SafeConnect provides remote enterprise workers with access to the corporate LAN through the Internet. The platform differs from standard VPN offerings in that SafeConnect allows the user to access and utilize LAN and Internet resources as if they are actually connected to the LAN locally; or, in other words, the LAN security permiter is extended to encompass the remote PC itself. The vendor targets the platform primarily to remote wireless users (I.E., accessing the corporate LAN through public hotspots), but also notes the platform could be used for remote access through wired access locations, as well.

To accomplish this, SafeConnect is a Layer-2 based software platform that includes several components which allow for the passing of encrypted communications to and from the LAN and the remote worker.

The SafeConnect client resides on the end user's PC itself, providing encryption/decryption of communications and the ability to cooperate with the SafeConnect Access Controller to allow the end user to authenticate and link to the corporate LAN. The vendor notes that communications are encrypted via 128-bit AES, and that port and protocol information is hidden from unauthorized listeners during communications. Once the communication link is established, SafeConnect protects all communications with the remote client by routing all requests that originate from the remote PC first through the LAN itself (effectively applying local LAN security to the end user's traffic) and in turn blocking any external attempts to directly access the remote PC. Since the end user's machine is, in effect, working from the LAN, existing infrastructure including DHCP servers can be used as is. The SafeConnect client is itself identified via the end user machine's MAC address, and not IP address; it is initially available for Windows 2000/XP machines.

The SafeConnect Access Contoller acts as the enforcement bridge between the end user clients and the corporate LAN itself. It encrypts/decrypts communications in concert with the client, and enforces access policies as defined in the SafeConnect Management System.

Finally, the SafeConnect Management System provides a browser-based administrative console for the configuration and monitoring of the network as well as provides authentication integration with the corporate LAN. The Management System supports integration with multiple directories and RADIUS servers, including MS A/D, NT Domain Server, Open LDAP, Microsoft IAS, FreeRADIUS, and other RADIUS-compliant servers. When authenticating to the corporate LAN, the remote user need only enter their already existing LAN user name and password.

Both the Access Controller and the Management System run as dedicated servers off of a hardened Linux kernel (provided); the customer must supply off the shelf hardware for these components. For large deployements these should each be independent dedicated servers; however, the vendor notes that for smaller implementations the Access Controller and Management System could run off the same hardware.

The product is available now; the vendor notes that FIPS 140-2 validation is expected in 2Q/2006. Pricing is based on the number of actual simultaneous users (and not total possible users) with the vendor noting pricing at approximately $80-100 per simultaneous user.

Contact Cranite Systems for further information.

product submission by EITPlanet Staff

E-Mail this page to a colleague
send info about SafeConnect

Suggest a link
for the SafeConnect fact sheet