CloudSpanCloudConnect

SecurelyConsumeSaaS&CloudBasedServices

CloudSpanCloudConnectoffers: SingleSignOnforSaaS Utilizeexistingenterprisedirectory andLDAPresourcestologusersand machinesintoSaaSapplications, therebycreatingasinglepointof maintenanceforallusers/machine IDsacrosstheextendedenterprise. SecureSaaSIntegration Facilitateintegrationbetween enterpriseapplicationsand SaaS/Cloudbasedservices byprovidingyourinternal developerswithaconsistent, centralizedwaytomanageexternal APIs.Ensuresystemsofrecord arealwaysuptodate. SaaSUsageTracking Knowingwhoinyourorganization isusingwhichSaaSapplication howcanoftenhelpyoutoensure compliancewithcorporateand governmentregulations,aswell ashelpingtooptimizeSaaSlicensing. TolearnmoreaboutLayer7 andhowitcanaddressyour organizationsneeds,call1800681 9377(tollfreewithinNorthAmerica) or+16046819377.Youcanalso: emailusatinfo@layer7.com;friend usonfacebook.com/layer7;visit usatlayer7.com;followus onTwitter@layer7

WebandWebservicesSSO,coupledwithsecureapplicationintegrationlets enterprisesgovernhowtheyconsumeSaaSapplications

GovernYourCloudUsage
SaaSandotherCloudbasedapplicationproviderssimplycannotgiveenterprisesthesame levelofcontroltheyhavebecomeaccustomedtofortheironpremiseapplications.Infact, licenseagreementstypicallyfocusonlyoncustomerdataprotection,offeringlittletono guaranteesaroundavailability,securityandcompliance.Despitereservations,however, manyenterpriseshavealreadyembarkedonconsumingSaaSandCloudservicesata departmentalifnotcorporatelevel,tradingcontrolforthecostbenefitsandconvenienceof anondemandsolution.

Layer7sCloudSpanCloudConnectletsenterprisesregaincontrol,enablingthemtosecurely consumeSaaSandCloudbasedservicesbyprovidingnotonlysecureSaaSandWebservices SingleSignOn(SSO)butalsosecureapplicationintegrationandusagetracking.

CloudConnectactsasaPolicyEnforcementPoint(PEP)locatedintheenterprise,allowing youtoaddyourownlayerofcontrolandvisibilitytohowyourorganizationconsumesSaaS applications.BycreatingandenforcingpoliciesonCloudConnect,enterprisescanimplement finegrainedaccesscontroloverwhoandwhatenterpriseresources/userscaninteractwith whichSaaSapplicationsallwithoutcoding.Asaresult,enterprisescangovernhowthey consumeSaaSapplicationswhilemakingthoseresourcesfeellikeandoperateasextended partsofasecureenterprise.

SSOforWeb&WebServices
Overthepastdecade,enterpriseshaveinvestedheavilyincreatingcentralizedidentityand accessmanagement(IAM)infrastructures.BydeployingaCloudConnectXMLGatewayin theDMZ,enterprisescanextendtheirIAMinvestmentstotheCloud,utilizingexisting identityinfrastructuretoprovideauthorizationandauthenticationforusersaswellas applicationsloggingintoSaaS/Cloudservices.

Inthisway,enterprisescanextendbusinessprocessesouttoexternalSaaSandCloud providers,simplifyloginforSaaSusers,trackSaaSandCloudusageandcentralizeIDsforuse acrosstheextendedenterpriseinasingle,onpremisedirectory,eliminatingpotential securitybreachesthatarisewhenemployeesleavingacompanyareremovedfromthe enterpriseIAMsystembutstillretaintheirSaaSlogins.

SecureIntegration
EnterpriseshaveinvestmentsinsystemsthatwillnotbemigratingtotheCloudanytime soon,includingaccounting,customerandbillingsystems.Toensurethesesystemsofrecord arealwaysuptodaterequiresthemtobeintegratedwiththerangeofexternalCloud applicationsinusebytheenterprise.CloudConnectfacilitatesWebservicesbased integration,allowingyoutosecurelyconnectSaaSapplicationstoyouronpremise resources.Inthisway,enterprisescanimplementcontroloverCloudbasedinformation exchangewhilegoverningtheexposureoftheirAPIsbacktotheserviceprovider,aswellas managinghowCloudproviderAPIs,inturn,getpresentedtointernalenterprisedevelopers.

