rsaccess-banner

RSAccess Secure Data Access

Recent researches show that six out of ten organizations around the globe have suffered at least one Cyber-attack incident on their networks, applications, websites, critical infrastructures, mobile, etc.

The common practice in organizations is to deploy defense layers acting as “walls” and “gates” protecting from intrusions to their internal networks. These defense layers include DMZ (demilitarized zone, also known as “perimeter”) network segments and layers of firewalls.

However, the rise in number of cyber-attacks and data breached, shows us that the current network security paradigm is flawed.

DMZ network segments are deployed not only as defense layers but also in order to provide customers, partners and suppliers with controlled access to corporate data. As more and more sensitive data from the internal network is duplicated in the DMZ, this perimeter network designed to be a buffer zone has become a prime target for hackers, providing IT departments with the following challenges:

  • Risk of Sensitive Data Breach – the DMZ is now a hub of external facing services containing large amounts of sensitive data, SSL keys, SSL certificates, and personally identifiable information resulting in greater risk of data breaches.
  • Preventing Hacking into the Internal Network from the DMZ – most front-end servers located in the DMZ communicate with servers within the LAN through an incoming port in the firewall, which hackers can utilize to launch attacks into the internal network. In addition such servers are accessible from the Internet and can be compromised by hackers, providing a second means of attacking the internal network.
  • Increased Capital Costs – the DMZ network configuration also imposes a costly burden on the enterprise’s capital expenses requiring additional hardware and software licenses as a result of duplicating sensitive data in the DMZ.
  • Higher Operational Costs – This additional hosting and synchronization of duplicated data between the LAN and DMZ requires a complex layer of data and network operations which can be complicated.

Why Are We The Best?

Download RSAccess Secure Data Access Brochure

Download RSAccess Secure Data Access White Paper

RSAccess Secure Data Access Video

RSAccess Secure Data Access Demo

Register For Our Webinar

MOVIE-rsaccess

As discussed above, the network security paradigm is flawed not only within the DMZ network segments. Firewalls themselves which were traditionally thought of as impenetrable “gateways into the organization”, are now known to be vulnerable to attacks such as Shellshock and others.

It is clear then, that a paradigm change is needed in order to overcome the challenges of today’s network security practices and effectively combat cyber-attacks.

Safe-T’s RSAccess Secure Data Access is disruptive and breakthrough secure reverse-access solution that is designed to overcome the challenges of today’s DMZ networks and network segmentation, prevent criminal application access, application hacking, and protect classified networks within the enterprise infrastructure.

With RSAccess organizations start their journey to complete elimination of the DMZ, close incoming ports in the firewall, and eliminate sensitive data and application servers from the DMZ while gaining immediate costs savings.

Safe-T’s RSAccess is a dual node patented technology, which removes the need to open any ports within a firewall, while allowing secured network access between networks (through the firewall).

RSAccess Secure Data Access solution is a two tier deployment:

  • External RSAccess Node – installed in the  DMZ / external / non-secured segment
  • Internal RSAccess Node – installed in the internal / secured segment

The role of the external RSAccess node is to act as a front-end to all services published within the DMZ. It operates without the need to open any ports within the internal firewall and ensures that only legitimate session data can pass through into the LAN.

The role of the internal RSAccess node it to pull the session data into the LAN from the external RSAccess node, scan it using various application level security techniques, and then pass it to the destination application server.

graph-2

RSAccess Features

  • Secure reverse access to any TCP based app
  • Dual node patented solution
  • Unidirectional application aware traffic flow
  • No need to open incoming ports in the firewall
  • Application and protocol agnostic
  • IPSec tunnel between both nodes
  • SSL offloading on internal node
  • Block application, network and firewall based attacks
  • Offers robust authentication options for registered and non-registered users
  • On premise or cloud deployment

RSAccess Benefits

  • Closes incoming ports in the firewall
  • Simplify network and DMZ architecture, removing hackable DMZ components
  • Eliminate sensitive data, SSL keys and certificates from DMZ
  • Gain costs savings by eliminating hardware and license duplications
  • Mask the true location of the organization’s data center
  • Removes certificates distribution to partners
  • Transparent access to internal applications for external users, without the need to deploy a VPN

Robust deployment options:

Secure Access Gateway

RSAccess improves the foundation of the Zero Trust Network design, by allowing secure reverse-access to Zero Trust Network MCAP segments, making it an even more secure and revolutionary design.

Learn More

Secure Application Front-end

Allows secure reverse-access to any application without opening any ports in the firewall, by deploying RSAccess as part of the application by an organization or software vendor (in the form of an OEM) in the DMZ.

Learn More

Cloud DMZ

Secure reverse-access to entire organizations’ data centers with a one-of-a-kind cloud security service. This solution enables complete masking of the organization’s true location and architecture from external users and attackers.

Learn More

Application Access Proxy

Revolutionizes the way organizations grant secure external access to services and applications, to registered and non-registered business partners.

Learn More