	Sentry\|Scout\|Services\|Partners\|News	Support\|Contact Us	Search:

Risk-based Authentication

Industries

Request Demo

Sentry for Juniper
Lowest TCO, Highest User Productivity

As IT teams start to tighten their belts, they will need solutions that eliminate current management overhead so that they can focus on initiatives that increase revenue…and minimize initiatives that impact expenses - such as user authentication management.

The process of deploying a traditional authentication control - such as tokens or certificates - out to an entire VPN user base is extremely expensive and cumbersome. It also requires a significant amount of ongoing management and overhead.

Sentry utilizes a zero-footprint authentication method that does not need to be deployed out to individual users or to their devices, saving organizations up to 87% in operating expense. Using a layered combination of credentials, keystroke dynamics and device tagging enables accurate, risk-based authentication that users prefer over carrying tokens, using bingo cards or installing certificates. And Sentry enables organizations to meet data protection and privacy regulations outlined in HIPAA, FFIEC, PCI-DSS, and Sarbanes-Oxley.

Key Benefits

Lower Operating Expense	Increased User Productivity	Lower Help Desk Costs
No control to be deployed, managed, or renewed dramatically lowering operating expenses	End users have access to Sentry's strong authentication from any computer, anytime	Integrated self-service capabilities lower costly calls to your support team

Key Features

Juniper SA Integration

Seamless integration with Juniper SA SSL VPN

User experience completely integrated into Juniper SA GUI
Pre-built integration with Juniper SA v6.0 line of appliances

Authentication Services

Multi-factor authentication and mitigation

Username and Password
Keystroke Dynamics
Device Tags
SMS delivered one-time-passwords
SMTP delivered one-time-passwords
Challenge-Response Questions

Policy Management Services

Robust, risk-based policy management

Factor Selection: Select the factors to be utilized on a policy by policy basis
Workflow Definition: Easily define the order in which factors are assessed and mitigation factors are provided
Assignment: Associate policies to users and groups based on business and security requirements
Configurable synchronization with identity stores including MS Active Directory, LDAP v3-based stores, and SQL-based stores
Federation of identity stores, access points, and policies

Workflow Services

Integrated capabilities for self-service authentication process

Enrollment: Guides the user in establishing keystroke dynamics template, challenge-response questions, and device tags
Verification: Captures and checks multiple factors to verify identity
Mitigation: Provides user login assistance according to established policy if the primary factor cannot be verified
Password Reset: Accommodates password reset according to security policies of the organization

Centralized Management and Reporting Tools

Secure, browser-based console

Server configuration and operations
User and group enrollment status, logon history and access trends
Help desk tools for troubleshooting
Peer status
User and group failed login detail for case management
Role-based access

Peering Services

Integrated support for a multi-peer replication and failover configuration

Peer-to-peer communication is via secure channel
Each peer includes a secure data repository mitigating many single points of failure
Supports an optional centralized repository configuration
Two-peer system supports up to 72,000 authentications per hour

Flexible and Secure Architecture

Server-based, security-optimized architecture

Key exchange using 2048-bit asymmetric encryption
Message encryption using 128 & 256-bit AES
Encrypted Repository
SSL channel encryption as optional additional layer and several mechanisms used for preventing replay

NEXT STEPS