The document discusses e-Xpert Gate, a web-based secure access solution that allows users to access internal applications from any device with a web browser. It provides strong authentication using RSA SecurID or SSL client certificates to securely access intranet resources through a firewall. The solution uses SSL/TLS to encrypt traffic and authenticate users, preventing direct unsecured access to internal servers and networks.

1. e-Xpert Gate e-Xpert Solutions SA [email_address] 2 mars 2001

2. e-Xpert Gate ? Access your applications from everywhere with strong confidentiality and authentication

4. Solution ? Use your favorite browser

6. But how to solve security issue ? Web-based Internal Resources What should I do ? Firewall Dmz Browser

7. Direct access with http or https ? Firewall Dmz Browser Web-based Internal Resources Why not ?

9. Secure access with e-Xpert Gate Firewall Dmz Browser Web-based Internal Resources E-Xpert Gate SSL

11. Reverse Proxy Technology Server within a firewall The proxy server appears to be the content server A client computer on the Internet sends a request to the proxy server Firewall CACHE The proxy server uses a regular mapping to forward the client request to the internal content server You can configure the firewall router to allow a specific server on a specific port (in this case, the proxy on its assigned port) to have access through the firewall without allowing any other machine in or out. https (SSL) http or https

16. About authentication ? Your business is on the line. But do you really know who’s on the other end?

17. Two-factor User Authentication

20. RSA SecurID implementation Dmz Web-based Internal Resources E-Xpert Gate

21. RSA tokens

22. How it works ? Seed Time 482392 ACE/Server Token Algorithm Seed Time 482392 Algorithm Same Seed Same Time

23. SecurID exemple

24. SSL client authentication implementation Dmz Web-based Internal Resources PKI architecture Client X509 Certificate E-Xpert Gate

25. What is a certificate

27. Client side authentication Web Client Web Server Challenge Client Certificate Request Challenge answer Client Certificate

28. How secure is the private key ? How does the user get access? Where is it stored? Smart Card PIN Password Local Browser store Private key

31. Lotus access with e-Xpert Gate

32. Outlook Web Access

37. Questions ?