RSA Authentication Manager
The strength of RSA SecurID Authentication combined with the convenience and flexibility of Risk-Based Authentication

RSA SecurID Appliance

Sorry, this product is no longer available, please contact us for a replacement.

Overview:

Security is a constantly evolving challenge for organizations that are managing shrinking IT budgets while, at the same time, needing to expand security to a larger population of users. This is compounded by users accessing sensitive data using unmanaged mobile devices via uncontrolled access points such as web portals. Organizations face the challenge of implementing strong authentication to combat these expanding challenges.

RSA® Authentication Manager 8.0 delivers the world class strength of RSA SecurID® Authentication technology and now also offers a risk engine to meet the challenges and needs of today’s organizations. RSA Authentication Manager is designed to verify authentication requests and centrally administer user authentication policies for access to enterprise networks.

Utilizing the widest range of RSA SecurID authenticators, RSA Authentication Manager provides two-factor user authentication to more virtual private networks (VPNs), wireless networks, web applications, business applications and operating environments than any other system available today. The RSA Authentication Manager virtual appliance provides the flexibility to support a wide range of authentication methods, an advanced risk engine, ease of manageability, and interoperability with industry leading products and vendors.

At A Glance

Delivers Flexibility and Convenience by offering Risk- Based Authentication

Deploy Risk-Based Authentication alongside hardware and software- based authenticators
Lower costs and widen the use cases for authentication in your organization

Lowers Total Cost of Ownership

Utilize a suite of built-in features that addresses the most time- consuming and costly tasks associated with managing an enterprise authentication suite
Allow your IT staff to do more with less

Maximizes the Potential of Your Virtual Environment

Take full advantage of virtualization in your organization to ease deployment, administration, and on-going system management
Leverage infrastructure and virtualization skills you already have on hand

The Power Of Risk-based Analytics

RSA Authentication Manager 8.0 offers Risk-Based Authentication (RBA), which is optionally licensable and designed to transparently increase security. RBA offers end user convenience by preserving the familiar username/password logon experience. Only when a logon attempt is deemed high risk must a user provide additional proof of identity. During a "step-up" authentication challenge, users are able to provide additional proof of identity by either answering life questions or completing an on- demand (SMS) authentication.

Risk-based Authentication

RBA is designed to protect access to the most common web-based applications including SSL VPNs, Web Portals, Outlook Web Access (OWA), and Microsoft SharePoint environments. With the addition of RBA into the RSA Authentication Manager portfolio, organizations can now cost-effectively secure access to a wider range of applications than ever before.

The RSA Risk Engine is a proven technology that powers the most convenient method of strong authentication. Not a static, rules-based system, the risk engine employs a combination of real-time device and behavioral analytics and dynamically adapts its risk model as new information is collected. Low-risk users are authenticated transparently while high-risk users are prompted to provide an additional proof of identity. RBA offers strong authentication that is cost-effective and convenient for both end users and IT administrators.

Manageability

RSA Authentication Manager includes a collection of built-in features that addresses the most time-consuming and costly tasks associated with managing an enterprise authentication suite. The user dashboard is a convenient single-pane view designed to enable Help Desk administrators to quickly address the most common user inquiries without needing to run multiple reports or searches. The customizable Self Service Console is another feature that saves IT staff time by empowering users to manage their authentication methods. Deployed in the DMZ area of the network, the self service portal allows users to change their own PIN, request a replacement token, request emergency access, and access other troubleshooting services.

User Dashboard

Address the most common user inquiries in a single-pane view
Monitor real-time recent authentication activity
Manage tokens
- Enable/disable
- Assign more tokens
- Unlock/lock
- Clear PIN
View user group membership and accessible agents

Maximizing The Potential Of A Virtual Environment

RSA Authentication Manager allows organizations to take full advantage of VMware ESX or ESXi virtualization, which dramatically simplifies deployment. Virtualization also improves manageability. Simplified patching enables organizations to quickly update the system. Updates to the Virtual Appliance, underlying operating system, and RSA Authentication Manager software are provided in a single service pack, so that there is no need to worry about managing various layers of the system individually.

