High Performance and Availability

RSA® Authentication Manager software is built upon an enterprise-class, multiprocessor architecture capable of handling millions of users and up to hundreds of simultaneous authentications. RSA Authentication Manager software is deployed in more than 18,000 authentication installations worldwide in banking, government, manufacturing, high technology, healthcare and more.

Configuration Flexibility

Designed to match the requirements of customers of all sizes, RSA Authentication Manager is available in two versions, Base Edition and Enterprise Edition. The Base Edition provides for a master server and one replica to ensure maximum availability. The Enterprise Edition supports up to ten replicas in each of up to six realms, offering increased performance and high system availability that lets organizations plan efficient, economical, global network topologies.

Licensing Overview Licensing Options At-a-Glance

Database Replication and Load Balancing

The database replication feature of RSA Authentication Manager enables flexible network configuration, load balancing and, ultimately, higher performance and simplified, lower-cost management.

With database replication, security administrators are able to increase performance by configuring multiple replicas and distributing authentication requests across multiple servers. Authentication requests are routed to the fastest-performing server, resulting in more efficient performance.

RSA® Authentication Agent software provides automatic load balancing by detecting replica server response times and routing authentication requests accordingly. In addition, organizations can define their own load-balancing sequence by defining a pick list in the RSA Authentication Manager configuration file. RADIUS users can do the same using RADIUS hunt groups.

Centralized, Easy Administration and System Management

RSA Authentication Manager software offers a high level of management flexibility and control. Using RSA Authentication Manager administration and reporting tools, administrators can track user authentication to their network anywhere in the world in real time; update security policy simultaneously across the worldwide network; and develop a global network toplogy that increases network performance.

RSA Authentication Manager software provides management directly from the server console and remotely from a Windows® interface or from a web browser, delivering centralized administration of tokens, users, and servers across your network.

Native LDAP support and QuickAdmin, a web-based help desk utility, make the security administrator’s job easier. LDAP support enables the RSA Authentication Manager software to take advantage of the user and group information in the directory. Automated LDAP to RSA Authentication Manager import and synchronization utilities let administrators bring the data from the directory into the RSA Authentication Manager program and keep the data synchronized. RSA Authentication Manager software supports leading directories such as Microsoft® Active Directory®, Sun® ONE LDAP Directory, and Novell® eDirectoryTM.

QuickAdmin allows the security administrator to modify user and token information without installing an admin client on every desktop. RSA Authentication Manager help desk administrators can use this web interface tool to handle 80% of RSA SecurID calls, usually such as "I forgot my PIN", "I lost my token." QuickAdmin provides a simple, web-based interface to deal with these calls. Administrative scoping allows companies to specify the users that an administrator can view and manage.

The RSA Authentication Manager Enterprise Edition also includes RSA SecurID® Authentication Deployment Manager, an automated token deployment tool that significantly reduces the time and cost to deploy the solution. RSA Authentication Deployment Manager also provides user self-service functionality.

Improved Uptime and Reduced Risk

To support mission-critical sites, RSA Authentication Manager Enterprise Edition software is certified to run on the VERITASTM Cluster Server High Availability platform on Sun® SolarisTM machines. Support for up to ten replicas with the RSA Authentication Manager Enterprise Edition provides additional disaster recovery and fail-over options.

RSA Authentication Manager administration tools make it easy to promote any replica to the status of primary server, thereby quickly and flexibly restoring administrative capability in the case of a system failure.

Compatible with Leading Standards

RSA Authentication Manager software includes an 802.1x-compliant RADIUS server, powered by Funk Steel Belted Radius. The RSA Radius server supports PAP and EAP authentication protocols including POTP, TTLS, PEAP, and EAP15. RSA Authentication Manager software and RSA SecurID Authenticators also support the Advanced Encryption Standard (AES).

Audit and Reporting

Because RSA Authentication Manager software logs all transactions and user activity, administrators can utilize it as an auditing and accounting tool. It includes report templates that can be easily tailored to administrative needs, including activity, exception, incident and usage summaries. For auditing purposes, administrators can define which server events to capture, saving them the time of going through data that they don’t need to review.

Security Features

RSA Authentication Manager software utilizes RSA Security's encryption expertise and technology to provide a strong solution. All key aspects are encrypted, including user PIN, agent and server communications, server database, remote administration and QuickAdmin sessions.

The system also features evasion of attack logic that automatically detects attempted intrusions or use of stolen tokens. This prevents unwelcome network attacks by tracking user authentication between replicated servers and blocks redundant requests in order to prevent replay attacks against servers or agents.

Application Program Interfaces

An administrator toolkit enables RSA Authentication Manager integration into custom applications through C and Tcl routines. API’s enable administrators to extract information from the server logs for reporting and auditing, and a multi-threaded agent API lets administrators build custom RSA® Authentication Agent software.

Turnkey Interoperability

RSA Authentication Manager software is instantly interoperable with more than 300 of the major network infrastructure products on the market, providing your organization with maximum flexibility and investment protection. Through the RSA Secured strategic partner program, leading vendors of remote access products, VPN’s, firewalls, wireless devices and applications have built RSA Authentication Manager compatibility into their products.