Chapter 1: Introduction
SafeWord components and functions
9
The SafeWord Internet Authentication Service (IAS/NPS) Agent
Note:
Though listed in this guide as the IAS Agent, it also covers the Network
Policy Server (NPS).
SafeWord provides strong authentication to SSL VPNs, IPSec VPNs,
commservers, and other RADIUS (Remote Authentication Dial-In User
Service) devices. Simply install and configure SafeWord’s IAS/NPS Agent,
which works with Microsoft’s IAS RADIUS, to provide strong authentication to
RADIUS devices through the Microsoft IAS RADIUS server.
Once the IAS Agent is installed and configured, VPN and RADIUS users who
remotely access their network and are designated as requiring strong
authentication must enter a SafeWord token-generated passcode for access.
Users in the SafeWord database may also use a fixed password.
For more information about Microsoft’s IAS, see:
http://search.technet.microsoft.com/Default.aspx?locale=en
us&Query=IAS&lang=en-us
The SafeWord Agent for Web Interface
The SafeWord Agent for Web Interface is for use with Citrix. It resides on the
same Citrix server on which the Citrix Web Interface is installed, and provides
the link to the SafeWord server. It intercepts user access requests and routes
them to the Authentication Engine for user name and passcode verification.
Once properly authenticated, users are allowed access; otherwise access is
denied.
The Citrix Access Gateway (CAG) Agent
SafeWord adds strong authentication to Citrix Access Gateway through the
SafeWord CAG Agent. The agent uses the standard SafeWord administration
tools, and installs directly on top of Advanced Access Control (AAC) when the
CAG Agent is configured with the AAC option.
Note:
If CAG does not have the AAC option, the gateway appliance can be
configured for RADIUS authentication using the IAS/NPS Agent.