Interoperability

RSA Authentication Manager is interoperable with many of the major network infrastructure and operating system products on the market. The Secured by RSA program, one of the largest alliance programs of its type, brings together hundreds of complementary solutions. Including more than 400 products from over 200 vendors, Secured by RSA helps assure that organizations have maximum flexibility and investment protection. Leading vendors of remote access products, VPNs, firewalls, wireless network devices, web servers, and business applications have built in support for RSA Authentication Manager.

What's New:

Grow your existing RSA SecurID® platform with risk-based profiling and authentication. Fast and effortless to deploy and simplicity itself to administer, the new RSA® Authentication Manager 8.0 now delivers intelligent, transparent, behind-the-scenes authentication to enhance every secure access scenario.

Instantly enhance the security of any basic username/password logins.
Allow occasional users, staff and customers to quickly create and administer their own secure, multi-factor login.
Based on a real-time risk assessment, automatically invoke step-up authentication where warranted.
Confidently allow 90% of user authentication attempts to proceed without challenge.
Widen the number of users enjoying secure authenticated access without the expense of additional hardware tokens.
Deliver instant visibility with centralized management enterprise-wide for all compliance-critical, two-factor authenticated access.

New – Centralized Dashboard

Administer all users from a central, single view dashboard
Empower end-users to create, manage and troubleshoot their own multi-factor login via the self service console
Cut average help desk resolution times from 8-10 minutes to just 60-120 seconds

New – Embrace your Virtual Environment

Use VMware ESX and ESXi virtualization to deploy and manage RSA Authentication Manager 8.0
Benefit from VMware tools, including snapshots, VMotion, High Availability and more
Simplify patching and updates with the Certified VMWare® Ready Virtual Appliance platform

Who needs RSA Authentication Manager 8.0?:

RSA Authentication Manager 8.0

Whether you’re a prospective online customer, a senior employee, an external consultant or an IT administrator, new RSA Authentication Manager 8.0 alongside RSA SecurID® makes life easier, more convenient and more secure.

IT administrator

Protect more of your business from advanced threats
Simplify authentication administration and deployment
Dramatically reduce Help Desk calls to lower time and costs

Employee

Enjoy the benefits of more self-service options
Increase productivity with anytime, anywhere access
Gain secure access from multiple devices and platforms

External consultant

Work remotely - securely
Use your own access devices freely

Online Customer

Prevent unauthorized access to your personal information and accounts
Transact securely without inconvenience

Migration to 8.0:

Planning a successful migration requires knowing exactly how much time and resources are required of your IT team to successfully scope, plan, implement, test and complete an upgrade. With the release of RSA® Authentication Manager 8.0, maximum consideration was given to help our customers in each phase of the migration cycle by making available resources that provide information on the steps and time required.

This datasheet gives an overview of what a migration to RSA Authentication Manager 8.0 looks like for both the 6.1 and 7.1 releases, and gives helpful pointers on what to expect and where to go for more information.

Obtain An Evaluation License Of 8.0

For customers with RSA SecurCare Maintenance contracts, up to three (3) evaluation licenses may be obtained so that a full test environment can be established prior to migration. Each evaluation license is good for 90 days. The RSA Authentication Manager 8.0 software may also be downloaded through SecurCare Online. Customers are strongly encouraged to test an evaluation copy of the 8.0 release before converting to a production environment.

Essentials

Direct Migration to 8.0

Direct migration is supported from RSA® Authentication Manager 6.1.4 and RSA® Authentication Manager 7.1 SP4 to the new 8.0 release
Customers with valid RSA SecurCare® Maintenance Agreements may upgrade by visiting RSA SecurCare Online and navigating to the 'Version Upgrades' tab (login required)

Available as a VMware Virtual Appliance

RSA Authentication Manager 8.0 is available as an Open Virtualization Format (.ova) file for use in VMware environments

Tools and Resources

Tools, training and resources are available on RSA SecurCare Online (SCOL) to help you plan your migration

For RSA Authentication Manager 6.1 Deployments

Migration from the RSA Authentication Manager 6.1 platform (including software deployed on various operating systems and the RSA SecurID® Appliance 2.0) is supported directly from the 6.1.4 release. Customers who are on an earlier release of 6.x or on 5.x or below, must upgrade to 6.1.4 before beginning the migration.

