CAIL - Secure Systems

Introduction

CAIL provides several options to enhance system security – easily, quickly and economically.


This includes having secure communications for sessions and file transfers – both for Host / PC and Host / Host requirements. As well this applies to NonStop based information services, or in conjunction with an enterprise strategy to address security requirements for all systems.


This is summarized as follows –

A. CAIL Security Facility - for more trusted NonStop systems
1. Session encryption with -
- Browser or Windows clients
- Host to Host communications
- Pathway, RSC, ODBC communications
2. Range of encryption options (ie: SSL, SSH, AES, DES, D-H, etc.)
3. Operates with CAIL and other Clients
4. Secure File Transfer (FTP, SFTP, FTPS, IXF, CAIL) and Audit capabilities
- For more details, please visit www.cail.com/security
B. EXTRA! X-treme - Enterprise Connectivity & Security Solution
1. Provide a single icon on the screen to access all Host based applications -
consistently across platforms
(ie: for heterogeneous environments with NonStop, Mainframe, Midrange, UNIX/Linux, DEC, Windows, Unisys systems)
2. Better integrate all information services into enterprise IT infrastructure
3. Leverage the investment in all current systems for new business initiative
.... with the ability to produce results quickly, easily and economically
.... including addressing enterprise security policy and compliance requirements
4. Increase the value, profile and opportunities for NonStop systems based information services in the enterprise
- For more details, please visit www.cail.com/cabenefits and www.attachmate.com

CAIL Security Facility

A. Telnet :
- Standards based TLS 1.0 / SSL 3.1 or SSH secured telnet sessions
- TLS 1.0 / SSL 3.1 standard authentication of the client via certificates
- Can do encryption only - if authentication is not required
- Includes Guardian based CAIL SSL Telnet Proxy software at no extra cost
- CAIL Host Proxy supports NonStop operation and works with any SSL enabled 6530 client
- CAIL Client includes 6530 mode for Guardian and VT mode for OSS - both can use the CAIL SSL Telnet Proxy
- SSH encryption supported on the NonStop host by Bowden Systems NSK-SSH software
B. FTP :
- Choice of clear text, TLS 1.0 / SSL 3.1 (FTPS), or SSH (SFTP) encrypted FTP sessions
- TLS 1.0 / SSL 3.1 standard authentication of the client via certificates
- Can do encryption only - if authentication is not required
- Includes Guardian based CAIL SSL FTP Proxy software at no extra cost
- Auto sensing of mode (Guardian or OSS) on connection
- Dynamic switching between Guardian and OSS modes during a session
- Auto sensing of transfer type (text or binary) in both directions
- Auto appending of file type to PC file name on transfers from NonStop to PC (ie: code 100 file named "test" will be named "test.100" on the PC)
- Real time volume and subvolume listings in FTPS sessions
- Includes Guardian based CAIL Client SSL FTP Proxy - for encrypted FTP file transfers between NonStop hosts and other systems (that support FTPS)
- SFTP mode supported on the host (with Bowden NSK-SSH software)
C. Any Socket Based TCP/IP Connections :
- Encryption of arbitrary socket based TCP/IP data streams between the PC and a NonStop host
- DES / AES encryption with fixed key or Diffie-Hellman key exchange
- Encrypt sensitive data for ODBC, Pathway, RSC connections
- Guardian based host proxy supporting NonStop operation
- CAIL Client software runs as a service - no user action required once installed and configured to start automatically
- Transparent to both client and host software
For an expanded description of these capabilities, please go to www.cail.com/techhigh and www.cail.com/security
download printable version