Two-factor authentication is federally mandated for many law enforcement agencies, and is a wise precaution for commercial enterprises as well. It requires a second factor — something the user has — in addition to a password to successfully authenticate the user. Mobility XE two-factor authentication methods allow organizations to meet the standards at minimal cost. In addition to native RSA Secured certified support for RSA SecurID, Mobility XE also supports smart cards or X.509v3 user certificates. By leveraging RADIUS-EAP and standard PKI infrastructure available from many vendors and built into Microsoft server operating systems, Mobility XE provides options for strong, two-factor user authentication with little or no incremental cost. Mobility XE also supports NTLM and RADIUS authentication.
Mobility XE encrypts all data transmitted between the Mobility client and server with FIPS 140-2 validated AES encryption, in 128-bit, 192-bit or 256-bit strengths. FIPS-validated encryption is the United States government's standard for securing non-classified information, making AES the industry’s security standard. Mobility XE provides the security advantages of an IPSec VPN without its configuration, client provisioning and management burdens.
Allowing a device with an out-of-date security posture to connect to internal resources is a security risk. Mobile Network Access Control verifies that every connecting device is up-to-date with software and patches and that security measures are enabled, while keeping mobile workers productive.
Because mobile device loss or theft can compromise information on enterprise networks, Mobility XE lets network administrators quickly and easily quarantine lost or stolen devices. Quarantined devices are unable to authenticate to the network and administrators can easily restore network access when the device is recovered.
Check out our Security for Wireless Networks white paper to learn more about Mobility XE security.