NEWS: IMPROVED SECURITY FOR VPNS

The enhanced IBM 2216 Nways Multiaccess Connector and Nways MAS software provide a wide range of security benefits for VPNs

The IBM 2216 Nways™ Multiaccess Connector can provide WAN access, S/390 host access, and remote site concentration to help you link all types of users and devices across your enterprise. When combined with the Nways Multiprotocol Access Services (MAS) software, the 2216 can significantly reduce the overall cost of computing by increasing network performance and operating efficiency. Now, with MAS Version 3.3 (planned for availability in June 1999), you can take advantage of a wide range of enhancements to implement extremely secure Virtual Private Networks (VPNs) throughout your enterprise.

IBM 2216 NWays Multiaccess Connector

MAS 3.3 is a scalable software solution that provides enhanced VPN and voice capabilities, Differentiated Services, new LDAP client support for policy management, and expanded Web cache capabilities to facilitate e-business. Key to the new release are security enhancements that include IP Security (IPSec) for authentication, encryption, and IP packet “tunneling” over insecure IP backbones that pose security hazards. Using IPSec over insecure networks can also eliminate the need for leased lines between sites, a significant factor in reducing network expenses.

Additional Network Security and Cost Savings
With their advanced security functions, the 2216 and MAS 3.3 can help you deploy VPNs to extend your corporate intranet across a public network—such as the Internet or a service provider network—to create a secure connection through an encrypted tunnel. New VPN IPSec support includes automated key management through Internet Key Exchange (IKE), which enables you to set up security associations and manage cryptographic keys automatically. IKE also helps ensure that you can conveniently and accurately implement VPN policy throughout your extended network with only minimal manual configuration.

VPN Enhancements for the IBM 2216 at a Glance IKE support helps ensure that VPN policies can be conveniently and accurately implemented throughout an extended network with automated key distribution. Support for Cisco® L2F and Microsoft® PPTP enables the coexistence of these non-standard protocols with the standards-based L2TP—providing a smooth migration path for users of L2F and PPTP. An integrated LDAP client can access a user-supplied LDAP directory for QoS and security profile information for subsequent mapping of packets to Differentiated Services queues. Support includes a rapid classification technology that can provide one-pass mapping to minimize the impact on packet throughput.

Configuration Flexibility for Multiprotocol Environments
MAS 3.3 supports Layer 2 Tunneling Protocol (L2TP) for secure tunneling of multiprotocol data from remote users, which enables the 2216 to initiate an outgoing call from the L2TP Access Concentrator (LAC) when its traffic has been designated for a remote user. MAS also enables the coexistence of L2TP tunnels with Microsoft PPTP and Cisco L2F—protocols for tunneling Layer 2 frames over IP. Enabling non-standard PPTP and L2F tunnels to coexist with L2TP tunnels on the same device with virtually the same configuration and setup provides a smooth migration path if you have already deployed PPTP or L2F in your enterprise but want to move to standard L2TP.

LDAP Client Support for Higher Security
MAS 3.3 provides standards-based LDAP client support for TCP/IP environments, which can help simplify and strengthen security administration by consolidating many directories into one and working in conjunction with other LDAP offerings, such as the IBM SecureWay Directory.

For More Information
Visit http://www.ibm.com/networking/216/216prod.html