---------------------------------------------------------------------------- The Florida SunFlash SunSoft Introduces New Products To Increase Security On Unix Networks SunFLASH Vol 31 #19 July 1991 ---------------------------------------------------------------------------- SunSoft and RSA Sign Technology Agreement Top Vendor Offerings Bolster SunOS and Network Security MOUNTAIN VIEW, Calif., --July 23, 1991 -- SunSoft, the systems software subsidiary of Sun Microsystems, Inc., today introduced Account Resource Management (ARM) and Automated Enhanced Security Tool (ASET), two powerful additions to its Sun SHIELD(TM) software security product family. The new software products increase security for UNIX(R) networks in commercial, technical and government installations. SunSoft also announced a technology agreement with RSA Data Security, Inc. In addition, several software vendors today introduced security products for SunOS. SunSoft's ARM and ASET enable corporate MIS managers and network administrators to create customized security solutions that help protect their UNIX networks from security breaches. ARM and ASET join Sun SHIELD's other products that offer data encryption, authentication and a variety of government-required software security features. These products are also important components of a comprehensive software environment to be unveiled by SunSoft at its early-September Developers Conference in San Jose, Calif. "As UNIX networks rapidly take hold in corporations worldwide, market leaders are stepping forward to provide MIS with flexible and comprehensive tools to protect their most important investment -- information," said Bill Coleman, SunSoft's vice president of systems software. "The depth and breadth of these SunOS solutions prove that security is no longer a barrier to the adoption of UNIX in corporate environments." "Security is a major concern in our large network environment," said Jerry Carlin, senior systems programmer for Pacific Bell. "Automatic security features are really needed to help administrators do their job, as well as help control costs. During testing, ARM and ASET helped us meet Pacific Bell's strict security standards." SunSoft Signs Agreement with RSA SunSoft today also announced a joint agreement with RSA Data Security, Inc. of Redwood City, Calif., to incorporate RSA's data encryption technology into existing and future SunSoft security products. The first use of RSA technology will be for network authentication in SunSoft's ONC(TM)/NFS(R) distributed computing technology. ONC/NFS is an industry standard in multi-vendor networks with an installed base of more than 1.3 million nodes. Network authentication helps users control access to sensitive information stored on the network. The agreement allows for the more than 300 licensees of the ONC/NFS networking environment to obtain RSA technology for use in their own implementations of ONC/NFS. "Public key technology makes it possible to have open network access and maintain data access control and confidentiality," said James Bidzos, RSA President. "SunSoft's leadership role in providing this widely used and recognized technology in their industry-standard ONC/NFS networking environment will be of tremendous benefit to users." Pricing and availability for the RSA data encryption technology will be announced at a later date. New Third-Party Security Products DEMAX Software, San Mateo, Calif.; Security Dynamics, Cambridge, Mass.; and Software Security, Stamford, Conn., today unveiled new products that provide significant security capabilities to SunOS. The new products address critical network security issues such as security management, software piracy and user authentication. Product details are available directly from each vendor. SunSoft's ARM Secures Entire Network System administrators can use ARM to create solutions that meet their companies' unique security requirements. Unlike other security enhancements developed for competing UNIX operating systems, ARM for SunOS lets administrators specify their own parameters for functions such as the length of user passwords and the number of allowable attempts at logging into, or gaining access to a system. ARM also plays an important role in securing whole networks against unauthorized data access. For example, network administrators can establish a limit on login attempts for an entire or specified area of the network, as well as for individual systems. ARM helps protect UNIX networks against external and internal security threats such as intrusions by system "crackers" and malicious activities of disgruntled or ex-employees. ARM's system safeguards include password aging, user account expiration, access hours restriction and automatic lockscreen. Each feature can help companies thwart attempts to guess passwords, break into the system after-hours and use unoccupied workstations without authorization. ASET Automates System Security ASET enables system administrators to adjust the levels of security on their networks -- from the most open access to the most restrictive. As a result, SunOS networks can meet the various security requirements of commercial, technical, and government organizations. ASET performs tasks such as tightening file permissions and checking the integrity of critical system files, including password files. The product automatically modifies the system to comply to the desired security level. It then reports the problem if it can not automatically eliminate a security hazard such as a user account without a password. For high-security environments, ASET enables system administrators to build a "firewall." A new mechanism for protecting networks, firewalls are gateway systems that connect a company's internal network to an external network such as the widely used Internet. They protect the internal network from hazardous intrusions such as the 1988 Morris Worm, which traveled through the Internet and severely damaged unprotected internal networks. Availability ARM and ASET are compatible with SunOS Release 4.1.1 and other UNIX software platforms that comply with SPARC(R) Compliance Definition (SCD) 1.0. The new security products will be available from SunSoft in the third quarter of 1991 and Sun will make ARM and ASET available to its end users through its worldwide distribution channels in the third quarter of this year. SunSoft, Inc., headquartered in Mountain View, Calif., is a subsidiary of Sun Microsystems, Inc. The company is the leading worldwide supplier of operating systems, networking, windows and desktop products for distributed computing. SunSoft's products are targeted at systems manufacturers, software developers and end users. # # # UNIX is a registered trademark of UNIX Systems Laboratories, Inc. SPARC is a registered trademark of SPARC International, Inc. NFS is a registered trademark, and ONC and Sun SHIELD are trademarks of Sun Microsystems, Inc. licensed to SunSoft, Inc. All other products mentioned herein are identified by the trademarks as designated by the companies who market those products. Inquiries concerning such trademarks should be made directly to those companies. PR contacts: SunSoft: Shernaz Daver (415) 336-0678 Hi-Tech Public Relations Claudia Carasso (415) 864-5529, x241 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ For information send mail to info-sunflash@sunvice.East.Sun.COM. Subscription requests should be sent to sunflash-request@sunvice.East.Sun.COM. Archives are on solar.nova.edu and paris.cs.miami.edu. All prices, availability, and other statements relating to Sun or third party products are valid in the U.S. only. Please contact your local Sales Representative for details of pricing and product availability in your region. Descriptions of, or references to products or publications within SunFlash does not imply an endorsement of that product or publication by Sun Microsystems. John McLaughlin, SunFlash editor, flash@sunvice.East.Sun.COM. (305) 776-7770.