suppliers. Entrust’s market-leading capabilities for securing Web Services also addresses the management internal Web Services transactions, which may be accessing applications via wireless LANS or remote worker VPNs.
For more information on the joint Entrust and Vordel Web Services solution, please refer to the solution brochure listed above.
Vordel Products
The Entrust/Vordel joint solution makes use of two Vordel products:
VordelSecure
VordelSecure is an XML Gateway or “XML Firewall”. Through integration with the Entrust Secure Transaction Platform and Entrust GetAccess, it performs authentication on incoming and outgoing XML traffic at the point of entry and exit to a network, based on preconfigured security policies. Authentication is complemented by a sequence of content filtering, transformation and routing operations performed on the XML data by VordelSecure, and by the authorization against the Entrust Secure Transaction Plaftorm. VordelSecure is also available as a hardware appliance. For more information on VordelSecure, please refer to the factsheet listed above.
VordelDirector
VordelDirector is an XML Security Server. It is designed to apply to a “Services Oriented Architecture”, where many applications are exchanging XML with many other applications, with no single choke-point where an XML Firewall can be applied. VordelDirector also interoperates with Entrust GetAccess and Entrust Secure Transaction Platform for authentication and authorization. The solution addresses the security requirements of enterprises seeking to protect business process conducted via Web Services. For more information on VordelDirector, please refer to the factsheet listed above.
