true access

Spam is the term to refer to unsolicited emails, which usually are sent to many people at same time. When the content is exclusively commercial, such message is so-called UCE (Unsolicited Commercial E-mail) In the following, there are some benefits provided by this service:

• Microsoft Exchange Server Protection against spam and phishing threats.
• It hinders internet infrastructure abuses regarding illegal activities (frauds, data theft, etc)
• It increases the tracking in cases of abuses.

Device protective tool which work against infections from malicious programs, such as: virus, spyware, trojans, rootkits and all kind of code that, if executed, might provoke unavailability or might steal confidential information. Antivirus can work based on signature updates or through the application behavior analysis.

True Access solution brings benefits directly linked to security:
• Risk reduction related to desktops, laptops and mobile devices.
• It protects against any propagation and entrance of threats (virus, spyware, hackers, bad-intentioned users).

True Access Consulting offers a solution on digital signature which simplifies the process of generation and storage for electronic certifications so that ensures all benefits of authentic digital document usage with legal validity among companies.

The solution on digital signature was regulated by ICP-Brasil (Brazilian Public Key Infrastructure) which provided legal validity for documents signed in accordance with its determinations.

The solution on Digital Signature by True Access Consulting decreases operational costs and increases the agility in processes which demands signed documents.

Tool which allows keeping confidentiality in case of unauthorized access or equipment theft. It can be in files, folders, hard disks or portable storage devices (tokens USB, external hard disks, etc.)

True Access Offer to solve this problem brings the following benefits:
• Conformity with the laws, norm and regulations;
• It protects the information in case of equipment theft;
• Risk reduction relating to desktops, laptops and mobile devices.

This feature protects the IT environment against internal user accesses on hostile or unwished content from internet. Basically it is a list of websites that might have their content blocked or accessible.

Generally, the website classification is made through a categorization. For instance: news, financial news, education, banks, leisure, culture, etc.

Most WEB FILTER solutions in the market offer a maintenance service of website categorization. In other words, the list of websites is automatically updated and downloaded from the server which has the referred solution installed.

Among the benefits of this business, we can mention:
• To allow greater control on data accessed content inside corporative environmen;t
• To control the use of internet /company intranet links;
• To allow adherence with standards, norms and legislation concerning security information.

The firewall provides network protection by the dataflow controlling. The aim is to allow only the authorized traffic profile by the present security policy.

Although it represents the protection basic element, the firewall cannot be understood as sole solution and able to offer protection completely. As attack techniques evolve, it has become necessary to introduce new security layers for complementing the protection offered by firewall.

True Access Firewall Solution provides greater benefits when it works together IPS. Among the benefits, we can mention:
• To provide information protection and corporative computer resources;
• Ensure remote connections through internet and/or intranet;
• Data surveillance and monitoring;
• It isolates network critical segments, providing greater security.

The need for connectivity in the corporative environment is each greater than before and in most of organizations it means a business requirement.

However the connectivity increasing level represents huger exposition to existing threats, elevating the risk which the environment is subject to.
Thus, the challenge of security information managers is to provide security ways to protect the corporative computer resources even against the increasing exposition level of the threats.

Intrusion Prevention System is an evolution of IDS (Instrusion Detection System).
The fact blocks the attack, whereas IDS only detects it. IPS is inserted on network area so that surveys the data traffic and blocks the identified attacks.

IPS solution by True Access provides increasing on security level of corporative network in order to offer protection against the increasing number of existing threats.

NAC is a technology which uses the network infrastructure to ensure the security policy application in all devices that look for access resources in a given network.

It limits possible damages from unknown threats because it allows the access only in authorized terminal and in conformity with security policies.

Its performance is based on three main elements:
• Policy Server – Server where is defined the policies and the report generation;
• Agent – Perform the compliance check on desktops according to the policy defined by administrator;
• Enforcer – Server that, depending on agent answer (PASS or FAIL), uses existing infrastructure to allow (or not) network access.

True Access' Network Access solution reaches higher results than port restriction technology. The latter shows difficulties on big network management and overloads slightly the administrators in case of any change in one of network knots.

The Internet usage and the increasing online service offers have risen as much as attacks for user passwords. In Brazil, such everywhere in the world, there are specialized groups which develop softwares to theft access codes of banks/finance companies, etc. In order to avoid those events involving double identities, it is necessary to introduce a new element in the authentication process that cannot be caught, nor cloned.

Aiming this problem, True Access, a company specialized in security information develops a solution based in HSM (Host Security Module), Dinamo. The HSM allows the deployment of OTP as a second authentication factor, either by SoftTokens (password generation software installed in mobile devices, as cell phones or smart phones), physical tokens or even TAN Code tables (Also known as password tables).

