Transparent end-to-end network encryption with Framework-enabled F-Secure VPN+

F-Secure' Virtual Private Networking software, F-Secure VPN+, takes full advantage of F-Secure' F-Secure Framework. F-Secure Framework provides F-Secure VPN+ with centralized policy-based management features, which makes the F-Secure VPN+ the only VPN client on the market that is centrally managed and totally transparent to end-users and applications, but still provides end-to-end protection both inside and outside the corporate local area network.

F-Secure VPN+ products can route, filter, encrypt and authenticate IPSec and plain-text communication. The F-Secure VPN+ family consists of the following products:

F-Secure VPN+ Gateway encrypts all data traffic from a local area network (LAN) through a wide area network (e.g. Internet) using the IPSec protocol to other LANs. (LAN-to-LAN).

Features & Functionalities

Full service VPN
With F-Secure VPN+ the encryption does not end at the gateway-level; the network can be secured all the way from workstations to servers. F-Secure VPN+ provides encryption for every link in the corporate network chain, Clients, Servers and Gateways.

Full strength security
Full key-length encryption guarantees uncompromised security for all mission critical networks worldwide.

Full speed
F-Secure VPN+ is the fastest software-based IPSec implementation on the market. With normal 333Mhz Intel Pentium II F-Secure VPN+ is able to encrypt 24 Mbit/s of IP traffic with strong encryption.

Full transparency
F-Secure VPN+ is totally transparent to end-users and applications. F-Secure VPN+ can even be installed remotely without ever visiting the workstation.

Full policy enforcement
With F-Secure VPN+ the network administrator can force the corporate security policy into workstations and servers.

F-Secure VPN+ is based on the Internet standard IPSec and Internet Key Exchange (IKE). IPSec is the Internet Protocol Security standard which provides IP-level authentication and confidentiality. F-Secure VPN+ IPSec technology secures all aspects of modern enterprise communications. This includes all IP-based traffic including UDP which makes it easy to share directories on a file server securely.

Centralized Policy Management
F-Secure VPN+ is centrally managed with F-Secure Administrator. This application is capable of creating IPSec security policy databases and distributing them.

F-Secure Administrator is a 100% Pure Java application allowing the management tasks to be performed from any workstation. The administrator can create different security policies for hosts or deploy a single policy over a large domain of hosts. The policy can be distributed over a network to the workstations, servers and security gateways in a LAN.

The security policy defines the contents of the IPSec Security Policy Database on each machine. This security policy database is used as the basis to allow or deny for the connections between F-Secure VPN+ hosts. Security policy databases are signed with DSS.

Web-based logging tool
All F-Secure VPN+ products include a small web-server for viewing statistics of the particular workstation. The logging tool is easy to use for debugging IPSec connections and viewing VPN connections.

Virtual firewall
All VPN+ products support very simple filterings. It is possible to prevent traffic from and to individual hosts. The filtering can be done on IP network, address or on TCP/UDP port level. For very strict security it is also possible to prevent all but IPSec traffic. In this case all connections are authenticated and encrypted.

Together with centralized management the virtual firewall functionality backup and reinforce the traditional firewalls in use.

Authentication algorithms

• HMAC-MD5-96
• HMAC-SHA1-96

Encryption algorithms

• 3DES (168 bit)
• DES (56 bit)
• Blowfish (128 bit)
• CAST128 (128 bit)

Key exchange choices

• Internet Key Exchange (IKE) Protocol; ISAKMP/Oakley with:
• X.509v3 certificates with RSA signatures
• RSA signatures
• DSA/DSS signatures
• PKCS #7, PKCS #10
• Pre-shared keys

Performance

• Average throughput: 15-20 Mbit/s

Available for

• Windows 95, 98, NT 4.0
• Solaris Sparc, Solaris x86