KeyFeatures
Identity&MessageLevelSecurity
Identitybasedaccessto servicesandoperations Integrationwithleadingexternalidentity,access,SSOandfederationsystems, includingLDAP,MicrosoftActiveDirectory,OracleAccessManager,IBMTivoli (TAMandTFIM),CASiteMinder,SunJavaAccessManagerandNovell AccessManager Onboardidentitystoreforadministeringidentitiesandstagingnewservices Credentialchaining,credentialremappingandsupportforfederatedidentity IntegratedSTS/SAMLissuersupportsSAML1.1/2.0andSecurityContextTokens IntegratedPKICAforautomateddeploymentandmanagementofclientside certificatesandRAabilityforexternalCAs,includingVerisign OptionalonboardHSMandsupportforexternalHSMs(nCipher,Luna,etc.) Supportforellipticcurvecryptography(conformstoNSAsSuiteBalgorithms) FIPS1402supportinbothhardware(Level3)andsoftware(Level1) SupportforWebbrowserSTS,facilitatingSingleSignOnforuserslogginginto SaaS/Cloudapplications ConfigurablevalidationandfilteringofHTTPheaders,parametersandformdata Detectionofclassifiedordirtywordsorarbitrarysignatureswithsubsequent scrubbing,rejectionorredactionofmessages SupportforXML,SOAP,POX,AJAX,RESTandotherXMLbasedservices ProtectionagainstXMLparsing,XDoSandOSattacks,SQLandmaliciousscripting languageinjectionattacks ProtectionagainstXMLcontenttamperingandvirusesinSOAPattachments ConfigurableoutoftheboxreportsprovideinsightintoSSGoperations,service levelperformanceanduserexperience. Reportonserviceperformance,policyviolationsandSLAconformancebasedon specificcustomers,composites(i.e.processesandtransactionsusingaservice)or clients,tobuildaprofileofactualenterprise/Clouduserexperience. Logmessageleveltransactioninformation Spoollogdatatooffboarddatastoresandmanagementsystems Activeactiveclusterable,dualpowersupply,mirroredhotswappabledrives,two waydualcore1Userver Solaris10forx86andNiagara,SUSELinux,RedHatLinux4.0/5.0 VMware/ESX(VMwareReadycertified)

Managesecurityforcross domainandB2B relationships Cryptography

WebSSO

ThreatProtection
FilterXMLcontentforWeb 2.0andSOA PreventXMLattack andintrusion

Logging&Reporting
ServicesReporting CustomerMapping

AuditandLogging

FormFactors
Hardware Software VirtualAppliance

SupportedStandards
XML,JSON,SOAP,REST,PCIDSS,AJAX,XPath,XSLT,WSDL,XMLSchema,LDAP,SAML,PKCS,FIPS1402,Kerberos, X.509Certificates,XMLSignature,XMLEncryption,SSL/TLS,SNMP,SMTP,POP3,IMAP4,HTTP/HTTPS,MQSeries, TibcoEMS,WSSecurity,WSTrust,WSFederation,WSSecureExchange,WSAddressing,WSSecureConversation, WSMetadataExchange,WSPolicy,WSSecurityPolicy,WSPolicyAttachment,WSIL,WSI,WSIBSP,UDDI,WSRR, MTOM,IPv6,WCF TolearnmoreaboutLayer7callustodayat+18006819377(tollfreewithinNorthAmerica)or+16046819377. Youcanalso:emailusatinfo@layer7.com;friendusonfacebook.com/layer7;visitusatlayer7.com,orfollowus ontwitter@layer7.

Copyright2011Layer7TechnologiesInc.Allrightsreserved.SecureSpan,CloudSpanandtheLayer7Technologiesdesignmarkare trademarksofLayer7TechnologiesInc.Allothertrademarksandcopyrightsarethepropertyoftheirrespectiveowners.