True Access's OTP Infrastructure was built based in its HSM (Host Security Module), the Dinamo. OTP authentication is based on a secure cryptography process, established by the protection of password seed. That is the reason for creating of a solution based on Dinamo. Besides the information security warranty, the random seed generation uses an extremely reliable infrastructure with highest performance, load balancing and support to contingencies.

• Seed generation and security by HSM Dinamo
• OTP authentication based on events (RFC 4226), time and challenge / response
• Support to OATH Standard (Open Authentication)
• Physical token authentication by 160-bit OATH seed importing.
• SoftToken Generation and Issue for installing in cell phones, PDAs and other mobile devices.
• TAN Code Generation for printing password tables

The best solution in the market has the function of "Endpoint Security". It consists in analyzing the security level of user PC during the connection and allowing the access if meets the requirements of previously-established security policy.

The challenge is to provide connectivity to those users as much simple as possible and without risk the security of corporative environment, using the following requirements:

To provide remote access, compatible with organization policy and to simplify the remote access, making it as easier as possible to users;

• To use a strong authentication process;
• To avoid that remote stations being taken as attack vectors to corporative network;
• To protect information in case of equipment theft;
• Risk reduction relating to desktops, laptops and mobile devices.

Almost all organizations have necessity in remote access, such as:
• Technical support during periods out of office hours;
• User access during travels;
• User access during external activities;

Remote Access VPN solutions allow their clients to access the corporative network by users outside environment organization provided these users have a simple connection to internet. This way, it is possible to provide greater mobility to users, resulting in productivity increase to the organization as a whole. In some cases, the remote access is a business requirement, especially in companies which has personnel in the field, such as: salesman, auditors, etc.

The remote access shall be performed based on the following premises:
• Confidentiality
• Authenticity
• Integrity
• Availability
• Simplicity
In sum: To provide remote access with security and simplicity.

The need for fast and effective information access has been pushing local network technologies, providing access ways each faster. In case of remote network, although we have communication lines each faster, their cost is high and the communication channel usage is not always optimized. Wan optimizing tools allow the communication channel effective usage through caching techniques, compression, prioritization, among others. Those procedures allow greater effectiveness and lesser costs.

An interesting way to improve the storage resources is using archiving techniques. Data archiving also is used to make best use of equipments that soon will be substituted by newer ones.

When data are filed, they are moved from a main area (production) to a secondary area. As a standard, the secondary area has a slowly architecture and it is focused in long-term storage. In most cases, files and emails are the focus of archiving.

This offer allows archiving solutions that might bring several benefits, such as:
• Fasten Data access;
• Backup management;
• Report generation for monitoring;
• Message level restoration;
• Integration with MS SQL 2005 snapshot system;
• Data restore;
• Data archiving;
• Resources optimization.

The resource optimizing, as well as the service availability maintenance (supported by TI structure) is one of main functions of cargo balancing solutions. Through partnerships with manufacturers acknowledged in the market, True Access offer cargo balancing solutions fitted to its client's environment.

In business world, it is only possible to reach the planned results as the necessary data could be accessed by the companies. This is possible when data is securely and availably stored. Due that, it is necessary to count on a special management that ensures high protection/performance levels to support, since failings during storage up to complete procedure elaborations in case of more serious problems (disaster recovery).

That is why True Access offers the Storage Environment Management solution. This solution aims to increase the flexibility; ensure highest availability levels; manage the involved assets; virtualize storages; check if resources are being correctly used.

The network infrastructure has an essential role in the quality of services offered through computer systems. We offer infrastructure solutions by high performance/technology switches & routers.

These equipments are essentially are disk servers. Their architecture aims to increase performance and availability; disk space optimization through a better data distribution; flexibility to extend and adapt of new technologies.

• Storage solutions;
• Storage Supply;
• Information Life Cycle Management Software;
• Document Archiving;
• Email Archiving;
• Storage resource optimization, avoiding the usual problem of services with problems about disk space while there are other services with huge empty areas;
• Conformity Policies (SOX, ISO, etc);
• Storage resource usage Resistance ;
• Long-term data archiving;
• off-site data retention;

While there are an increasing volume data, the traditionally-used resources for backup procedures and stored data management are not meeting the required efficiency of companies. The greatest problems faced by companies are: inadequate time of restore and backup windows, data storage infrastructure (duplication & management) bad-employment and high-operational costs.

In-tape Data transference tends to be slowly, allowing an inadequate backup window. Virtual tape library is a data storage virtualization technology generally used for Backup/Restore. It allows to perform the backup at any other device, emulating the backup traditional tapes at existing softwares.

• High-performance on Backup and Restore time;
• Better operational costs;
• It increases scalability, security and backup host integration.