May 21, 2007 | Comments: (0)
Interop: Two-Factor Coolness from Positive Networks
Purty cool for the SMB set. Positive Networks is a managed VPN provider. On that front they're launching a new reseller program that's aimed directly at SMB tech providers. But to make it sexy, they introed a new two-factor authentication feature.
Using your cell phone.
It's neat. Instead of having users carry a smart token, Positive's new PhoneFactor deal waits for an auth request (and not just using Positive's VPN service; this works with any VPN platform). When it gets the request, it clicks back to a server managed by Positive that matches the user request with a supplied phone number. The phone number gets called and a keyed response is required to make sure you're on your phone.
Typically, this is a single key, which makes for the two-factor label. But if you like, you can implement a PIN number per user, actually extending the process to three-factor. It's also not a cell phone-only platform. Positive says some of their early users are aiming them at desktop phones, thus making sure that users at remote sites are at their desk when the VPN is accessed.
Best news: It's free. For the average SMB it's a no-cost. For enterprises that want to manage the whole thing themselves, there will be premium enterprise modules.
I'm sure the thing is hackable via cell phone spoofing or something equally sophisticated, but it would be a highly involved process. Overall, for day-to-day SMB use, I think it's highly usable provided it works as advertised.
Regarding Positive Networks' new channel program, the company introduced it specifically to attract smaller technology providers. Especially those who are short on staff and looking for ways to add more billable hours with little additional work overhead. The program has three partner levels, but the nice thing there is that it's not looking to qualify potential partners based on some expensive certification process. That's mainly because Positive will continue to provide level 1 support, thus making deep knowledge on the reseller's part unnecessary.
Instead, what they're looking for is a customer base and target that consistently ask for or require VPN service--and are willing to pay for it. That's a MUCH more attractive partner filter for smaller technology partners. For more specifics on the new program, check here.
Posted by Oliver Rist on May 21, 2007 04:29 PM
RATE THIS ARTICLE:
-

- COMMENTS
Thanks for the kind words! One clarification: the system is actually aimed at securing more than just VPN devices/services - it can also handle most Web applications, like Citrix, Outlook Web Access, and more. And, with RADIUS support, it can slip into a ton of off-the-shelf authentication systems.
We've had this in development for a long time. It feels good to finally be able to talk about it. :-)
Steve Dispensa
CTO, Positive Networks
I noticed the service isn't available yet. For those who are interested in a service available now we use a service called Nedu from a company called Gardanto (www.gardanto.com). We are a small consultancy and use it to secure our Internet exposed systems.
It's not free, it costs $0.25 / authentication, but it works out quite cheap for us.
Posted by: Dean at May 22, 2007 01:01 AMThe service is currently in closed beta, and will be generally available over the summer. But I promise, it'll be worth the wait!
Posted by: Steve Dispensa at May 23, 2007 06:47 AM| EMERGING ENTERPRISE PODCAST |
| Listen to the latest podcast: |
MP3
•
•
•
Archive
•
|
TOP STORIES
ADDITIONAL RESOURCES

- Remote Access: Maintain Security and Decrease the Burden on IT
- Beyond AntiVirus: Symantec Endpoint Protection
- What Every Enterprise Needs to Know About VDI

- Disaster Recovery in Minutes
- Protecting Microsoft(R) Applications
- Reduce Recovery Times and Tape Costs






![[VoiceIndigo Mobilize - Listen to podcasts on your mobile phone]](http://www.voiceindigo.com/ht/images/mobilize_logo_sm.gif)