Please Note: "Same box" migration is not supported for this release. Rather, this release is deployed as a Virtual Appliance.

The process of migrating from version 6.1 to version 8.0 contains four main steps:

Deploy and configure an RSA Authentication Manager 8.0 virtual appliance.
Use the Authentication Manager 6.1 export utility to export all relevant version 6.1 deployment data, including users, tokens, and agents, into a migration package.
Import the migration package into the version 8.0 system, which recreates the data from the version 6.1 deployment in the new system.
Choose one of the following:
- Replace the existing 6.1 systems with the 8.0 systems by using the same IP address and hostname.
- Replace the configuration of each of the agents to point to the new version 8.0 deployment.

RSA recommends thoroughly testing the version 8.0 deployment before migrating the production system. Before moving the version 8.0 system into production, verify that the data is properly migrated and become familiar with the operation of RSA Authentication Manger 8.0.

For RSA Authentication Manager 7.1 Deployments

Migrations are generally faster and simpler when going from 7.1 - 8.0 versus 6.1 - 8.0 due to the fact that the data structure is more similar between 7.1 and 8.0. Migration is supported from RSA Authentication Manager 7.1 SP4 directly to 8.0.

Please Note: "Same box" migration is not supported for this release. Rather, this release is deployed as a Virtual Appliance.

The process of migrating from version 7.1 to version 8.0 contains five main steps:

Deploy and configure an RSA Authentication Manager 8.0 virtual appliance.
Install the migration export utility on AM 7.1 on the Primary server (required) and on Replicas (optional)
Export the migration package
- o Primary-only export with servers up (intended for testing) o Primary-only export with server(s) down
- oExport of all instances (servers are shut down one by one)
Import migration package into AM 8.0 via the Operations Console
Refresh pre-production AM 8.0 database with latest production data (optional)

Four Migration Modes Supported For Rsa Authentication Manager 7.1

Test Migration

o Used for setting up a sandbox or pre-production environment o Test environment may or may not go live at a later time

Basic Migration

Fastest, simplest method of migration
Customers may lose replica data (if replicas left running) or may experience some downtime
Will be the best fit for the majority of customers

Advanced Migration

Most complex and potentially longest migration by time
Allows customers to maintain full authentication uptime while retaining nearly all authentication data
Rollback requires running the export utility on the 7.1 Primary to restore the system

Pre-Production Refresh

Allows customers to refresh a configured pre-production environment with the latest production data prior to going live

On-demand Authenticators Convert To New Combo License In 8.0

RSA Authentication Manager 7.1 customers with On-demand authenticators (SMS/email) will automatically have a corresponding number of Risk-Based Authenticators (RBA) and On-demand authentications (ODA) available in a new combination license upon migrating to 8.0. This combo license is known as a RBA/ODA license. This allows for new use cases utilizing the new Risk-Based Authentication, without sacrificing any capabilities of the On-demand authenticator. The new RBA/ODA combo license is subject to a separate maintenance agreement on the RBA/ODA authenticator itself. Customers migrating from 7.1 with On-demand will be granted no cost maintenance until such time as the SecurCare Maintenance agreement is renewed, then the two agreements will continue side-by-side at standard cost.

Please contact us prior to your migration if you do not want to migrate over your On-demand authenticators to the new RBA/ODA combo license with associated maintenance.

Call a Specialist Today! 877-352-0546

RSA Authentication Manager
The strength of RSA SecurID Authentication combined with the convenience and flexibility of Risk-Based Authentication

Sorry, this product is no longer available, please contact us for a replacement.