eSafe Protects Users of Leading ISP

One of Israel's leading ISPs, Internet Gold (Nasdaq NMS: IGLD), recently selected eSafe to provide its residential users with secure web access. Known as "e-safe," the service allows users to "surf" the Internet freely, while protecting their computers against viruses, spyware, Trojan horses, and other on-line threats.

This low-cost service is provided transparently via the company's servers and eliminates the need for purchasing or installing specialty software, requires no maintenance or instructions, and does not disrupt users' surfing experiences when threats are encountered.

"Today's most dangerous threats are those received through normal Internet surfing and not only those attached to emails," said Mr. Eli Holtzman, CEO of Internet Gold. "Spyware, Trojan horses and the like secretly implant themselves and transmit private data to the outside world, the only evidence of which is the gradual slow-down of computer performance and degradation of surfing speed. The protection available to average users, such as anti-virus programs or personal firewalls, is often insufficient; either because the programs are not kept up-to-date or because they are too intrusive, requiring average customers to constantly respond to confusing questions."

eSafe advanced content protection is currently in use in a wide range of commercial, banking, and military enterprises throughout the world, securing thousands of networks that interconnect millions of computers. Smile Internet Gold is the first Internet Service Provider to deploy Aladdin's solution to secure its users' communications and thereby offer server-based "Secure Surfing" to its customers.

To learn more about how eSafe can help ISPs provide their users with secure web access, contact an Aladdin representative.

Token Management System (TMS) Version 1.5 Generally Available
TMS v 1.5 is now available to the general public. Key new features in this version of TMS include:
• Easier, modular installation process with the option to use installation scripts
• Option to install TMS Web without installing the TMS server
• Easier navigation in the TMS Manager
• New option for synchronizing tokens which were modified outside the TMS with the TMS database
• Enhanced management of TMS domain and connector licenses
• Improved installation of TMS connectors - connectors are installed independently from the TMS installation, enabling connector updates without updating the TMS version
The Aladdin Token management System TMS™ is a robust management system that enables the deployment, provisioning and maintenance of all of eToken devices, including security Tokens, Smartcards and ID Badges, within an organization. It supports a comprehensive range of security applications such as network logon, VPN, web access, OTP authentication, secure email, data encryption, and many others.

eToken Middleware for Linux 3.60 Released
Key new features in the eToken Middleware for Linux 3.60 include:
• Support for new token models (eToken PRO 64K and eToken NG-OTP)
• Support for 2048 bit RSA keys
• Better compatibility with CAPI keys and certificates
The eToken Middleware for Linux enables application development using eToken on the Linux environment, as well as using eToken with PKCS#11-enabled ready made applications. It provides support for secure token-based authentication and PKI solutions within the Linux environment. It enables the usage of eToken for a number of security applications on a number of Linux distributions.

Using the Linux Middleware you can execute various cryptographic operations which enable certificate based access to secure Web sites, protect your email applications, and access VPN protected sites, using the unique cryptographic ability of the eToken.

eToken Middleware for Macintosh 3.60 Now Available
This is the first version of eToken Middleware for Macintosh provided with full PKCS#11 support.

Following are key new features in the eToken Middleware for Macintosh 3.60:
• PKCS#11 support
• Supports the full suite of eToken devices including CardOS 4.20 based devices (eToken NG-OTP and eToken PRO 64K)
• Support for mail signing and encryption, SSL authentication in MAC with some PKCS#11 applications (i.e. Mozilla, Netscape, Firefox and Thunderbird)
• Simple and fast installation for end-users
• Support for smartcard reader with eToken PRO Smartcard


eToken 2006 Discontinuations Announced
In the continuous efforts to advance eToken product offerings, and in light of the new eToken devices planned for release in 2006, the production of three of traditional eToken devices will be discontinued:
• eToken R2 - end of sales as of January 1st, 2006
• eToken PRO 16K - end of sales as of March 31st, 2006
• eToken PRO 32K with Siemens CardOS 4.01 - end of sales as of June 30th, 2006
Upon discontinuation of these devices, eToken product offerings will include the 32K and 64K models of eToken PRO, PRO Smartcard, and NG-OTP - all using Siemens CardOS 4.20 and up - as well as the eToken NG-FLASH, to be released in the coming months.

