HP, NA upgrade security offerings

On the eve of a major networking trade show, Hewlett-Packard and Network Associates joined more than a dozen other vendors in announcing new security offerings.

HP today released new versions of its Praesidium VirtualVault, secure operating system and its Authorization Server, which grants access to parts of a corporate network or to specific types of data to users. Network Associates announced a new version of its enterprise antivirus software.

Also making security announcements today in advance of this week's Network+Interop trade show in Atlanta were IBM on smart cards, encryption company Certicom, Hi/fn, and others.

In addition, Entrust Technologies outlined its virtual private network strategy, and other VPN companies also made news. (See related story.)

HP trumpeted integration between the new versions 3.1 of Virtual Vault and Authorization Server.

"They can be bought separately or work together in tandem," said Julie Rockell, product marketing manager for VirtualVault. "HP is trying to get beyond point solutions by integrating with partners. That eliminates the trade-offs between the opportunities of the Net and the risk of exposing all mission-critical applications."

VirtualVault, a hardened version of Unix, complements firewalls and routers by protecting Web servers and applications. Authorization Server 3.1 "snaps into" VirtualVault 3.1 and provides selective access to Web-enabled applications, Web pages, Web applets, and CGI scripts without changing any of them. Access is controlled by business rules based on user identity and specific limits on transactions being performed.

Authorization Server authenticates users via user names and passwords, hardware tokens, Kerberos-based security tickets, or digital certificates.

Network Associates announced VirusScan 4.0 Enterprise Edition, its flagship antivirus software that integrates Network Associates own McAfee technology with antivirus code from Dr Solomon's, which it acquired in June.

VirusScan 4.0 combines desktop detection of more than 22,000 viruses, Active X and Java hostile applets, Internet and corporate e-mail infection, and security threats like Back Orifice and Net Bus.

Network Associates also announced a strategy based on its AutoImmune technology, which automatically detects, removes, and creates cures for previously unknown viruses that could infiltrate corporate networks. The technology will be integrated with the companies Total Virus Defense security products.

AutoImmune Server, the cornerstone of the AutoImmune technology, will be available in the second quarter of 1999. This antivirus tool will provide automated detection and automatic updates, aiming to cut how much time taken up resolving virus outbreaks.

Also, HP and crypto chip manufacturer Hi/fn said they have a technical system that will allow manufacturers of routers and other network devices to export strong cryptography with hardware acceleration using Hi/fn's 7751 Encryption Processor.

In other security news at N+I:

Elliptic curve cryptography vendor Certicom said Comtron, which distributes wireless networking products in Japan, will market Certicom's security products to Japanese systems integrators and manufacturers.

Aliroo is expected to announce that its PrivaWall 1.0 is now shipping. The software, which is supported by Check Point's FireWall-1 software, provides email authentication. It works in conjunction with an existing email server, allowing network managers to enforce security policies for encryption, authentication, and filtering.

Finjan is expected to introduce a new feature in its flagship SurfinGate security software to guard against malicious JavaScript, which has been used in several recent attacks. The 4.02 version will inspect JavaScript code at the Internet gateway.