User manual ZYXEL ZYWALL OTP DATASHEET

[. . . ] Strong Authentication Solution with OTP Benefits Strong Two-Factor Authentication Solution The starting point of security is to ensure that only authorized people can remotely access the protected network applications and resources. [. . . ] Together, they provide highly robust one-time password authentication to protect network resources; the most common implementation using the two-factor authentication technology is remote VPN authentication. Working with the powerful RADIUS-standard ASAS server, ZyWALL OTP token can be used universally in the authentication processes of LAN, Web and OWA applications. No Expiration Date for Lower Operating Costs Nobody likes tokens that expire quickly, and validity of merely a year is simply not enough. Expired tokens can cause inconvenience since administers need to reconfigure the user setting and re-issue new tokens. With the concern in mind, ZyXEL put a heavy-duty battery inside the ZyWALL OTP to prevent tokens from premature expiration. As a result, the availability of the tokens can be extended to as long as 3 years. Intuitive and Easy to Install, Use and Manage There are various ways to implement the authentication schemes. However many small-to-medium businesses, enterprises and organizations need a two-factor authentication system that is easy to understand, install and administer; and it must be reliable once installed. With the combination of driverless ZyWALL OTP tokens and an ASAS server, this solution provides everything needed to deploy the two-factor authentication capability into network environments. One-Time Password for Two-Factor Authentication zywall otp Seamless Integration with ZyWALL Security Products The ZyWALL OTP can be easily deployed along with ZyWALL security products, including ZyNOS ZyWALL, ZLD ZyWALL, SSL10 and integrated into the existing network infrastructure. These combinations provide customers with Two-Factor Authentication, an optimum security methodology, to significantly elevate the safety level of the authentication process. Specifications System Specifications Chip-based Authentication Token · NAT Mode · DMZ Mode · Driverless OTP Number Generation · OATH Algorithm · 160-bit Supported Software · Remote Access (With Authenex ASAS Authentication Server): - SSL VPN - VPN with: OTP-capable VPNs - Dial-up to a remote server with RADIUS - Web access with RADIUS · Authentication Interoperability - Network Login for MS Windows 2000 and XP - Secure Web Access (MS Internet Explorer) ASAS Server Software · OATH Algorithm · RADIUS Standard Server (ASAS Server) · Easy Administration via Web Management GUI · Easy to Integrate into the existing Network Infrastructure · Use a Web browser to manage ASAS anytime, anywhere ASAS Server Requirements · Hardware: - CPU: Pentium-compatible CPU - RAM: 512 MB or Higher - Disk Space: 10 Gigabytes free Hard Disk space (after OS) · Software: - Operation System: Microsoft Windows 2000 and 2003 Server Edition - Service Packs: Microsoft Windows 2000 Service Pack 3 or above Hardware Specifications · On-board security Processors: support - AES Advanced Encryption Standard: 128-bit - SHA-1 · Display (LCM): 6-digital Numeric LCD display · Power: Internal battery · Casing: Polycarbonate Physical Specifications · Dimensions: 55 (W) x 25 (D) x 12. 2 (H) mm · Weight: 13 g Environmental Specifications Operation Environment · Temperature: 0°C ~ 50°C · Humidity: 20% ~ 95% Storage Environment · Temperature: 10°C ~ 50°C · Humidity: 20% ~ 95% Application Diagram jackyliu zyxel 130201 ZyWALL OTP Authorized Partner Authorized Customer ZyWALL OTP Employee Laptop in Airport Kiosk or in Hotel ZyWALL OTP Employee on Home Computer ZyWALL OTP Employee on Home Computer ZyWALL OTP Employee Laptop in Airport Kiosk or in Hotel ZyWALL OTP Authorized Partner Authorized Customer 1 2 Encrypted Internet nt ne n 3 6 WAN 4 ZyXEL/Authentication Server Decrypted ZyWALL LAN 5 RA SE DIU CR S ET LAN 1 Email Server BI System Web-based Application Application Server (Inventory, Store. . . ) User initiates Prompts for user credentials User supplies credentials RADIUS client send credentials RADIUS server responds with Accept, Reject, or Challenge If successful, RADIUS client allows user to access network 2 3 4 File Share OA, ERP System CRM System Remote Desktop Network Extend 5 6 For more produc t information, visit us on the web www. ZyXEL. com Copyright © 2007 ZyXEL Communications Corp. [. . . ] All specifications are subject to change without notice. 65-100-010117G 06/07 [. . . ]