In accordance with the official announcements, during the first half of 2006 Aladdin will stop supplying the above tokens to customers, but will continue to support them until the dates specified.

For more information, contact your Aladdin eToken representative.
 
 
Top

 


WMF Vulnerability Explained
The recently publicized WMF exploit allows an image file to contain a small footprint of embedded malicious code that automatically runs upon viewing of the file (this can be in web browsing, email attachments, Windows Fax Viewer and possibly other applications). A Microsoft patch was released January 5, approximately two-weeks after the discovery of this security hole.

The exploit is currently used by web-borne spyware, email worms, spam and phishing emails. It is expected that this exploit will be widely used by malicious code writers in the upcoming months to infect PCs while web surfing.

As soon as the first proof-of-concept exploited WMF files were discovered, eSafe CSRT (Content Security Response Team) and the eSafe Engine R&D team commenced research and created immediate updates to handle the known existing threats. In parallel, the teams developed heuristic code that proactively identified all variants of the threat including spoofed image files.

Since December 29, 2005, a hotfix containing EV132 Content Inspection Engine has been available to address all variants of the exploit, except for spoofed JPEG versions (which are not found in the wild). This hotfix itself has since been updated to cover even more variants, including corrupted (non-malicious samples) and spoofed samples. As this is an important security update, we intend to push EV132 auto-upgrade to all customers in the next few days.

For more information see: /csrt/wmf-vulnerability.asp

eSafe5 FR2 Release Scheduled for March 2006
eSafe5 FR2 is currently scheduled for a March 2006 release. Following intensive QC testing, FR2 beta release is planned for February.

The main new features and benefits in this version of eSafe are:
• URL Filter Profiles
• LDAP integration
• Outbound traffic logging & reporting
Click here to find out "What's new in eSafe5 FR2," or contact your Aladdin representative with any questions.

SpywareNeutralizer™ Released for Beta
The SpywareNeutralizer for networks has been released for Beta. The final Neutralizer is tentatively scheduled for mid-February.

SpywareNeutralizer ActiveX version is scheduled to be released together with eSafe5 FR2. It will be able to inspect local hard disks directly from the web.

For more information or to get your copy of the "SpywareNeutralizer" brochure, contact your Aladdin representative.

Content Inspection Engine - EV132
The EV132 Engine Update was urgently released in early January. This updated engine has many new technologies, including proactive protection against the recent WMF Exploit. eSafe R&D and QA worked very hard to prepare this urgent release and provide eSafe customers with protection against this serious WMF vulnerability.

The EV132 Engine significantly increases eSafe's ability to provide proactive protection against new virus threats and security exploits.

An auto-upgrade is being scheduled for all eSafe4 FR2 and eSafe5 FR1 customers to EV132 during the month of January.

Q: How can eToken be used to log on securely to the Citrix Presentation Server and Secure Access Enterprise solutions?

A: eToken provides enterprises with flexible strong authentication solutions for Citrix Presentation Server and Secure Access Enterprise, enabling both certificate-based and OTP-based strong authentication in client-based and clientless environments.

eToken enables secure Web-based access to the Citrix Presentation Server with one-time passwords using the eToken OTP Authentication for Citrix WI software. eToken offers certificate-based authentication to the Citrix Presentation Server as well, either through the ICA client, or through the Web with SSL authentication using the secured Citrix Web Interface (WI).

For customers using Citrix Secure Access Enterprise 4.0, eToken offers out-of-the-box support for secure Web-based access using OTP, as this version has native support for RADIUS authentication, as well as out-of-the-box support for certificate based strong authentication.




Q: What makes eSafe5 URL Filter so powerful?

Did you know? eSafe5 URL Filter database is updated with 150,000 new web pages per day (this is in addition to 5 million websites which are inspected daily!)

Did you know? eSafe5 URL Filter comes in 15 languages covering 200 countries.

Did you know? eSafe5 URL Filter covers 97% of all regularly browsed web sites in an organization.

Send us your questions/comments for topics you'd like to see covered in "Ask the Expert." If we use your question, we will send you a free gift.

Product News:

IDC Worldwide Hardware Authentication Token Report Lists eToken as #1 in Growth
Based on the recently updated IDC report, eToken is positioned as the second largest vendor in its market, with a growth rate of 111% from 2003 to 2004. This growth leads the top vendor by nearly double the rate.

Aladdin eToken NG-FLASH Offers Flash Mass Storage Combined with USB Authentication

Aladdin to Demonstrate New Cardio-based Biometric Authentication Technology at RSA Show Booth #1237

Aladdin Announces Two New eToken Patent Licensing and OEM Agreements

Aladdin Announces eToken OEM Deal with RSA Security

Aladdin Announces eToken PKI Support for Linux and MAC OS

eSafe and eToken Named Finalists in Five Categories for 2006 SC Awards

Leading Entertainment and Media Enterprise Selects Aladdin eToken

Aladdin eSafe the Only Gateway-Based Solution to Fully Protect Organizations Against New WMF Vulnerability

Aladdin Brings Award-Winning Anti-Virus Protection to Cell Phone Providers

Aladdin Announces eToken PKI Support for Linux and MAC OS

eSafe and eToken Named Finalists in Five Categories for 2006 SC Awards

Leading Entertainment and Media Enterprise Selects Aladdin eToken

Aladdin eSafe the Only Gateway-Based Solution to Fully Protect Organizations Against New WMF Vulnerability

Aladdin Brings Award-Winning Anti-Virus Protection to Cell Phone Providers

---

Corporate News:

Aladdin Joins Microsoft's Virus Information Alliance

Aladdin Knowledge Systems Announces Date of Fourth Quarter and Fiscal Year 2005 Financial Results Release, Conference Call and Webcast

---

Aladdin in the News:

Aladdin's eSafe5 Grants Network Protection Wishes


For the latest news visit the Aladdin Press Room.

Hot Off the Press - The eSafe Reviewer's Guide
This is an extensive guide, designed to show potential customers how to quickly and easily install and evaluate eSafe. It highlights the most important eSafe features not available from the competition. This guide can also be used by marketing for professional press reviewers.

eSafe Sizing Calculator Makes It Easy
Aladdin representatives are constantly asked how to correctly size eSafe for customers' needs. This simple calculator provides the answer. For more information or to get your own eSafe Sizing Calculator, contact your Aladdin representative.

CSRT Report 2005 Now Available
The Aladdin Content Security Response Team (CSRT) released an extensive overview of its activities in 2005, including statistics showing a significant increase in proactive detection throughout the year.

Highlights from this overview:

• eSafe proactively detected more than 96% of all virus outbreaks in 2005.
• The average time to issue an update was shortened to 47 min.!

To request your copy of the CSRT Report, contact your Aladdin representative.
 
 

eToken Demo Goes Online
The eToken Strong Authentication Demo is now available.

The purpose of the demo is to show how eToken can easily be deployed and used for strong user authentication in a real-life environment, enabling both certificate-based and one-time-password-based authentication in just a few minutes. The demo is a high-end tool for eToken sales people, resellers, and partners that can be used to demonstrate eToken's strong authentication capabilities and ease-of-use.

As a tool for the demo, a dedicated high-end kit that contains an eToken NG-OTP and a demo quick start guide has been created. To get more information on accessing the eToken Strong Authentication Demo and the Demo Kit, contact your Aladdin representative.

Upgrades to the eToken Starter Packages and SDK Package
Changes have been made to eToken packages. Main improvements include:

• Box design and graphics have been upgraded
• The packages now contain two sections, one for documentation and one for the hardware and CD, to ensure a more professional and organized placement of contents
• The Enterprise and SDK CDs have been redesigned with enhanced and updated product information, graphics, software, and documentation
• The packages include printed RTE 3.60 and SDK 3.60 (if applicable) documentation

eToken Regulatory Compliance Documents Released
The first two in eToken's series of documents on the topic of regulatory compliance are now available. The first document describes eToken compliance to the Sarbanes-Oxley Act (SOX); and the second, with Basel II.

These documents focus on key regulations worldwide that mandate organizations protect their internal data and meet IT security standards, demonstrating how eToken can help organizations comply with these regulations.